Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/KUsJCVgPy1fTvMovfuqxtI9z3VY.roa
File: KUsJCVgPy1fTvMovfuqxtI9z3VY.roa (raw, json)
Hash identifier: /Nd2qqexq+/z2JUhe+iOicaiLexKpmKDvDJQg7xrRKw=
Subject key identifier: 29:4B:09:09:58:0F:CB:57:D3:BC:CA:2F:7E:EA:B1:B4:8F:73:DD:56
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018CC86F57ADE92C3846A4C68BAFEAA35E25
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/KUsJCVgPy1fTvMovfuqxtI9z3VY.roa
Signing time: Tue 02 Jan 2024 04:29:49 +0000
ROA not before: Tue 02 Jan 2024 04:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210512
IP address blocks: 87.251.69.0/24 maxlen: 24
87.251.68.0/24 maxlen: 24
80.66.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:57:ad:e9:2c:38:46:a4:c6:8b:af:ea:a3:5e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 04:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=294b0909580fcb57d3bcca2f7eeab1b48f73dd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:32:eb:40:41:20:17:4c:9d:cb:ec:41:4c:71:
92:f4:66:61:2b:1d:1b:32:08:8d:98:13:2d:ed:ef:
dc:d2:55:9d:08:fe:62:8d:b0:26:35:42:48:cb:b5:
d1:b8:68:c3:83:41:44:bd:dc:84:0a:45:dd:1d:3b:
5c:4c:4c:ee:a2:a0:0c:ed:5e:17:1e:d6:77:17:f7:
28:fc:12:0a:67:c1:4b:37:6f:f9:01:6a:38:50:9c:
01:02:0d:c5:7f:a7:4b:46:46:fe:4b:46:3b:8d:ca:
d4:77:b1:6d:fa:cb:45:53:15:e4:26:19:63:1a:2d:
eb:6b:a6:3e:ad:0e:ee:8e:1f:a3:c8:b2:cd:d0:ba:
3d:4d:b5:26:25:1b:07:e4:99:eb:64:49:86:a4:08:
3c:7a:24:57:2d:12:0a:0c:60:be:1b:98:cc:b9:0e:
c5:4d:79:c2:62:19:df:a4:7e:04:83:1d:75:82:e2:
2d:ca:5a:6b:e1:e0:18:38:fe:13:b8:04:b6:f0:80:
8c:bc:e9:50:8c:58:77:4b:66:21:84:ff:b7:15:c2:
d8:2c:cf:82:5e:da:22:e8:59:ba:6e:22:f1:3d:ec:
3f:f1:a0:f2:10:12:92:60:20:b5:68:3d:03:5c:f1:
77:58:81:35:37:02:4b:d5:98:9e:74:f7:57:28:9b:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4B:09:09:58:0F:CB:57:D3:BC:CA:2F:7E:EA:B1:B4:8F:73:DD:56
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/KUsJCVgPy1fTvMovfuqxtI9z3VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.72.0/24
87.251.68.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:f9:b4:e3:82:8f:35:23:88:07:02:ad:4b:a9:09:31:d6:6e:
ee:d8:ca:74:4d:d9:85:d4:db:9c:4c:c0:20:77:22:d7:f0:b2:
15:3d:ad:68:14:0b:70:5a:0e:c6:13:fb:1b:d2:60:f4:ee:f0:
8b:96:29:e6:67:da:be:af:45:45:57:b9:6d:cd:e2:a2:b8:45:
2a:64:03:bb:49:b3:a1:b9:c5:23:07:d2:fd:61:fa:37:c7:7d:
45:e9:1d:e8:eb:0d:3e:23:e3:03:7d:08:6e:f4:fa:16:2a:5d:
77:5a:7a:c4:33:bc:f9:05:74:e7:ea:22:65:15:aa:a5:f0:c7:
22:3f:60:7f:df:cb:2b:62:90:42:ef:e8:1a:3d:1f:fc:70:c3:
47:a4:90:a2:f8:ed:6a:07:1f:03:a1:2a:7c:28:21:55:42:ed:
5a:3a:b4:a0:e7:7a:2e:62:c1:e4:32:18:bb:69:94:e2:22:f8:
da:b4:6e:94:1e:0c:f0:fe:3a:d7:e0:2d:ff:48:ee:de:cd:c8:
d7:6b:af:e4:13:2b:f1:87:c3:75:8f:8f:45:3a:03:97:4f:ee:
99:ad:7e:6b:01:6a:c0:aa:3f:21:b4:9b:50:76:90:cd:83:cd:
cb:f0:5b:55:84:e3:44:91:b2:38:8a:6b:68:f2:6d:02:00:50:
d5:fc:d6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 07:50:16 2024 by rpki-client on console-ams.rpki-client.org