Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/CK5K_BNvVih9J60BoJi_6ujbAsg.roa
File: CK5K_BNvVih9J60BoJi_6ujbAsg.roa (raw, json)
Hash identifier: C49PTOdF/STWwhoF0PXtHdLSFI8QyfxFChZcBbuu0j4=
Subject key identifier: 08:AE:4A:FC:13:6F:56:28:7D:27:AD:01:A0:98:BF:EA:E8:DB:02:C8
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018CCA99384D9DE492D0F69E478B0868436C
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/CK5K_BNvVih9J60BoJi_6ujbAsg.roa
Signing time: Tue 02 Jan 2024 14:34:48 +0000
ROA not before: Tue 02 Jan 2024 14:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201634
IP address blocks: 87.107.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 23:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:38:4d:9d:e4:92:d0:f6:9e:47:8b:08:68:43:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08ae4afc136f56287d27ad01a098bfeae8db02c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:7d:63:fa:16:4e:ab:a6:f0:68:78:56:8f:
df:02:13:d2:2d:9d:45:68:d0:1c:5e:59:e7:2a:7e:
3d:34:de:c7:6f:f8:e4:12:d8:6f:46:cb:43:38:59:
80:0f:d0:dc:4f:82:80:81:53:f9:a1:c0:ff:64:27:
af:ab:62:c5:5e:a0:80:22:68:25:f0:04:7e:1c:11:
3d:c7:65:61:3b:5b:7b:ce:0e:5f:73:de:47:65:fe:
d2:18:ce:67:91:8f:46:36:a1:46:d4:6e:68:f5:53:
0e:71:05:68:9c:0c:e2:71:3d:54:ee:c6:ad:e5:ec:
f2:17:6e:50:f2:c2:09:0e:10:80:0b:81:61:57:38:
8e:25:74:f3:2f:61:a1:51:54:1f:ef:d5:a0:b2:4f:
dc:ee:e5:9a:86:31:7e:92:34:ea:5b:ad:84:75:4c:
41:7b:66:62:92:6e:c9:6d:1c:7b:99:3e:b7:48:a0:
4d:ab:8f:d6:f0:77:5e:74:18:6e:4a:ea:f1:bf:12:
98:60:27:8b:c1:3a:29:00:a2:ed:bb:8e:22:3f:5f:
ae:e8:b1:f7:ff:16:35:1a:1e:2c:02:fd:74:84:d8:
f1:99:36:35:89:7c:64:65:a9:66:f4:71:59:39:3a:
d2:7d:8e:1d:7d:1c:43:4b:a1:bb:8a:24:f4:25:27:
76:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AE:4A:FC:13:6F:56:28:7D:27:AD:01:A0:98:BF:EA:E8:DB:02:C8
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/CK5K_BNvVih9J60BoJi_6ujbAsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.190.0/24
Signature Algorithm: sha256WithRSAEncryption
46:4d:a8:a0:68:33:0c:43:1b:a0:8a:74:c3:6a:13:cb:6c:b8:
34:27:5c:6b:3e:72:cf:85:f7:86:52:0d:74:69:b2:dd:f2:b9:
b4:fb:23:5f:c0:11:13:66:d4:ee:05:cf:99:1b:c0:ec:f9:92:
70:98:49:e9:95:ca:fd:7b:4c:1f:f8:33:5b:56:02:b9:3b:8f:
bb:81:b3:c1:8b:cf:09:ed:be:9c:5b:46:97:27:84:8a:5b:44:
84:23:dc:ac:3b:85:b6:bb:e5:db:03:b2:b2:4d:39:69:de:07:
b0:f3:28:36:30:b7:92:df:21:a0:6c:8e:4f:1e:40:99:61:fc:
82:ea:12:eb:bd:96:6b:10:5a:e3:13:d6:36:a9:71:5b:54:24:
4c:db:e4:6d:29:4a:8a:ee:e6:3e:24:d9:26:63:fd:31:0e:bb:
20:94:e7:7b:d8:e4:65:14:46:3e:a9:3b:89:f1:47:98:30:18:
ff:f4:bc:97:a3:f6:ff:ae:0c:38:3c:72:79:ba:0e:1e:eb:c4:
29:0c:7e:fd:4f:1e:2b:44:70:59:87:20:53:0a:45:78:e1:84:
56:98:32:6e:f5:89:be:56:d6:82:2a:f3:39:b9:01:38:cf:4e:
35:f8:03:47:35:9e:95:ea:5c:b5:5e:41:33:92:1b:c8:f5:38:
e8:84:14:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:42:57 2024 by rpki-client on console-fra.rpki-client.org