Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ckyXExbUqPFdR5c70FHvNozCTB8.roa
File: ckyXExbUqPFdR5c70FHvNozCTB8.roa (raw, json)
Hash identifier: EBYJCWdjn8aJSEAmaVDzGSl8KsLxwYNZIS7nZgayrew=
Subject key identifier: 72:4C:97:13:16:D4:A8:F1:5D:47:97:3B:D0:51:EF:36:8C:C2:4C:1F
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 0191D748A8F39ABC14216F7F4A6DB759421C
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ckyXExbUqPFdR5c70FHvNozCTB8.roa
Signing time: Mon 09 Sep 2024 14:55:48 +0000
ROA not before: Mon 09 Sep 2024 14:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8492
IP address blocks: 185.195.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d7:48:a8:f3:9a:bc:14:21:6f:7f:4a:6d:b7:59:42:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Sep 9 14:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=724c971316d4a8f15d47973bd051ef368cc24c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:93:70:cf:90:ad:a9:53:24:68:50:ad:02:
79:bb:63:57:67:8b:8e:bb:8d:cd:35:b4:e2:75:a9:
13:11:da:f5:ee:37:16:b5:aa:8a:81:e2:e6:18:e1:
3e:20:76:c7:70:75:85:67:88:9d:43:17:8e:37:da:
12:1d:c2:6a:82:35:0c:76:b6:d3:bb:d2:45:98:bb:
53:44:a7:e5:3c:8d:6f:55:c5:2e:19:81:72:0c:f8:
fc:ee:15:4c:48:c5:ee:98:e9:1a:46:a8:84:c4:9c:
71:bb:4e:89:ce:1f:6a:15:ac:1d:72:70:60:8e:06:
54:99:35:e9:b8:46:78:69:f6:36:61:1f:1d:0d:4d:
ce:42:d8:7c:7e:7b:6a:6e:ae:44:4e:fc:51:7c:ee:
fb:9a:1a:d6:91:b4:4d:e4:9e:5f:37:a4:0f:6a:e3:
98:e9:ca:ab:d5:a1:04:46:9a:b4:b5:3a:65:85:5a:
ed:1f:60:f3:12:6c:38:43:c4:04:9b:0b:23:9a:41:
45:b0:45:21:00:f7:90:db:d0:cc:fd:81:a4:ba:47:
e3:d7:26:9c:aa:8f:38:7c:71:d5:09:0a:f2:bc:3b:
6a:1a:3d:cd:f0:c7:84:22:d6:6a:8f:23:e3:59:ca:
a7:fd:c2:3b:98:58:9b:28:12:e1:5c:40:30:ab:4f:
6b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4C:97:13:16:D4:A8:F1:5D:47:97:3B:D0:51:EF:36:8C:C2:4C:1F
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ckyXExbUqPFdR5c70FHvNozCTB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.242.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:5f:ed:9e:90:ef:81:3a:5f:0d:6e:04:c3:35:e4:eb:da:c0:
d4:9a:1f:a2:95:a0:80:00:7c:3f:72:72:55:c6:79:9a:fa:67:
a4:ff:40:af:bb:f3:9b:22:30:07:30:7e:d8:86:ac:34:dd:5b:
76:2a:df:72:bb:dd:c7:90:46:c5:58:26:44:05:8e:7e:17:aa:
b8:99:50:70:20:9b:ba:e1:2a:4b:f4:65:60:4f:9b:85:0d:f1:
cb:43:d8:f6:40:10:14:5b:74:67:c6:e6:89:95:88:c6:bb:dd:
8a:7f:c9:e7:49:92:a2:c8:a9:31:5e:c5:59:c7:79:4e:de:27:
87:98:32:b7:39:8d:e0:02:93:c3:39:98:08:40:df:79:6e:bc:
fd:0e:ec:19:ea:e4:82:d1:01:e4:19:e8:53:fb:80:29:ce:c9:
62:52:74:06:ed:b0:0b:9e:f8:88:06:95:95:7b:88:eb:76:95:
09:aa:22:cf:b0:1c:f9:c9:24:e1:5b:1f:49:c1:71:09:e3:f5:
a5:24:99:89:71:f9:fa:36:56:0e:07:e5:cc:ac:b0:c4:50:f9:
f5:76:23:5d:c2:f0:d1:f1:eb:34:14:7b:1b:32:0c:b9:d3:61:
12:88:c4:07:b0:a7:65:97:02:8e:96:76:14:24:22:30:57:d3:
46:c9:79:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:41:54 2024 by rpki-client on console-ams.rpki-client.org