Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/KdqdPrriyweC3-NSKW4hbKsIqcI.roa
File: KdqdPrriyweC3-NSKW4hbKsIqcI.roa (raw, json)
Hash identifier: HGlVdWMm0vaue79SELHpdyurYMlkV4BZNA2iiB5r9Gw=
Subject key identifier: 29:DA:9D:3E:BA:E2:CB:07:82:DF:E3:52:29:6E:21:6C:AB:08:A9:C2
Certificate issuer: /CN=b287ff2a733e33beaf53494a90eec152bbc758bc
Certificate serial: 018CC9BBDB7DCFC8FACD8B29038655A73681
Authority key identifier: B2:87:FF:2A:73:3E:33:BE:AF:53:49:4A:90:EE:C1:52:BB:C7:58:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sof_KnM-M76vU0lKkO7BUrvHWLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/KdqdPrriyweC3-NSKW4hbKsIqcI.roa
Signing time: Tue 02 Jan 2024 10:33:00 +0000
ROA not before: Tue 02 Jan 2024 10:33:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47527
IP address blocks: 213.142.140.0/23 maxlen: 23
45.95.208.0/24 maxlen: 24
2a00:b921::/32 maxlen: 32
2a00:b920:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sof_KnM-M76vU0lKkO7BUrvHWLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:db:7d:cf:c8:fa:cd:8b:29:03:86:55:a7:36:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b287ff2a733e33beaf53494a90eec152bbc758bc
Validity
Not Before: Jan 2 10:33:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29da9d3ebae2cb0782dfe352296e216cab08a9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:fd:34:1e:69:74:5d:52:28:cf:3b:a0:86:
9d:49:7b:b6:a3:e1:52:42:d9:d9:b7:b3:3e:d2:69:
c7:ad:f1:fc:bf:62:3c:15:36:c8:a5:e3:74:58:ef:
96:79:ce:7f:3c:04:a4:d6:84:85:f5:cd:a4:cb:bb:
cb:20:73:b1:9a:33:cf:6e:3d:33:64:62:28:f1:6e:
45:b5:13:69:8d:a3:0c:a6:91:f9:3e:ac:03:78:2f:
35:e8:b3:2c:cb:80:16:7d:98:cf:aa:45:ac:66:33:
25:64:a2:f0:89:7e:1c:09:82:ad:c3:76:58:fe:e3:
46:48:33:b1:a3:ee:b2:f8:0f:f9:2d:84:07:e3:4f:
9b:56:e5:fe:94:f2:c6:ac:83:9c:1a:12:a0:be:c0:
9d:64:3d:6b:ac:44:42:db:fa:14:13:e7:60:c2:5b:
88:b3:b7:d1:78:db:73:0f:34:81:58:19:b5:b9:6e:
bf:37:74:aa:02:ce:ef:6e:ba:c9:bd:f8:23:95:74:
9e:32:89:01:2f:1b:ee:fc:6d:98:6f:75:91:7b:0a:
6e:b8:40:93:45:6d:9b:c1:7a:0b:77:e6:ce:79:50:
fe:78:1e:de:29:27:58:43:45:c6:13:3e:e0:08:17:
53:a3:3e:11:7b:95:80:2d:98:a7:88:4e:2f:4a:7f:
ce:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DA:9D:3E:BA:E2:CB:07:82:DF:E3:52:29:6E:21:6C:AB:08:A9:C2
X509v3 Authority Key Identifier:
keyid:B2:87:FF:2A:73:3E:33:BE:AF:53:49:4A:90:EE:C1:52:BB:C7:58:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sof_KnM-M76vU0lKkO7BUrvHWLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/KdqdPrriyweC3-NSKW4hbKsIqcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.208.0/24
213.142.140.0/23
IPv6:
2a00:b920:200::/40
2a00:b921::/32
Signature Algorithm: sha256WithRSAEncryption
a6:aa:51:77:8d:dd:de:75:3f:c9:8b:45:94:46:4b:46:47:b1:
ad:ce:f5:4c:d6:8c:09:3b:b5:ef:1b:10:0d:22:35:ce:2b:47:
a8:52:b8:ce:4f:d4:c6:c9:3a:2b:13:58:48:da:1c:a9:ce:fc:
df:a7:d3:53:5c:11:58:3d:2e:1a:9d:a7:93:7f:7e:41:d4:73:
63:01:63:5b:f4:a9:9b:30:69:30:e1:2b:85:83:d4:13:ae:30:
12:35:95:75:fe:77:9e:0d:07:f1:c5:f9:6e:c9:ed:09:17:19:
d2:09:3f:78:51:02:f9:08:44:dd:c6:52:7d:5b:26:a2:c9:fe:
55:92:4c:c0:74:d3:ad:67:38:0e:da:22:4d:ce:2e:03:27:d0:
40:7d:24:fb:72:e0:26:ef:e8:dd:1e:15:a4:f0:cb:dc:cd:95:
ba:aa:bb:ab:9e:09:0c:3d:35:9d:37:cd:38:c9:c9:e6:0a:91:
53:0b:51:ba:1c:27:10:32:d6:b0:0e:e7:ab:11:93:e8:53:d9:
35:a0:70:08:bf:9b:22:06:58:e0:d1:05:06:4b:54:59:8c:42:
c4:a9:ca:86:15:40:f3:67:94:30:c5:73:8a:c4:41:40:14:73:
66:0a:35:c6:9c:6f:70:4a:89:48:70:ba:44:4f:b5:97:66:03:
3a:c5:e9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:48:49 2024 by rpki-client on console-fra.rpki-client.org