Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/K-kmN4olPTGCH64fX0kTuQHJmV4.roa
File: K-kmN4olPTGCH64fX0kTuQHJmV4.roa (raw, json)
Hash identifier: 44baN28nhiRLuxumWni2rpGyNqFR8pM96hszZ8YgCoo=
Subject key identifier: 2B:E9:26:37:8A:25:3D:31:82:1F:AE:1F:5F:49:13:B9:01:C9:99:5E
Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial: 018CC8DFAE751CBE1B5E99402C104A1170B1
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/K-kmN4olPTGCH64fX0kTuQHJmV4.roa
Signing time: Tue 02 Jan 2024 06:32:31 +0000
ROA not before: Tue 02 Jan 2024 06:32:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201634
IP address blocks: 185.69.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:ae:75:1c:be:1b:5e:99:40:2c:10:4a:11:70:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Validity
Not Before: Jan 2 06:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2be926378a253d31821fae1f5f4913b901c9995e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:f9:05:1f:55:b1:27:04:70:55:24:9d:01:
fc:f2:16:6d:cd:63:ac:59:54:e8:8c:b2:66:87:99:
0f:85:73:4f:ed:b6:99:4c:81:ec:f0:d2:00:7e:a6:
6a:c1:86:20:22:5f:61:c9:79:46:3e:0c:49:e8:1a:
75:49:53:02:f1:d3:9d:2c:9b:88:98:96:c5:e2:93:
dd:e1:a6:d9:4f:3e:3d:69:f8:59:2e:bf:47:43:fb:
7e:c0:d5:f1:7b:31:43:7d:2b:15:3e:eb:e7:0f:f5:
ff:59:b6:17:2a:24:ca:d6:93:12:ca:3f:06:8d:3c:
58:94:e5:9b:51:f5:0a:b1:fb:a9:f4:48:a0:00:c9:
67:f5:86:27:a2:02:0f:86:d8:7f:0c:5d:54:36:e2:
df:4b:43:52:8c:fe:91:43:2c:38:37:5e:f1:c6:c4:
84:6c:65:30:b2:a1:c2:5c:5b:1d:39:70:c4:4a:60:
b6:55:f8:bd:74:a7:81:18:7e:69:ef:70:55:5c:ed:
73:ae:cd:c8:2d:d3:ac:20:4c:33:5c:9f:25:45:8b:
d2:83:ef:7f:ac:41:34:f3:6f:a5:4c:2e:12:0a:b4:
3f:9b:d1:ca:51:82:e8:e1:9e:4f:57:16:13:01:ab:
85:95:f6:66:01:27:23:ee:19:77:69:7c:f5:7a:a9:
5d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E9:26:37:8A:25:3D:31:82:1F:AE:1F:5F:49:13:B9:01:C9:99:5E
X509v3 Authority Key Identifier:
keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/K-kmN4olPTGCH64fX0kTuQHJmV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.32.0/22
Signature Algorithm: sha256WithRSAEncryption
80:88:45:44:9d:1c:81:f5:55:4b:9c:e6:f8:26:7e:89:df:16:
ac:cb:da:58:af:b9:57:08:81:84:ac:24:44:b5:0c:1d:4b:68:
98:ba:1a:09:96:6c:90:35:38:9f:6f:73:19:55:5e:cb:13:eb:
d3:51:57:75:a7:cb:ac:8c:40:65:ed:36:6a:3a:ac:3d:8e:c4:
22:fe:14:b3:c1:ec:80:b2:ef:c0:35:ca:9f:4c:00:3f:68:68:
9b:0f:7f:36:91:5c:fa:8b:28:db:62:ef:2e:d4:23:ed:71:51:
1f:0d:77:36:cd:55:95:34:f0:e5:a8:6a:3c:a1:79:6f:68:bb:
69:39:ea:73:b2:bf:bc:ae:c9:34:48:14:0b:a2:b8:2f:4b:78:
22:30:82:f1:6e:23:4f:70:c8:93:45:2f:8b:fc:b0:3c:be:4e:
92:29:6e:3c:25:fc:ad:51:32:9c:c2:14:dd:fe:bc:13:79:55:
d6:22:68:22:67:47:24:02:9f:e2:b0:94:c2:19:4a:aa:4d:42:
12:a3:e4:e4:8d:7d:31:64:53:ff:4e:73:2b:99:fc:bd:35:e8:
0e:f7:87:df:ee:68:80:93:35:c8:47:fd:a1:3a:91:8d:ae:5b:
35:62:ae:fc:16:3f:c9:fd:e7:56:f1:77:2c:b2:55:05:46:ca:
d7:e7:0d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:07:54 2024 by rpki-client on console-ams.rpki-client.org