Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/dKtAHFlVdItnqZ3pVgm_HN4AmR4.roa
File: dKtAHFlVdItnqZ3pVgm_HN4AmR4.roa (raw, json)
Hash identifier: MQ5kFrVVvp3ZOMg/DcbVXA/5EDT1w9XP/Fgj8Ev1rEM=
Subject key identifier: 74:AB:40:1C:59:55:74:8B:67:A9:9D:E9:56:09:BF:1C:DE:00:99:1E
Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial: 018CC64ACBD5E40144A1E2E4F1E596177001
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/dKtAHFlVdItnqZ3pVgm_HN4AmR4.roa
Signing time: Mon 01 Jan 2024 18:30:39 +0000
ROA not before: Mon 01 Jan 2024 18:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 192.109.175.0/24 maxlen: 24
139.174.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:cb:d5:e4:01:44:a1:e2:e4:f1:e5:96:17:70:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
Validity
Not Before: Jan 1 18:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74ab401c5955748b67a99de95609bf1cde00991e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:83:77:01:c9:79:d1:32:d3:ed:d4:45:ef:
68:f7:15:d6:a6:3b:25:99:5a:ac:58:ef:ce:33:c7:
28:3c:62:d8:4e:3c:e7:61:1f:ff:c2:7a:1e:60:5a:
18:3c:71:0d:f6:f4:5d:3b:e6:35:aa:8d:3a:cd:3c:
99:8a:01:ce:44:29:7f:d1:1f:64:36:73:25:42:e2:
c9:a5:b9:48:33:be:ca:6d:7e:1c:48:0f:d8:2c:ab:
36:19:dc:54:54:85:c6:dd:8e:d1:e7:3a:8d:ff:47:
7c:15:b7:22:c2:48:0b:11:f3:e3:75:1e:6d:46:18:
9c:07:40:d7:1a:34:f8:fd:60:13:a1:60:f2:4e:1d:
44:d0:b7:64:82:9c:d2:c7:be:33:d9:5a:ea:b1:22:
46:3a:1f:92:20:a6:2f:93:07:27:35:0a:81:bf:80:
57:9c:28:1f:ae:cd:fb:ea:c0:18:2d:76:37:7a:c8:
78:80:3c:f8:32:b3:3c:84:03:73:47:20:8d:85:e4:
03:07:3d:c2:5b:fc:e5:6b:52:4f:b5:f7:bb:cc:f6:
bb:db:0d:1f:52:d5:c4:d1:79:3b:c0:93:43:13:49:
2a:a0:32:4a:1f:88:03:5b:36:85:1d:17:d1:ca:d0:
99:51:a0:88:07:72:19:90:1f:21:73:69:f8:31:35:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AB:40:1C:59:55:74:8B:67:A9:9D:E9:56:09:BF:1C:DE:00:99:1E
X509v3 Authority Key Identifier:
keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/dKtAHFlVdItnqZ3pVgm_HN4AmR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.174.0.0/16
192.109.175.0/24
Signature Algorithm: sha256WithRSAEncryption
38:63:d0:16:c3:08:4d:ba:1d:59:d6:f4:ab:84:ab:7b:94:04:
f5:53:c8:d0:63:7f:b3:a2:f4:1f:ff:33:2a:01:a5:9f:9e:fe:
ba:ce:ab:22:45:50:ce:18:ef:ce:63:e6:cf:fa:e1:75:ed:82:
29:3c:2e:fd:2c:5f:97:35:ef:ce:cd:7f:dd:9c:a1:6a:62:7e:
f6:11:3c:3d:1c:45:02:a8:ef:88:52:09:a0:1e:b1:fc:95:1e:
98:87:e8:f0:4a:33:07:f1:cf:c4:48:d1:ac:47:24:aa:d2:cc:
b5:4f:36:a3:47:c1:2e:dc:1c:0a:c3:0f:52:63:4d:0e:80:5c:
1b:9d:ed:a7:9c:80:95:18:f1:b9:d3:7e:73:85:ad:d6:03:4e:
ff:f6:fa:4d:b8:46:b5:bd:bf:f3:27:65:32:ad:9b:77:6f:15:
a4:c6:81:73:a8:9c:19:05:14:b4:6d:c2:9a:8b:0b:f9:d0:eb:
9b:c8:8b:d5:af:a5:ee:28:07:17:8c:c4:65:84:8d:e5:3c:87:
aa:34:25:cb:a8:e9:88:a0:a1:31:ab:18:a5:70:5a:bf:b2:c6:
40:8b:49:be:87:de:15:db:13:55:10:bf:d4:a7:52:15:d3:ee:
1b:0a:ea:cb:c0:a8:75:3d:35:5a:e1:41:a6:72:08:5c:e6:bb:
4a:b2:fc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:17:45 2024 by rpki-client on console-fra.rpki-client.org