Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/K1OG9Jdgt1wItL7Fuoy9BzXi_D0.roa
File: K1OG9Jdgt1wItL7Fuoy9BzXi_D0.roa (raw, json)
Hash identifier: ySveqQdBuEC4HroTUkG0m+yZacKaoEOIQJG820PmWvQ=
Subject key identifier: 2B:53:86:F4:97:60:B7:5C:08:B4:BE:C5:BA:8C:BD:07:35:E2:FC:3D
Certificate issuer: /CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Certificate serial: 018F118C26981E000D649C8BBFBEE89B9B82
Authority key identifier: 68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/K1OG9Jdgt1wItL7Fuoy9BzXi_D0.roa
Signing time: Wed 24 Apr 2024 19:19:08 +0000
ROA not before: Wed 24 Apr 2024 19:19:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 185.92.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:11:8c:26:98:1e:00:0d:64:9c:8b:bf:be:e8:9b:9b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Validity
Not Before: Apr 24 19:19:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b5386f49760b75c08b4bec5ba8cbd0735e2fc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:9f:c6:00:af:d0:0c:8f:18:1d:42:04:7a:
81:24:4d:d4:dd:7a:82:6a:42:54:30:21:fc:43:26:
d6:6f:6a:7b:fc:b9:1c:17:14:70:4f:4a:ec:6d:27:
4d:02:20:b3:08:9e:de:0e:85:9a:87:39:40:73:f1:
70:37:e9:da:56:d0:d6:84:2a:2e:e9:b5:e8:32:87:
23:9e:e0:4a:21:54:6f:1f:c5:eb:72:c2:d2:08:05:
4e:58:b8:e2:db:cc:b7:fd:e1:75:74:77:89:0a:7f:
c7:2a:cd:d3:2d:af:99:fb:8a:ff:30:3c:ac:99:0a:
00:13:f6:5a:07:d6:09:87:4c:f7:fa:15:d0:da:75:
b4:c1:6d:87:71:8c:91:3f:d9:52:e9:9e:fc:5d:2b:
48:16:a2:43:cf:05:6f:84:af:55:ed:2d:50:cb:5e:
d8:87:5b:a7:8b:75:d6:73:6a:cc:b6:5b:46:2c:ef:
c9:47:56:5f:70:d0:d3:b3:cd:53:2a:03:92:36:bb:
5f:dc:4e:52:f7:07:2f:17:3f:c2:f4:96:10:05:75:
ab:2d:12:bf:54:95:80:dd:3d:d0:c9:73:db:c5:b3:
7c:b5:25:7a:ec:7d:cd:50:0c:14:08:10:4c:43:80:
06:3c:90:d7:31:15:cd:26:ab:47:a5:86:22:c9:c4:
c5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:53:86:F4:97:60:B7:5C:08:B4:BE:C5:BA:8C:BD:07:35:E2:FC:3D
X509v3 Authority Key Identifier:
keyid:68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/K1OG9Jdgt1wItL7Fuoy9BzXi_D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.208.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:9c:6e:27:23:88:7f:1e:b9:33:19:b3:2a:2b:4b:70:3b:f4:
9b:29:02:5b:be:66:93:80:df:77:bf:4d:29:0a:cb:74:fe:23:
e1:ee:e1:c7:d2:b5:42:32:90:23:dc:48:2f:68:12:16:65:8a:
0c:8d:d2:47:78:1b:ea:f9:1c:81:84:8c:5c:47:61:f1:ee:b7:
cb:61:8d:e3:5b:3a:1d:19:f5:c8:0a:72:52:fb:8a:36:e9:14:
f3:4d:63:11:68:a2:e5:76:52:29:fa:99:15:b3:6e:32:5b:f7:
4f:b9:86:cb:31:50:e0:6a:a6:4c:d9:aa:6a:ad:bb:6b:3a:a5:
22:43:51:4a:a8:a9:c1:a1:27:2d:ef:99:80:59:08:6a:54:bd:
5e:de:8a:cb:92:49:fa:48:54:62:88:6d:45:3a:b7:4b:08:03:
7d:33:ab:a6:a0:c8:1a:d2:0f:45:3d:56:9b:ea:10:dc:14:e3:
15:28:be:88:26:09:0b:3b:38:a6:16:56:28:49:2b:55:4e:6c:
fa:b7:49:4d:d8:90:57:af:02:72:19:1c:06:25:21:bf:e4:f0:
8f:dd:ac:a1:0b:73:b7:10:fd:12:5f:11:64:9e:30:2f:4a:36:
3d:a9:1a:dd:e4:ee:4c:0b:cf:c9:54:72:84:5e:97:a4:81:2f:
dc:8c:87:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:26:17 2024 by rpki-client on console-ams.rpki-client.org