Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d34378-7da4-4233-9522-54eb7c07aac4/1/K0QWHV8vnXbv4vQ1Exr16OABVGE.roa
File: K0QWHV8vnXbv4vQ1Exr16OABVGE.roa (raw, json)
Hash identifier: eB6aa8OMI4zxfyTU7a4XQsrFDn0MCJ2Qox6jMHJ7wjg=
Subject key identifier: 2B:44:16:1D:5F:2F:9D:76:EF:E2:F4:35:13:1A:F5:E8:E0:01:54:61
Certificate issuer: /CN=811100ee46bf67a8495e8d356356966a8d2f7e65
Certificate serial: 018CC42512064C1273B086B9449306CE2A21
Authority key identifier: 81:11:00:EE:46:BF:67:A8:49:5E:8D:35:63:56:96:6A:8D:2F:7E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gREA7ka_Z6hJXo01Y1aWao0vfmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d34378-7da4-4233-9522-54eb7c07aac4/1/K0QWHV8vnXbv4vQ1Exr16OABVGE.roa
Signing time: Mon 01 Jan 2024 08:30:12 +0000
ROA not before: Mon 01 Jan 2024 08:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 217.114.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d34378-7da4-4233-9522-54eb7c07aac4/1/gREA7ka_Z6hJXo01Y1aWao0vfmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d34378-7da4-4233-9522-54eb7c07aac4/1/gREA7ka_Z6hJXo01Y1aWao0vfmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gREA7ka_Z6hJXo01Y1aWao0vfmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:12:06:4c:12:73:b0:86:b9:44:93:06:ce:2a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=811100ee46bf67a8495e8d356356966a8d2f7e65
Validity
Not Before: Jan 1 08:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b44161d5f2f9d76efe2f435131af5e8e0015461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2b:0f:c0:7a:36:bd:e3:2f:e7:7f:f4:9b:c5:
bc:26:d2:0f:37:ca:d0:78:73:c6:5c:ca:f5:fa:5e:
d8:ed:51:2c:ea:39:bc:5f:b4:ed:c8:9a:1e:c2:c9:
49:e5:9b:84:d4:f7:f1:4a:41:f6:6d:fc:94:c7:8c:
18:c8:f7:e6:cf:c5:fc:8d:fa:da:7f:c6:a0:5e:1b:
a9:ca:43:17:fd:cd:43:5a:18:b1:4b:a5:cf:20:de:
28:8b:ae:f1:5f:7e:7b:ea:e2:11:1c:de:d4:71:ec:
62:36:75:7e:90:35:c5:d7:24:34:33:27:7c:6c:3d:
d2:ea:f9:1a:49:81:eb:86:2a:e8:ad:e8:76:37:96:
5e:86:80:e0:c4:a1:61:c3:ca:cc:14:34:c1:a3:1c:
ec:39:0e:71:06:6b:fc:f0:f4:04:63:67:90:8f:c5:
5e:26:f3:35:df:a6:ac:d8:7e:a5:aa:a4:fa:93:fc:
de:6f:a5:ca:1d:9a:d4:aa:21:8c:2c:3d:52:24:f8:
86:3e:10:ec:d8:0b:af:4b:14:6e:3a:c6:bc:49:6b:
1d:ca:59:03:28:31:e8:c5:8e:7b:3e:ce:54:d3:13:
d6:18:9c:e5:4e:27:74:a8:c9:5b:65:5c:6c:dd:6a:
42:bf:29:49:d8:07:85:45:e0:bc:d8:cd:d4:4e:25:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:44:16:1D:5F:2F:9D:76:EF:E2:F4:35:13:1A:F5:E8:E0:01:54:61
X509v3 Authority Key Identifier:
keyid:81:11:00:EE:46:BF:67:A8:49:5E:8D:35:63:56:96:6A:8D:2F:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gREA7ka_Z6hJXo01Y1aWao0vfmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d34378-7da4-4233-9522-54eb7c07aac4/1/K0QWHV8vnXbv4vQ1Exr16OABVGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d34378-7da4-4233-9522-54eb7c07aac4/1/gREA7ka_Z6hJXo01Y1aWao0vfmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.44.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:76:76:7c:fd:47:04:14:c5:fd:96:2f:1a:e2:89:3f:a3:b4:
23:cc:a7:c5:aa:75:b8:6a:6b:9f:41:fb:a6:e6:e0:60:25:21:
a0:e4:ec:57:d0:c3:b9:c1:2b:bd:e4:22:79:e0:dd:1e:b9:3f:
bc:e4:1a:0f:a7:d4:b5:72:3b:d7:05:9d:69:49:b6:cc:4d:c8:
da:97:be:84:6c:76:22:65:93:05:7b:31:c7:85:ae:69:91:94:
6c:03:9a:8c:86:3e:39:ad:3e:bd:d9:a6:11:db:39:20:5c:2c:
45:d9:ed:97:7b:e5:ed:e8:bc:2f:c9:4b:7f:a7:9f:b7:4c:27:
ed:67:a6:a7:65:e6:34:59:3e:59:ae:53:24:f5:ad:dd:8a:d8:
ec:2b:73:d2:eb:4c:91:a0:cd:6d:e3:2b:13:25:1c:09:62:d1:
41:86:a3:82:fe:ef:01:20:3a:52:54:bf:94:60:3b:be:e5:13:
b3:34:54:50:59:1e:8f:60:21:f7:83:56:3d:c3:4e:49:3f:39:
11:12:8d:78:5e:02:36:29:6c:62:50:5d:04:0c:7e:db:87:a9:
d0:c2:00:16:35:80:42:62:38:83:d5:da:d6:cf:2b:2a:37:c7:
45:ec:e3:c6:a3:47:0f:af:ba:3f:e4:68:e3:7f:ef:71:ea:73:
ea:f0:af:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:06:11 2024 by rpki-client on console-fra.rpki-client.org