Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/k94nd-Z8rdJGZoMBtg9-AbTfTWQ.roa
File: k94nd-Z8rdJGZoMBtg9-AbTfTWQ.roa (raw, json)
Hash identifier: z0WQ1mULa2ASHPRDVola2p9wFV5IvjvUVyaesxt/lsM=
Subject key identifier: 93:DE:27:77:E6:7C:AD:D2:46:66:83:01:B6:0F:7E:01:B4:DF:4D:64
Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Certificate serial: 018CCA2863D311B49D1AF9D383F458372DF9
Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/k94nd-Z8rdJGZoMBtg9-AbTfTWQ.roa
Signing time: Tue 02 Jan 2024 12:31:33 +0000
ROA not before: Tue 02 Jan 2024 12:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49825
IP address blocks: 195.211.76.0/22 maxlen: 24
194.165.0.0/24 maxlen: 24
194.165.1.0/24 maxlen: 24
193.19.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:63:d3:11:b4:9d:1a:f9:d3:83:f4:58:37:2d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Validity
Not Before: Jan 2 12:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93de2777e67cadd246668301b60f7e01b4df4d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:24:b7:a6:db:38:90:51:c4:df:63:ea:a3:
be:7c:dc:60:45:56:25:de:ad:9a:4e:e6:f9:d8:a9:
c1:bf:bf:0f:92:31:d5:b7:33:7e:ad:34:eb:49:31:
0e:49:7b:7c:e8:2c:36:f4:e7:1b:87:79:ab:fe:76:
78:1b:6f:ac:44:70:2e:d5:5c:ad:d0:2a:01:18:77:
21:c4:5d:16:32:1e:87:5c:c7:27:42:ea:94:c2:16:
43:29:4a:f9:90:ce:e3:a1:c5:ac:de:80:7d:de:aa:
ad:ce:f8:4b:88:9a:b4:fd:5b:2c:32:1b:42:6a:4f:
c5:4d:f5:88:35:c7:c4:b5:67:25:42:d9:28:bc:cd:
28:f5:96:66:8f:73:21:19:c4:35:7d:d4:0f:26:a6:
ca:a8:52:73:c6:bd:23:90:81:fd:53:96:93:45:3a:
ff:73:27:a5:8e:f8:d4:7f:4a:12:a9:5a:95:7b:2d:
2a:3a:f2:c7:b2:eb:0c:32:17:d6:b5:b2:eb:f4:ce:
bc:74:6d:dd:37:d2:76:00:3b:5f:58:80:3d:cb:be:
d0:3f:bd:67:54:cc:c2:f2:a5:41:ee:c5:52:69:11:
1f:94:bb:a3:e5:0b:23:2d:9b:82:a5:e2:fd:e4:0b:
d2:c4:67:72:ba:ba:e7:a0:89:c9:f5:fd:80:ae:72:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DE:27:77:E6:7C:AD:D2:46:66:83:01:B6:0F:7E:01:B4:DF:4D:64
X509v3 Authority Key Identifier:
keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/k94nd-Z8rdJGZoMBtg9-AbTfTWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.82.0/23
194.165.0.0/23
195.211.76.0/22
Signature Algorithm: sha256WithRSAEncryption
03:3d:ec:2d:cf:59:d5:84:43:e3:42:78:da:b0:e6:da:db:9b:
0c:55:66:d0:32:48:c1:4f:e5:76:f7:fe:4a:13:91:02:aa:f3:
7e:f8:71:c1:75:52:26:99:8e:85:51:54:fe:bd:e2:24:c7:bb:
ff:37:99:f8:82:59:76:89:e4:2a:0f:15:af:b6:c5:27:3a:17:
c9:8e:f7:9a:93:3c:d9:a1:b5:3d:6a:07:09:a9:92:50:87:15:
52:d0:ab:d0:1d:3f:d5:72:d6:10:d7:61:0d:b7:8a:a4:8f:bd:
f5:0e:68:8e:f4:cf:91:1c:0d:72:bf:95:58:29:f7:03:6e:bf:
2c:95:ff:5b:6b:49:34:1f:cb:24:dd:8c:82:cd:1f:b8:f0:00:
6e:d3:e9:09:aa:ff:be:76:a4:ef:c1:dc:98:b0:c2:c1:c7:66:
82:fc:f4:65:91:84:32:3d:9a:b8:a8:1f:dc:cf:6c:7e:f4:f8:
b0:f5:d6:00:79:a8:63:4b:78:3d:4e:72:05:cb:e5:6a:a5:4f:
3d:3f:10:82:c0:d0:69:35:3e:1f:b5:b7:92:35:72:dd:35:e5:
33:bd:fb:3b:c3:db:6a:5b:94:38:75:8a:ac:68:37:93:ad:c3:
41:ef:c4:15:dd:73:ce:db:42:18:b3:0c:43:71:3f:61:6c:ca:
9d:ee:84:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:47:46 2024 by rpki-client on console-ams.rpki-client.org