Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/KsHjAdB07KcAotRjXjSobEOEVcs.roa
File: KsHjAdB07KcAotRjXjSobEOEVcs.roa (raw, json)
Hash identifier: RmWXQKpLqMk2EKjaKEbUOESCSbpdmTUt1OaEnZDYsNQ=
Subject key identifier: 2A:C1:E3:01:D0:74:EC:A7:00:A2:D4:63:5E:34:A8:6C:43:84:55:CB
Certificate issuer: /CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Certificate serial: 018CC8DE7E5B9F6FFF8D7A578FCF5FB1991D
Authority key identifier: C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/KsHjAdB07KcAotRjXjSobEOEVcs.roa
Signing time: Tue 02 Jan 2024 06:31:13 +0000
ROA not before: Tue 02 Jan 2024 06:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45566
IP address blocks: 185.25.28.0/23 maxlen: 23
89.207.228.0/24 maxlen: 24
89.207.231.0/24 maxlen: 24
2a00:79e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:7e:5b:9f:6f:ff:8d:7a:57:8f:cf:5f:b1:99:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Validity
Not Before: Jan 2 06:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ac1e301d074eca700a2d4635e34a86c438455cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:9c:52:0d:4e:c3:3f:fa:e0:38:2e:4b:90:
cf:05:cd:bc:20:8e:04:9b:49:30:4d:17:e7:74:35:
29:c1:cf:5f:cb:c2:13:44:44:49:1f:6e:9c:aa:d1:
53:6a:3f:cb:c5:34:6d:3c:14:e5:2c:28:a6:9c:97:
49:f7:f0:12:47:85:1f:3a:e8:7b:51:ba:db:17:fa:
eb:a8:00:b9:da:86:d2:a7:8b:c1:86:73:a2:5d:f5:
c7:9a:e5:bc:3e:dd:86:0e:2a:c6:28:3a:91:cd:65:
7d:17:cc:a6:5b:53:0d:d3:d0:75:99:4d:6a:ae:a5:
6d:bb:b6:6a:5b:65:03:3d:92:15:60:cc:29:36:c7:
10:04:66:a8:0b:91:df:a4:2b:42:da:b9:95:d6:b1:
99:09:03:ff:16:30:3a:bc:1c:7d:e5:ec:b1:26:cb:
f4:26:8e:50:75:dd:a1:1b:88:30:f3:cc:6f:3b:c3:
07:34:b5:b8:38:df:38:e9:c5:43:72:68:88:bc:b3:
8f:cf:aa:e6:2d:ac:12:14:d6:c1:f3:6d:a2:e9:c9:
a3:8f:4a:34:91:73:d0:66:0e:53:40:6a:46:c4:a7:
f9:36:91:b3:c1:5c:e8:89:a2:de:7e:fa:82:3f:e3:
44:a5:e0:12:6d:c1:28:a7:e7:bd:09:84:5d:18:cf:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C1:E3:01:D0:74:EC:A7:00:A2:D4:63:5E:34:A8:6C:43:84:55:CB
X509v3 Authority Key Identifier:
keyid:C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/KsHjAdB07KcAotRjXjSobEOEVcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.228.0/24
89.207.231.0/24
185.25.28.0/23
IPv6:
2a00:79e0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:79:fa:e5:b1:74:f9:9b:e7:c9:67:50:e6:41:7d:1f:03:fb:
76:7f:00:07:08:92:0e:12:fc:52:1d:d0:64:91:08:45:63:0b:
61:27:c0:93:66:f2:13:4b:dc:9c:9a:c3:ab:95:df:44:33:dc:
9e:06:5d:1d:46:cd:c8:70:9f:dd:26:40:f1:7e:f1:ab:7b:7a:
40:e1:ed:2b:57:82:22:e5:aa:0e:8f:96:39:d1:fa:89:f1:8a:
8d:12:d4:fc:36:45:48:3c:0e:e4:36:1e:ed:07:53:b7:bf:69:
16:72:3d:9e:cc:16:d3:c5:ba:70:d3:d3:53:fb:c4:d2:7a:e1:
9e:fb:30:f7:d6:bd:b3:c0:79:2e:49:31:01:f7:8f:fb:28:80:
e4:76:22:02:a7:55:f9:a7:a4:94:e3:85:46:83:60:3a:53:73:
24:d5:e9:c7:d2:60:b9:9e:1e:d8:3d:7f:e9:49:2a:51:ec:c2:
f8:87:7d:4b:58:95:20:f6:24:cd:6b:c2:41:89:25:37:20:82:
9d:97:eb:7d:99:58:7c:58:3c:a7:87:3d:3e:ce:62:85:7b:05:
66:30:6b:f9:67:de:be:21:f4:a4:cb:03:00:16:d0:c4:b5:a1:
8c:e0:6e:12:63:84:55:4c:30:ba:74:84:d9:45:8e:d7:83:8c:
e9:54:c8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:47:59 2024 by rpki-client on console-ams.rpki-client.org