Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/KDk9Ympet0FJek3NVJNSkHvLt1A.roa
File: KDk9Ympet0FJek3NVJNSkHvLt1A.roa (raw, json)
Hash identifier: AqS9QPM+GuWejchwEeU9gqUjFImNZvH95KL/HsuMg7w=
Subject key identifier: 28:39:3D:62:6A:5E:B7:41:49:7A:4D:CD:54:93:52:90:7B:CB:B7:50
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018CC3488CE58F91884F344914950F87DC8A
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/KDk9Ympet0FJek3NVJNSkHvLt1A.roa
Signing time: Mon 01 Jan 2024 04:29:20 +0000
ROA not before: Mon 01 Jan 2024 04:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30823
IP address blocks: 185.244.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8c:e5:8f:91:88:4f:34:49:14:95:0f:87:dc:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 04:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28393d626a5eb741497a4dcd549352907bcbb750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:ad:bb:dd:75:79:b9:4a:0e:16:96:9c:60:
eb:92:44:3c:ca:ac:9b:4a:5b:0b:f0:05:27:94:f2:
cd:64:92:96:49:f5:d3:49:8a:e7:00:9e:be:93:e7:
84:e9:f2:d3:38:c0:e7:75:4d:a5:b1:3c:7d:e5:90:
4d:a0:3f:4b:25:d6:2e:a9:40:18:c6:42:1a:27:5f:
6c:14:0a:c2:51:41:5a:6e:06:b6:eb:d5:ba:f8:62:
06:59:95:5f:50:52:1f:38:f5:e5:54:d2:51:9a:31:
10:ef:81:7b:0f:85:dc:d3:44:14:c8:b5:3a:fb:1a:
56:f5:96:e4:42:80:d3:28:1a:d7:29:4b:d4:de:8f:
2d:44:94:7e:8d:75:64:e5:80:4d:26:cd:22:65:1e:
69:88:6a:2c:f3:3a:1a:c2:8c:99:97:dd:e5:72:4b:
cc:e4:e2:5f:ef:09:6c:13:16:ac:4c:e7:f4:f1:f3:
f8:2b:26:f8:59:69:44:a9:d6:ef:10:03:19:4a:07:
c8:10:89:59:6f:09:13:b6:c9:52:bc:95:75:81:5c:
f3:03:c0:79:06:fb:d6:87:0b:b4:b9:12:32:7e:9c:
06:81:a2:64:84:18:66:ea:71:fa:cf:df:1b:c3:17:
53:e7:f3:2c:30:6b:69:fd:52:b3:7b:99:77:4a:7f:
ba:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:39:3D:62:6A:5E:B7:41:49:7A:4D:CD:54:93:52:90:7B:CB:B7:50
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/KDk9Ympet0FJek3NVJNSkHvLt1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.29.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5a:a3:37:1d:d0:6c:4b:60:34:e7:a6:a7:f4:7d:a4:0b:10:
ec:9d:8f:64:b4:e9:41:71:d9:6b:47:4b:78:b0:0a:29:e3:0a:
f2:18:e1:db:08:f8:7b:db:df:0c:3f:5b:b7:a4:ff:06:eb:ab:
96:90:bd:69:b6:c5:0e:b0:22:f2:e1:91:46:97:fd:50:f5:79:
4d:b9:03:a3:9f:35:3f:26:70:7d:20:92:6d:4a:fe:30:bc:6f:
3f:88:1f:03:4d:7f:83:96:01:3a:15:ce:46:19:bf:b2:3c:25:
38:a4:ea:aa:9a:4d:45:51:f3:b5:11:db:e5:96:ca:0a:cd:6f:
56:48:b7:d3:14:ba:3a:5a:8b:4e:a6:3c:a5:80:d7:cc:95:79:
fa:eb:76:50:fb:68:1c:e8:2e:c0:9b:6c:92:bd:a9:eb:7f:4b:
ca:29:3c:c4:81:da:2e:a5:b0:4e:ca:73:48:86:d5:b2:f6:e3:
1c:dc:4a:6a:3c:63:b8:1c:ce:8f:a2:7a:e4:43:f0:7a:93:06:
e8:d6:f1:6d:58:b7:7a:7f:05:88:85:bd:00:f3:6b:57:39:46:
32:6f:39:3d:07:75:1a:49:71:db:d3:0c:77:95:93:32:0a:40:
93:b6:e8:39:de:f1:a0:49:b5:73:86:36:fd:3d:8b:b1:47:d1:
f1:2d:57:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:48:40 2024 by rpki-client on console-ams.rpki-client.org