Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KGF07-qxnkuz1oN85O9ldKJaJ7U.roa
File: KGF07-qxnkuz1oN85O9ldKJaJ7U.roa (raw, json)
Hash identifier: 96Q3FtNjYr+p26qAhT5dAPlFJviews176M6a8ZOEXWA=
Subject key identifier: 28:61:74:EF:EA:B1:9E:4B:B3:D6:83:7C:E4:EF:65:74:A2:5A:27:B5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F331645CAB91CD2E6AD93293E9014D642
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KGF07-qxnkuz1oN85O9ldKJaJ7U.roa
Signing time: Wed 01 May 2024 07:37:28 +0000
ROA not before: Wed 01 May 2024 07:37:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210164
IP address blocks: 109.176.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:33:16:45:ca:b9:1c:d2:e6:ad:93:29:3e:90:14:d6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 1 07:37:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=286174efeab19e4bb3d6837ce4ef6574a25a27b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:c0:51:10:3b:75:fa:18:46:94:2f:f8:c4:
f1:d4:21:cf:00:25:76:98:90:a8:e6:ee:f3:2d:90:
15:d9:19:d9:28:ee:25:38:32:e5:bc:5f:81:b0:05:
ef:78:93:26:5a:2a:f1:ff:4b:d2:47:75:16:0a:05:
6f:4f:aa:b6:57:71:21:56:8b:7d:ed:85:33:16:82:
4d:66:77:9f:a0:8c:c0:3a:c5:c7:55:dd:9c:69:7d:
2c:40:90:a2:57:de:3e:a2:23:20:b7:08:8e:ea:bb:
37:fe:6b:43:48:fa:79:2c:46:77:ad:b3:04:d9:54:
1c:0d:8f:39:72:be:5c:0e:6e:33:1d:22:7f:a9:00:
55:b4:45:12:56:5e:0f:72:38:92:91:7a:15:0f:20:
09:f9:e0:47:3b:13:38:27:c0:cf:05:9e:9b:0e:72:
29:1a:7f:2b:bf:1a:f5:fe:e2:9e:57:96:7b:ea:9b:
cd:48:3d:c1:49:d8:d8:11:52:df:d2:d9:c4:a8:7b:
73:f2:e4:33:43:05:ea:11:74:6a:64:16:8a:1e:a3:
ce:0f:33:23:7a:ed:e4:f5:4c:86:08:8c:c3:52:63:
50:08:68:ce:0b:71:59:ab:86:d5:93:59:5b:49:37:
32:4a:a0:19:cd:3d:24:aa:6c:fb:63:26:89:a3:f3:
7a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:61:74:EF:EA:B1:9E:4B:B3:D6:83:7C:E4:EF:65:74:A2:5A:27:B5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KGF07-qxnkuz1oN85O9ldKJaJ7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.16.0/24
Signature Algorithm: sha256WithRSAEncryption
93:1a:9a:d8:9b:5a:d2:76:17:0b:7b:e7:71:18:dc:7d:5a:36:
de:17:80:59:c3:89:3b:b5:6b:28:06:1b:dc:7d:07:8f:2a:ae:
59:7d:c1:01:df:36:92:48:c7:5a:80:45:04:d1:c5:32:f5:fb:
c9:73:d2:3c:b0:c5:4c:4c:7a:2e:07:c5:3d:a8:12:7e:c9:22:
41:21:67:24:e4:88:a4:92:09:d3:37:94:4a:24:a2:6a:93:74:
49:8c:59:4c:49:76:21:d6:c9:4a:46:04:83:ad:8f:89:2d:c6:
27:c2:5e:3d:da:77:ea:83:49:b6:90:25:56:da:d4:20:ee:ea:
1f:b9:f9:bf:7d:6f:2c:eb:fb:f8:71:a4:b4:b4:4c:d6:db:da:
a4:0a:cb:60:48:59:60:0c:2c:79:ec:75:ef:b6:04:0b:ab:85:
08:e1:64:23:78:22:7a:39:a1:19:3b:8d:73:94:a7:86:b2:3c:
f6:b4:be:b5:a4:4e:40:ed:18:1e:3d:58:1d:c3:67:28:1b:60:
02:0e:cb:bf:67:0a:d5:16:84:3c:69:25:9e:da:f9:8a:98:fd:
6a:b7:29:7e:f8:93:1b:65:15:c9:e4:8e:b5:80:7d:fa:8c:57:
6b:0e:4e:3b:5d:d3:26:c4:bd:62:fe:c7:1a:0a:8a:7a:05:f5:
51:3a:b4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 11:41:13 2024 by rpki-client on console-fra.rpki-client.org