Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/00KfgECy2BDwcKtXXXNNFdQ7JQg.roa
File: 00KfgECy2BDwcKtXXXNNFdQ7JQg.roa (raw, json)
Hash identifier: VhFi/rTxj5vm2EzM0Seu33lu/hVVy8zA7d2ThJFvSF4=
Subject key identifier: D3:42:9F:80:40:B2:D8:10:F0:70:AB:57:5D:73:4D:15:D4:3B:25:08
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC501200B91A8BD969999EE1056A35258
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/00KfgECy2BDwcKtXXXNNFdQ7JQg.roa
Signing time: Mon 01 Jan 2024 12:30:34 +0000
ROA not before: Mon 01 Jan 2024 12:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199058
IP address blocks: 185.9.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:20:0b:91:a8:bd:96:99:99:ee:10:56:a3:52:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3429f8040b2d810f070ab575d734d15d43b2508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:64:e4:58:72:3c:8d:90:d4:b9:94:ce:ba:3c:
5e:de:da:1e:2d:26:8c:fb:db:0c:85:fb:38:c6:82:
4b:28:ae:6e:84:82:47:3c:19:72:af:99:27:5f:90:
b9:e7:d8:2a:bc:77:b2:5c:86:70:ff:0c:04:fe:c6:
4e:8e:2c:f0:08:8a:f4:81:34:35:6c:a1:85:53:8f:
ee:d9:75:3b:57:07:ca:f8:14:79:9a:3a:4c:40:39:
92:91:c1:8c:f3:82:34:49:88:44:b5:37:2b:1d:4d:
09:31:c7:15:6a:a2:a8:08:be:b9:51:85:3c:75:6c:
96:59:59:d8:fc:40:7d:c6:59:7f:3b:78:0c:9d:10:
38:d1:7b:81:7d:07:0f:33:47:fe:a9:d7:2a:bf:40:
6f:4e:5f:d2:c9:5b:56:6a:4c:53:72:c5:06:93:d2:
c5:d6:dc:c3:71:ea:dc:71:3c:d9:29:74:90:e1:91:
89:a8:9f:a0:10:28:03:7f:04:3d:e3:b4:94:23:9f:
c9:08:3d:a3:18:61:e4:59:3a:34:2d:2b:a3:56:f5:
25:b7:be:a7:e1:1f:7f:a6:3d:fc:1f:b4:21:18:6d:
65:b2:09:a6:0c:e2:71:05:02:27:98:92:bb:0e:b2:
0e:17:cd:b0:d1:51:1e:69:a9:25:0b:16:6f:d6:aa:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:42:9F:80:40:B2:D8:10:F0:70:AB:57:5D:73:4D:15:D4:3B:25:08
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/00KfgECy2BDwcKtXXXNNFdQ7JQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.55.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:3e:ab:7e:ec:5f:d0:44:fa:19:35:3f:08:18:68:f1:c3:29:
ba:0f:f3:2b:d2:3c:93:dd:b8:c5:70:3f:90:ec:fd:0d:94:ad:
7e:95:f2:86:50:63:f0:85:29:41:ed:d5:ab:a0:57:8a:02:9c:
9a:cf:e3:8d:61:f6:d5:1c:4c:63:d9:5e:a3:20:f9:81:9e:66:
ec:15:1b:b2:93:e4:b6:39:c7:e8:e3:14:ab:99:05:ff:2f:13:
63:cf:34:06:34:49:e5:63:44:c3:15:49:92:08:de:b1:16:b2:
a0:fe:ce:a3:45:87:79:14:7f:ca:06:10:84:9f:7e:76:b4:df:
c2:f2:ee:c0:71:72:96:2f:53:4d:23:89:5c:f4:22:9c:b0:de:
60:8b:55:1f:4e:9d:0d:d8:7b:2b:8d:d4:42:d1:13:ec:b7:71:
47:57:9f:df:c9:f0:0c:52:8f:ea:50:da:74:bb:f5:89:6d:33:
24:a8:ae:37:09:30:3b:18:7f:97:9e:9b:2c:e2:b2:e9:6c:99:
85:7e:c2:4e:d8:c9:76:cc:53:a6:8f:12:4e:ee:a5:69:c6:de:
f5:5d:5b:5f:5c:35:82:5e:ab:2c:29:8c:8a:02:d3:aa:34:22:
b4:ec:b6:14:f3:e3:fd:a2:18:29:ba:51:98:33:6c:66:90:6e:
2b:3b:32:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:04:47 2024 by rpki-client on console-ams.rpki-client.org