Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/kr4LNex3EUfteifc8oDQ1BEfAGM.roa
File: kr4LNex3EUfteifc8oDQ1BEfAGM.roa (raw, json)
Hash identifier: REce6uDliEqiEVitsbIczkPQPqEcss3+Z4m4hhQF7Vo=
Subject key identifier: 92:BE:0B:35:EC:77:11:47:ED:7A:27:DC:F2:80:D0:D4:11:1F:00:63
Certificate issuer: /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial: 018CC727744292E2F8BBAE0840B37949462A
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/kr4LNex3EUfteifc8oDQ1BEfAGM.roa
Signing time: Mon 01 Jan 2024 22:31:40 +0000
ROA not before: Mon 01 Jan 2024 22:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30781
IP address blocks: 194.117.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:74:42:92:e2:f8:bb:ae:08:40:b3:79:49:46:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Validity
Not Before: Jan 1 22:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92be0b35ec771147ed7a27dcf280d0d4111f0063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2d:fc:16:9d:09:41:43:69:f1:c8:ac:4b:45:
f1:ea:86:a0:e7:a1:25:f3:73:e5:30:5a:21:33:36:
aa:7e:be:a4:8f:b6:33:c4:56:3e:d1:4e:bf:d9:77:
3d:36:6c:7d:f9:29:c9:83:92:fb:84:e4:90:4b:69:
95:0d:8b:43:7d:a4:80:88:f3:38:8f:23:e5:c1:7d:
71:bb:45:c6:19:8e:62:04:0a:ce:ac:3d:02:78:98:
54:3d:12:a2:50:dc:fa:a4:09:2c:eb:12:60:57:d3:
78:2d:b1:50:6b:36:4b:cb:dd:e2:a7:94:95:c2:31:
ff:25:2a:cd:f8:e3:65:b9:8d:bc:4b:55:72:07:23:
fe:c0:c5:89:b3:93:a3:43:38:5a:56:21:c7:ad:66:
18:15:f5:61:1c:bf:84:48:43:d1:7a:51:bd:0e:ca:
49:71:ac:5f:a5:fd:49:b8:3e:6c:b3:51:f2:1c:fe:
58:77:9b:af:8f:e4:0a:4b:84:44:76:53:19:7d:ff:
85:30:90:9b:7b:e2:62:88:1a:45:c2:68:e1:f9:88:
3f:74:8a:3a:8e:c4:9c:87:5d:ee:f5:3f:fe:ba:4b:
34:a5:98:ef:45:04:f0:43:8e:4c:fd:0d:9b:a4:d3:
2e:ac:ac:f4:85:7d:95:10:8d:e3:38:43:5a:16:9d:
23:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BE:0B:35:EC:77:11:47:ED:7A:27:DC:F2:80:D0:D4:11:1F:00:63
X509v3 Authority Key Identifier:
keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/kr4LNex3EUfteifc8oDQ1BEfAGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.244.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:80:d7:e6:85:5d:e4:09:db:db:45:3e:98:a2:68:2c:7c:25:
fc:d4:a8:20:60:1a:a3:3a:4e:05:08:26:4d:3b:10:d8:a6:b0:
45:67:e1:08:f3:c8:43:55:08:9f:63:47:04:27:4b:4a:c8:0b:
5e:34:ee:c6:3b:1e:d3:c0:a4:1c:32:d8:6d:a7:a5:87:66:0c:
77:e6:aa:a8:8c:67:dd:d6:54:12:ab:83:33:02:83:bb:ca:f1:
1d:7d:18:40:b1:3b:5d:4b:04:9d:8c:0d:31:e1:75:95:a5:96:
cd:cb:98:5f:bb:ed:94:5b:3b:58:e5:bd:28:9b:10:24:05:fe:
ed:97:7b:d0:c8:60:7d:19:88:59:09:f4:d9:11:77:a8:13:6d:
00:8d:eb:91:dc:a0:6e:9b:43:3d:28:5d:63:c7:45:02:3c:1c:
0c:0e:00:0e:87:1c:84:f0:8d:32:f1:20:40:7f:00:57:56:51:
24:b2:fb:ed:1b:98:df:e5:fa:b7:0e:69:fb:a8:6e:9d:47:07:
7d:b7:d6:30:b5:b1:cf:6e:ef:d4:7d:d8:1a:94:0b:d1:24:e4:
1c:95:f8:7f:77:8f:dd:93:ca:ee:15:c2:87:04:9d:e2:4c:8b:
a8:c4:a2:bc:b1:aa:bb:d1:5e:5a:5f:58:2f:ac:98:95:46:e2:
62:85:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 20:35:45 2024 by rpki-client on console-fra.rpki-client.org