Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/kdTLY1XbqNPRf_QNPkX6CvmmI6o.roa
File: kdTLY1XbqNPRf_QNPkX6CvmmI6o.roa (raw, json)
Hash identifier: qCqQOQZXzu8ejM+/5QA8UQFdplXH2ShWmWJnT/PtPyk=
Subject key identifier: 91:D4:CB:63:55:DB:A8:D3:D1:7F:F4:0D:3E:45:FA:0A:F9:A6:23:AA
Certificate issuer: /CN=29cff291a03badab85e3647aa2350f13c5f26661
Certificate serial: 018CC4255205460B6AA4AC6850C0C07802CB
Authority key identifier: 29:CF:F2:91:A0:3B:AD:AB:85:E3:64:7A:A2:35:0F:13:C5:F2:66:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kc_ykaA7rauF42R6ojUPE8XyZmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/kdTLY1XbqNPRf_QNPkX6CvmmI6o.roa
Signing time: Mon 01 Jan 2024 08:30:29 +0000
ROA not before: Mon 01 Jan 2024 08:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398464
IP address blocks: 195.64.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/Kc_ykaA7rauF42R6ojUPE8XyZmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/Kc_ykaA7rauF42R6ojUPE8XyZmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kc_ykaA7rauF42R6ojUPE8XyZmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:52:05:46:0b:6a:a4:ac:68:50:c0:c0:78:02:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29cff291a03badab85e3647aa2350f13c5f26661
Validity
Not Before: Jan 1 08:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91d4cb6355dba8d3d17ff40d3e45fa0af9a623aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d1:2f:97:2c:a8:b7:ab:1e:09:a4:9a:71:b9:
f9:ca:6f:d8:72:1e:44:c9:6b:11:b1:e8:de:ba:df:
a6:c6:a3:d0:f1:2a:4e:67:3c:e9:c0:0a:6b:c8:2b:
37:a2:77:08:ab:b3:60:0b:c8:87:1d:9c:7e:55:97:
4a:34:d2:35:1d:50:8d:0f:6f:cf:96:fc:f3:75:c2:
6d:af:47:0b:b7:d3:c0:66:11:7c:b6:ef:d3:13:4a:
03:ac:6f:8c:b0:c1:d1:93:9e:02:93:f2:a1:99:84:
62:cc:cc:84:7f:92:51:43:97:95:2b:92:af:48:ce:
fc:1c:51:41:cb:ef:7a:2c:3c:4f:d8:d8:40:1a:e0:
6b:7d:6b:eb:2a:7e:dc:32:5a:b5:7a:14:fe:fa:7e:
fb:14:4b:fc:f5:11:43:e4:98:af:42:9f:da:30:e7:
c3:40:57:be:7b:5b:db:6a:7e:84:12:b5:04:f7:8c:
d5:e8:2e:b6:3d:ba:b3:6c:3d:3e:23:39:92:cc:fb:
46:06:f0:ef:5e:82:77:fe:80:ee:d5:9f:ea:a6:08:
2d:aa:38:90:a3:49:c3:5b:06:9d:69:3a:02:42:eb:
67:58:e3:d5:d5:7a:fb:aa:ba:33:ea:03:4d:11:dd:
1d:76:93:71:86:51:a6:06:ab:ea:db:33:4c:91:1a:
c8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D4:CB:63:55:DB:A8:D3:D1:7F:F4:0D:3E:45:FA:0A:F9:A6:23:AA
X509v3 Authority Key Identifier:
keyid:29:CF:F2:91:A0:3B:AD:AB:85:E3:64:7A:A2:35:0F:13:C5:F2:66:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kc_ykaA7rauF42R6ojUPE8XyZmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/kdTLY1XbqNPRf_QNPkX6CvmmI6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/Kc_ykaA7rauF42R6ojUPE8XyZmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.121.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b3:d5:fa:db:ed:af:6f:3f:7e:9f:12:2e:96:e6:bc:3d:a2:
3a:96:ed:b1:1e:41:58:8a:2a:a6:fc:00:1f:5e:64:54:70:41:
ee:20:4d:a3:16:29:85:0f:2e:cb:7e:1c:11:f3:e9:59:25:b5:
b5:ce:5b:0c:f5:55:a6:21:0c:c5:e0:14:d1:da:67:61:44:1e:
da:64:4e:45:27:c7:4f:6a:7e:41:c0:76:27:de:36:34:91:3f:
3d:c9:1f:c6:79:73:fd:ea:2f:2b:39:0d:97:b6:4e:4a:c3:90:
66:8b:e2:f5:c0:56:1c:c5:2d:80:5a:e5:6d:8e:93:5e:c3:14:
6f:36:76:a8:eb:be:54:14:4e:64:45:86:2a:b6:ab:06:a1:bf:
4a:a9:73:79:12:d2:89:19:d5:6a:d2:89:c3:58:f0:e8:43:f5:
85:41:9c:7e:87:a9:e8:a4:32:07:ed:a4:6f:18:eb:4d:67:58:
da:30:11:bb:96:e0:46:c0:77:be:0b:c6:3f:ea:ed:a7:73:e0:
e7:70:99:d8:a3:22:fa:7a:d8:43:3f:65:cf:e1:6b:fe:50:9f:
22:d5:52:72:f3:7a:9d:44:d9:d8:8a:ad:4f:42:d8:c1:38:e7:
38:a5:31:d6:fc:3e:98:57:e8:84:8f:76:94:0d:37:97:f1:db:
76:0b:0f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 08:38:28 2024 by rpki-client on console-ams.rpki-client.org