Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/KgXJh7l1LSW0ffz2tr5qblPqQvs.roa
File: KgXJh7l1LSW0ffz2tr5qblPqQvs.roa (raw, json)
Hash identifier: UbRRPoQzvBqn5L2Zq+IrNZ+EiABOsl3IxlpHzg/zrLM=
Subject key identifier: 2A:05:C9:87:B9:75:2D:25:B4:7D:FC:F6:B6:BE:6A:6E:53:EA:42:FB
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 018CC94DB259583B4F13B1C30FF81A284B1B
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/KgXJh7l1LSW0ffz2tr5qblPqQvs.roa
Signing time: Tue 02 Jan 2024 08:32:41 +0000
ROA not before: Tue 02 Jan 2024 08:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400040
IP address blocks: 185.138.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:b2:59:58:3b:4f:13:b1:c3:0f:f8:1a:28:4b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Jan 2 08:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a05c987b9752d25b47dfcf6b6be6a6e53ea42fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5b:cb:82:92:09:1d:cd:ec:89:b6:b6:6b:e5:
9e:ce:18:49:82:e8:4d:b7:e4:94:aa:4d:60:3d:6a:
11:25:08:03:16:13:ac:9b:6d:48:b5:22:70:08:b8:
df:ca:7d:34:d3:fb:9f:26:47:69:00:16:3d:90:ce:
20:cf:4f:61:80:34:e5:6a:32:a4:3e:d2:dc:aa:60:
e3:aa:0f:28:74:e4:57:e3:79:6b:4d:4b:68:ca:4d:
e3:34:ec:0a:d2:85:5d:7e:14:c5:0a:a7:59:65:d0:
d7:69:cb:f2:d1:d0:e9:e4:49:fe:2e:17:0f:a6:a2:
9f:9d:bc:b6:2d:86:13:a5:07:c7:96:7c:47:72:b6:
26:b3:cf:2a:0f:1a:63:39:e0:17:e1:dd:fc:51:f7:
37:b3:a6:db:c6:58:00:6c:f0:a2:25:1e:ed:58:5f:
c9:b1:ee:ba:95:14:82:5d:e7:56:b2:7f:3d:ce:86:
69:68:ec:b9:11:d2:c1:f1:4c:f8:31:de:eb:71:f1:
38:62:b2:d8:06:90:26:f0:ec:08:7b:29:dd:d6:c0:
16:5e:c8:0e:1a:cb:b4:30:70:d7:89:0a:0e:4e:ec:
89:5c:d0:a6:c9:31:13:5f:f4:27:3d:6e:5a:48:23:
77:3e:3b:26:54:49:70:af:c1:36:84:a2:51:ea:8c:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:05:C9:87:B9:75:2D:25:B4:7D:FC:F6:B6:BE:6A:6E:53:EA:42:FB
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/KgXJh7l1LSW0ffz2tr5qblPqQvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.232.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:2d:4e:5f:17:d8:b1:8d:bd:7c:fe:0f:cd:50:08:e1:41:db:
8f:cd:fe:7a:0a:52:96:9c:b2:c4:a6:46:e2:12:26:c0:7a:3b:
4a:68:48:34:7d:fb:c8:e8:8d:f1:e6:80:7c:cb:35:04:ae:35:
4f:07:f0:ef:63:1b:c9:cf:1b:88:39:ec:f6:04:19:31:75:e3:
25:e9:f7:14:1d:e2:c7:a3:17:7f:77:15:fe:ac:39:4e:46:cf:
50:ef:7a:43:7e:48:a3:ee:f2:48:76:9f:89:1b:2c:d4:e1:88:
af:39:24:80:09:d4:a9:d7:97:c9:e5:b3:bc:e1:a2:ad:cb:96:
12:c6:1d:b4:fe:3d:b8:6d:89:78:e2:fb:75:31:d3:a2:86:3c:
4f:52:8d:5f:f9:4d:16:f7:22:0c:39:60:28:38:15:c1:00:71:
f3:c2:3d:83:c7:d6:19:64:6f:9e:8e:c7:77:d3:2f:47:0e:2b:
09:1d:48:65:a2:b2:00:8d:c4:5e:92:71:11:a9:b4:13:1f:3c:
02:9f:f9:6e:3d:8e:36:ae:49:8b:56:2a:8d:5b:47:7d:6e:0d:
91:74:5e:91:05:b7:8a:9c:97:f8:e8:ab:d9:bc:c2:1a:2a:c9:
33:48:8c:52:33:3b:b3:16:3d:fb:13:b6:8a:c2:59:2d:60:db:
de:76:c7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:00:25 2024 by rpki-client on console-fra.rpki-client.org