Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/KEp3BWMAnYNpJeH_AdeH2KdzO3c.roa
File: KEp3BWMAnYNpJeH_AdeH2KdzO3c.roa (raw, json)
Hash identifier: cDq1nMiQH6dNUaWtWMpzNgvoOyMfoFDX+HBBN20VovQ=
Subject key identifier: 28:4A:77:05:63:00:9D:83:69:25:E1:FF:01:D7:87:D8:A7:73:3B:77
Certificate issuer: /CN=987b6812cf7a074580f5942be762f477f67c9500
Certificate serial: 0190E49761F568B603E5F1939E560658BDE4
Authority key identifier: 98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/KEp3BWMAnYNpJeH_AdeH2KdzO3c.roa
Signing time: Wed 24 Jul 2024 11:54:04 +0000
ROA not before: Wed 24 Jul 2024 11:54:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8365
IP address blocks: 82.195.64.0/19 maxlen: 24
91.243.70.0/24 maxlen: 24
185.55.124.0/22 maxlen: 24
2001:41b8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e4:97:61:f5:68:b6:03:e5:f1:93:9e:56:06:58:bd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987b6812cf7a074580f5942be762f477f67c9500
Validity
Not Before: Jul 24 11:54:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=284a770563009d836925e1ff01d787d8a7733b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:20:cf:21:c8:90:4f:a6:ea:ac:e8:09:18:
d1:e4:b9:a4:0e:b5:ce:f7:a5:6e:ee:90:08:f8:ac:
f9:92:02:07:3b:5b:7c:01:9c:58:13:56:1d:46:9b:
5a:a1:5b:0a:b8:1c:d5:93:2a:79:78:8a:d1:d0:ef:
98:d6:00:85:1c:df:fa:cb:b4:ae:70:d8:6b:02:a0:
89:13:1a:d7:5b:3e:5c:90:0a:c0:db:98:0d:46:00:
6d:dd:a0:f3:7a:24:19:7b:20:86:cc:aa:14:ae:32:
4c:52:3f:c4:b7:4d:a7:12:92:be:aa:b4:df:98:bf:
91:f9:87:30:97:26:df:e1:06:2d:4b:e1:c2:ee:1c:
df:18:13:5e:cc:23:8f:30:dd:d0:58:61:71:8d:fc:
7f:ac:0e:e2:a3:41:bc:db:46:10:10:49:e9:31:d6:
87:2d:9f:ce:ef:44:cf:15:16:4c:e5:50:a3:cb:81:
a5:28:4c:18:4f:77:e0:77:fd:0c:14:a6:24:63:94:
52:a9:92:9a:38:68:fc:23:92:19:45:d7:e1:3e:e9:
a7:86:19:29:f5:82:a7:9d:7e:93:72:f4:60:02:8a:
9f:38:94:7b:35:be:19:b6:7a:b9:46:41:58:ec:62:
60:e7:5e:f0:4f:25:c7:8d:3c:09:9d:46:80:71:b0:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4A:77:05:63:00:9D:83:69:25:E1:FF:01:D7:87:D8:A7:73:3B:77
X509v3 Authority Key Identifier:
keyid:98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/KEp3BWMAnYNpJeH_AdeH2KdzO3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.195.64.0/19
91.243.70.0/24
185.55.124.0/22
IPv6:
2001:41b8::/29
Signature Algorithm: sha256WithRSAEncryption
a9:d0:8a:6d:72:15:ee:4f:a0:db:1a:09:b2:b5:d0:09:3f:af:
0b:a9:d2:c6:e8:7a:0d:ee:2f:ce:a4:6e:5c:7b:25:27:36:f6:
15:aa:bb:2b:d9:a1:7a:f5:c7:9d:1c:98:e2:0a:ab:53:76:94:
89:3c:ff:00:a1:41:f1:46:17:64:f5:61:6e:95:c9:79:8c:8e:
f4:fc:c0:2d:e9:77:c6:9f:0b:25:8f:40:9a:14:48:ab:fd:ad:
3a:23:d7:0f:53:d8:4e:34:05:6b:4f:8f:df:c2:d9:96:19:f3:
81:1a:08:5b:54:24:e6:a0:e8:b5:48:32:d9:69:0e:dd:04:0d:
cf:07:dc:98:c8:2a:29:42:7e:ce:40:dc:15:e8:d6:ac:ff:e9:
db:ca:22:1b:0c:5d:9c:7a:cf:ae:d4:5b:82:b8:3e:a9:12:07:
6b:a6:c0:a5:c0:31:0e:6e:9b:1f:36:35:89:da:99:3b:bc:93:
31:82:ba:58:26:40:a2:89:28:91:e4:5f:7c:ef:40:7a:a4:a8:
96:cd:15:54:4d:71:9f:19:2d:bc:29:52:41:a0:b8:9c:4d:7c:
55:06:bc:54:32:c1:7f:4d:77:66:6c:ac:1d:13:74:a7:42:19:
4a:55:e4:57:91:5c:81:ab:8d:7b:1a:79:db:90:28:a6:bd:bb:
70:9a:8e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:14:55 2024 by rpki-client on console-ams.rpki-client.org