Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/kr5rL_Z7xsvhkEk_AIK7NK733io.roa
File: kr5rL_Z7xsvhkEk_AIK7NK733io.roa (raw, json)
Hash identifier: kP8Z7liCyjHZObvjEztxyEQ5NDI4DJIMCK6U5iDa9TM=
Subject key identifier: 92:BE:6B:2F:F6:7B:C6:CB:E1:90:49:3F:00:82:BB:34:AE:F7:DE:2A
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 018CC94DB21CA5A9BF57A5B266F8329CF176
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/kr5rL_Z7xsvhkEk_AIK7NK733io.roa
Signing time: Tue 02 Jan 2024 08:32:41 +0000
ROA not before: Tue 02 Jan 2024 08:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204316
IP address blocks: 185.20.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:b2:1c:a5:a9:bf:57:a5:b2:66:f8:32:9c:f1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Jan 2 08:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92be6b2ff67bc6cbe190493f0082bb34aef7de2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:a3:14:0d:27:00:03:77:c4:b6:54:ab:d2:
e7:1c:09:18:6c:c9:7f:f3:5d:24:7f:36:3f:d5:c5:
e9:0d:68:b7:3f:97:c0:df:ee:b8:f9:af:69:66:af:
7c:7c:08:29:04:f5:51:5c:07:e9:08:03:0c:70:7e:
77:67:a2:9c:1f:2d:9f:28:77:2a:9c:5c:f4:ef:4e:
7e:09:f4:3c:d5:61:d8:47:41:ed:83:44:17:9e:76:
61:c1:65:75:d4:ef:9c:ab:c6:ce:f5:06:f1:93:35:
fc:49:aa:ba:9f:63:4e:3f:90:a3:9c:ec:72:89:dd:
6e:75:64:64:42:8d:76:ad:25:01:a6:79:90:f6:16:
f2:8b:9c:6f:86:bf:53:21:a5:41:56:ea:cb:e6:88:
12:b0:41:22:51:73:b3:d2:12:39:97:e1:39:68:3e:
2b:46:5c:03:fc:43:66:ce:1d:09:e9:f1:06:ef:90:
b7:33:37:e4:35:47:d5:84:f0:b7:f6:80:45:97:7b:
c9:ee:6b:14:e3:26:b8:9e:74:e0:66:f0:aa:92:f5:
4d:6f:b8:d3:9b:e1:70:ec:92:e6:3f:89:0f:ef:56:
e8:09:79:dd:5c:78:24:6e:b4:08:82:e9:33:df:9b:
03:fe:19:f0:d0:a9:a4:1d:8d:c6:7a:5e:30:3e:7d:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BE:6B:2F:F6:7B:C6:CB:E1:90:49:3F:00:82:BB:34:AE:F7:DE:2A
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/kr5rL_Z7xsvhkEk_AIK7NK733io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.255.0/24
Signature Algorithm: sha256WithRSAEncryption
34:88:90:d0:2c:cf:82:6f:e7:6b:08:f5:27:5b:48:b2:fc:ba:
55:8b:9b:30:14:24:66:a7:bc:ad:d9:59:90:ea:a1:d3:01:6c:
d7:e7:e4:00:74:b7:f8:71:9e:9b:2c:3f:8b:03:bd:07:ea:2c:
28:8e:76:4a:e1:d7:67:6c:b1:a7:78:de:e7:c4:d9:64:83:5b:
36:20:56:75:d4:b5:97:56:92:61:96:d4:08:60:af:20:4f:e9:
a8:6a:b1:c8:03:2f:eb:c7:ac:24:53:fd:29:57:45:59:cf:4c:
e2:f2:2e:f4:a0:c9:d3:31:2d:96:1e:57:d1:c3:30:8e:53:3a:
38:6b:d6:8a:ab:b9:18:b1:67:d5:9a:e4:ab:f4:8a:87:b9:25:
4e:bb:94:93:4e:70:8e:1f:5a:7b:b2:43:b5:dd:88:71:d8:f4:
f2:e1:0f:ee:cc:e0:5f:c6:06:7d:c6:d5:ab:ce:9d:86:70:95:
bc:5d:8b:1b:f2:cd:71:43:28:35:5b:90:c6:98:7f:c6:7e:66:
d7:d0:ab:ac:ac:35:92:ba:8b:19:2e:ed:b8:a8:20:3b:71:66:
a5:66:c5:dc:22:12:46:24:ec:9a:e6:71:da:47:84:ee:e5:53:
4c:50:70:8b:a3:bf:5f:4d:83:d5:c2:60:47:b2:e8:bc:ed:9d:
e9:21:0a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:44 2024 by rpki-client on console-ams.rpki-client.org