Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/Kwwu5_aXZ_81AsKndCA06Xedp3I.roa
File: Kwwu5_aXZ_81AsKndCA06Xedp3I.roa (raw, json)
Hash identifier: zU/RPxRdBuMLlUL/iXb9OuqkZQt42BRpz5or81/49No=
Subject key identifier: 2B:0C:2E:E7:F6:97:67:FF:35:02:C2:A7:74:20:34:E9:77:9D:A7:72
Certificate issuer: /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Certificate serial: 018CC94D92BD905089847023546D717643C7
Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/Kwwu5_aXZ_81AsKndCA06Xedp3I.roa
Signing time: Tue 02 Jan 2024 08:32:33 +0000
ROA not before: Tue 02 Jan 2024 08:32:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28716
IP address blocks: 185.9.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:92:bd:90:50:89:84:70:23:54:6d:71:76:43:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Validity
Not Before: Jan 2 08:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b0c2ee7f69767ff3502c2a7742034e9779da772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:6f:85:4b:46:45:17:3f:b4:7f:12:61:4e:
53:b2:0b:98:92:c5:67:d1:e3:8f:31:7e:88:80:57:
09:bc:25:01:58:12:60:f3:bf:9b:af:43:3e:e7:bf:
43:fc:84:19:21:75:82:16:bd:d5:fe:04:35:03:c9:
96:73:53:2f:6d:fa:37:22:0c:9b:b4:66:28:c9:6a:
08:d6:71:02:b2:bf:5b:45:50:d7:25:48:6d:b8:04:
5b:8c:e5:6a:c2:82:36:15:49:93:75:82:da:40:eb:
f3:7a:84:94:72:73:09:88:2d:c7:18:8f:76:5a:bd:
d6:3d:91:ed:4a:82:e7:3f:bf:97:41:d3:64:ff:79:
58:56:54:2f:d2:62:2b:52:2e:93:7c:a3:65:e4:c4:
2d:98:ad:f0:22:36:b8:61:8c:00:2d:30:74:e7:97:
16:da:28:1a:18:6c:32:71:98:49:da:c2:3e:85:fc:
9c:03:e7:7f:d4:0a:da:33:03:01:6c:a8:0b:26:c7:
73:62:f1:07:c9:8d:42:b0:7f:bc:0b:4a:61:46:8a:
2f:04:1f:30:89:b1:23:ab:4d:c1:d0:d4:b5:86:1c:
18:ff:b6:bf:94:c7:a1:a6:02:e5:c4:b9:5c:5f:ea:
43:07:03:68:4c:53:0f:8f:74:eb:1a:3d:2c:bf:14:
c8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0C:2E:E7:F6:97:67:FF:35:02:C2:A7:74:20:34:E9:77:9D:A7:72
X509v3 Authority Key Identifier:
keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/Kwwu5_aXZ_81AsKndCA06Xedp3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.148.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:30:cc:ac:2c:a3:35:27:47:76:0c:c3:50:10:5c:e5:2a:8e:
c0:51:71:f3:e0:36:5f:21:30:a4:c6:de:43:5e:81:ba:30:74:
64:5e:d9:a6:0b:73:a8:50:6a:36:7c:56:1e:88:dd:1e:df:b8:
e8:4d:c1:48:d8:38:ea:af:b4:73:77:fb:5f:52:7f:cd:63:43:
9c:b0:04:97:fd:28:f7:2a:af:f9:26:ea:76:5b:ff:c5:1a:81:
43:bb:47:d1:12:08:c6:e7:66:d4:a4:90:a5:45:65:34:b3:91:
ad:96:72:c5:93:7a:f3:2e:ad:f9:43:f0:68:f3:b3:f4:35:9b:
f9:b1:80:db:c7:26:c8:54:ce:6e:76:3a:63:07:ac:e0:50:a1:
ac:c0:ca:56:40:3f:75:40:68:dd:1a:a6:92:0c:5d:da:b8:03:
2f:9f:19:7a:86:3a:6d:36:8d:2a:30:c7:d4:9c:0e:a4:20:ee:
2f:20:e5:e2:5a:a9:ac:1c:6f:51:91:01:62:40:77:ca:b9:72:
9b:3b:48:ea:15:58:ab:93:52:cf:44:28:71:37:19:6e:28:2a:
2b:c3:e5:8e:72:98:aa:0f:d3:c1:e2:58:9f:1f:70:db:2e:26:
2d:90:f7:0a:03:63:e1:a0:0c:f6:d2:fa:46:55:9a:c9:39:25:
b1:ef:25:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTZK9kFCJhHAjVG1xdkPHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTMzYTY1MjNlMmVkMGEwYzlhMzZlYThhN2M2ZjBlNzJh
NWRkNjQwHhcNMjQwMTAyMDgzMjMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjBjMmVlN2Y2OTc2N2ZmMzUwMmMyYTc3NDIwMzRlOTc3OWRhNzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvlvhUtGRRc/tH8SYU5TsguYksVn
0eOPMX6IgFcJvCUBWBJg87+br0M+579D/IQZIXWCFr3V/gQ1A8mWc1Mvbfo3Igyb
tGYoyWoI1nECsr9bRVDXJUhtuARbjOVqwoI2FUmTdYLaQOvzeoSUcnMJiC3HGI92
Wr3WPZHtSoLnP7+XQdNk/3lYVlQv0mIrUi6TfKNl5MQtmK3wIja4YYwALTB055cW
2igaGGwycZhJ2sI+hfycA+d/1AraMwMBbKgLJsdzYvEHyY1CsH+8C0phRoovBB8w
ibEjq03B0NS1hhwY/7a/lMehpgLlxLlcX+pDBwNoTFMPj3TrGj0svxTIoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCsMLuf2l2f/NQLCp3QgNOl3nadyMB8GA1UdIwQY
MBaAFBITOmUj4u0KDJo26op8bw5ypd1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2Et
ODI0NzI5YWI0YjlhLzEvS3d3dTVfYVhaXzgxQXNLbmRDQTA2WGVkcDNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2EtODI0NzI5YWI0Yjlh
LzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQmUMA0G
CSqGSIb3DQEBCwUAA4IBAQAaMMysLKM1J0d2DMNQEFzlKo7AUXHz4DZfITCkxt5D
XoG6MHRkXtmmC3OoUGo2fFYeiN0e37joTcFI2Djqr7Rzd/tfUn/NY0OcsASX/Sj3
Kq/5Jup2W//FGoFDu0fREgjG52bUpJClRWU0s5GtlnLFk3rzLq35Q/Bo87P0NZv5
sYDbxybIVM5udjpjB6zgUKGswMpWQD91QGjdGqaSDF3auAMvnxl6hjptNo0qMMfU
nA6kIO4vIOXiWqmsHG9RkQFiQHfKuXKbO0jqFVirk1LPRChxNxluKCorw+WOcpiq
D9PB4lifH3DbLiYtkPcKA2PhoAz20vpGVZrJOSWx7yVy
-----END CERTIFICATE-----
Generated at Sat Jun 8 07:08:11 2024 by rpki-client on console-fra.rpki-client.org