Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/KY2VQYpCwnrkpoR9ocnR37olGNI.roa
File: KY2VQYpCwnrkpoR9ocnR37olGNI.roa (raw, json)
Hash identifier: uxqmbeM6i6mBr4l2xKwLfLio3DUf9BCe82BbgZcyHlw=
Subject key identifier: 29:8D:95:41:8A:42:C2:7A:E4:A6:84:7D:A1:C9:D1:DF:BA:25:18:D2
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 018CC6499A3150DE60EB02A5CF61B8718484
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/KY2VQYpCwnrkpoR9ocnR37olGNI.roa
Signing time: Mon 01 Jan 2024 18:29:21 +0000
ROA not before: Mon 01 Jan 2024 18:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204447
IP address blocks: 178.235.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:9a:31:50:de:60:eb:02:a5:cf:61:b8:71:84:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 1 18:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=298d95418a42c27ae4a6847da1c9d1dfba2518d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:96:5b:8e:83:7f:d8:65:30:2e:b7:b9:c2:4d:
3d:d4:fd:e3:f1:eb:4d:9b:35:28:66:03:82:a3:04:
c4:3c:67:d5:0b:d8:27:d2:d4:35:88:c1:b8:a6:a6:
e3:a1:3b:d0:80:29:0c:63:57:9c:79:a1:42:a7:60:
e7:2d:23:a4:c4:b3:eb:02:3c:e9:c4:0f:8a:4c:f9:
e0:13:d3:cf:f0:52:84:0d:e5:6d:3e:8c:f2:31:5e:
96:2a:c9:3f:96:63:af:16:e4:6b:32:30:47:34:d4:
68:d2:76:0e:6f:52:82:cd:fe:51:f9:bd:e8:8b:97:
ed:4f:b3:87:a6:0a:a9:55:0d:40:ff:cd:67:85:f0:
b3:bc:48:e7:06:b3:e1:c6:de:05:47:b6:bb:e5:d6:
ff:d0:14:10:1d:60:04:12:03:6e:b3:00:91:15:4f:
fd:ec:50:e7:b7:99:aa:09:e4:46:cf:96:2f:fa:5a:
23:db:31:fb:24:39:ed:ab:3b:61:08:8d:44:1f:67:
74:23:fb:ac:77:eb:46:db:30:81:3b:8d:31:1a:f6:
0e:de:60:4c:bb:6c:6e:01:5a:68:17:4f:a0:5f:9f:
e3:42:05:8f:96:59:a0:ec:05:f3:64:07:94:44:a6:
c2:89:18:6b:aa:8a:72:bc:cc:ee:b3:5d:45:a2:d6:
68:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8D:95:41:8A:42:C2:7A:E4:A6:84:7D:A1:C9:D1:DF:BA:25:18:D2
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/KY2VQYpCwnrkpoR9ocnR37olGNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.235.242.0/24
Signature Algorithm: sha256WithRSAEncryption
15:d1:53:7b:98:cf:c8:de:8c:44:1e:2b:48:fb:2c:3a:71:3e:
ed:82:12:17:e9:6f:7e:57:e7:1a:ad:ae:db:0c:9e:c3:72:fa:
a7:d0:10:67:79:5c:8b:ee:bc:48:86:ef:47:cb:14:26:7d:8e:
d2:6d:e8:11:8c:64:50:ce:5f:d3:55:11:6d:09:41:2a:39:81:
33:d4:19:b6:d4:cc:93:3c:ca:01:38:41:09:8a:70:f7:54:41:
77:f8:f7:cc:02:8e:cb:3c:4b:a5:6a:df:2b:77:c5:32:21:31:
07:e3:e9:56:e7:1d:14:a8:34:67:c3:90:78:da:86:46:3a:9d:
ce:93:e1:84:8d:b8:6f:f4:b1:e2:51:a8:4b:c4:50:99:43:c9:
07:5d:c3:b4:28:4c:3d:cb:30:c8:67:eb:0c:30:5c:c2:8e:b7:
8f:96:64:13:95:f7:3b:2f:d9:dc:24:05:b4:bb:31:ec:3d:97:
bc:44:8a:33:ff:43:a6:43:f8:a2:8f:68:b6:4a:3e:a5:fc:15:
bb:13:5a:03:1c:8a:01:7b:65:be:9e:0e:0c:23:bc:c8:bc:5d:
6d:b6:52:af:9d:3c:95:0f:79:69:9e:6a:5d:4e:2f:6e:ed:cc:
76:57:50:2c:53:3d:01:e5:9e:13:5e:8d:5f:56:9b:a0:7a:79:
d1:8f:2c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:03 2024 by rpki-client on console-fra.rpki-client.org