Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/kSQI2M8ADpX7FZafNdo-jpXghxs.roa
File: kSQI2M8ADpX7FZafNdo-jpXghxs.roa (raw, json)
Hash identifier: eZ0aH3om6tzebx38nFB5dhbUk1XJBaWXJRVoIcl2HXU=
Subject key identifier: 91:24:08:D8:CF:00:0E:95:FB:15:96:9F:35:DA:3E:8E:95:E0:87:1B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5010BB4B002A9F927D4E4CC87356C5B
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/kSQI2M8ADpX7FZafNdo-jpXghxs.roa
Signing time: Mon 01 Jan 2024 12:30:29 +0000
ROA not before: Mon 01 Jan 2024 12:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25596
IP address blocks: 82.197.192.0/19 maxlen: 19
185.6.48.0/22 maxlen: 22
185.227.72.0/22 maxlen: 22
84.245.0.0/20 maxlen: 20
87.101.0.0/21 maxlen: 21
84.245.16.0/20 maxlen: 20
84.245.32.0/20 maxlen: 20
217.19.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0b:b4:b0:02:a9:f9:27:d4:e4:cc:87:35:6c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=912408d8cf000e95fb15969f35da3e8e95e0871b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:e8:b4:ab:4a:64:d1:5c:e5:a7:8c:f3:45:
46:2b:ae:8f:d8:68:83:22:9a:b5:0a:f1:97:b3:8a:
45:35:3a:fc:2b:93:13:23:00:ee:cc:61:9f:97:48:
4b:5c:1b:2d:e3:f3:87:5f:1a:ce:09:24:9a:9b:e5:
6a:c5:81:5c:eb:4b:f6:6d:4b:b5:23:13:a4:5e:18:
7a:eb:bc:82:4e:d6:fb:da:10:89:c1:46:50:55:33:
21:e4:70:68:f9:76:bb:d2:95:7f:ab:cc:92:a2:76:
54:d6:e0:01:79:22:e8:44:4a:22:48:b8:13:7f:0e:
58:41:11:9d:94:5c:0d:59:90:54:b0:a1:b4:50:bb:
8f:52:89:7d:7f:84:5a:e7:9d:2b:af:8c:dc:76:a9:
6e:c7:11:94:88:77:1e:e7:28:4a:68:59:47:55:6e:
09:c4:df:0a:3f:d5:16:b9:c4:72:46:c9:be:da:ba:
a8:02:23:fa:f8:27:44:ef:f5:51:71:8a:8e:9c:46:
0f:db:b0:58:ec:fb:cd:ec:89:c8:03:a4:12:4b:2f:
dc:0f:d7:a2:9b:56:0c:c3:f2:7c:a3:aa:08:e7:2b:
2f:78:00:e4:a4:42:46:df:99:ab:1e:42:37:55:9e:
ce:f2:50:d3:93:ff:11:d8:fc:ce:01:e4:82:01:30:
13:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:24:08:D8:CF:00:0E:95:FB:15:96:9F:35:DA:3E:8E:95:E0:87:1B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/kSQI2M8ADpX7FZafNdo-jpXghxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.192.0/19
84.245.0.0-84.245.47.255
87.101.0.0/21
185.6.48.0/22
185.227.72.0/22
217.19.16.0/20
Signature Algorithm: sha256WithRSAEncryption
36:20:b4:18:c9:3e:d6:f6:56:7f:7b:d9:b8:e1:ef:5c:07:3a:
dc:f5:c3:f9:30:cb:1b:f2:66:a1:34:ba:fd:29:5f:19:b4:59:
c2:9e:7f:0d:7e:bd:c9:d4:dc:a5:53:b3:4b:0d:9f:d5:6e:27:
6e:8d:14:31:79:5c:1a:c5:21:4f:02:2d:52:2a:b0:e2:30:40:
75:ad:c1:79:13:72:5b:77:ce:52:e9:f3:4f:92:17:ba:45:32:
ad:10:2f:a4:0d:4b:40:e1:71:4f:b5:84:72:0a:1b:31:43:5c:
88:72:2f:57:c1:cc:0b:fa:95:70:1b:f3:fe:7b:36:62:bd:bc:
5f:ab:0f:32:1d:7a:0f:fc:bd:1c:2f:b1:6e:f1:d5:d5:dc:9e:
67:2f:ef:63:6b:45:06:d8:b8:9d:fd:b2:fd:d9:1f:2b:c3:f1:
67:9f:95:70:0a:de:e5:74:6f:6b:d3:ce:6b:88:e4:08:df:37:
d2:7a:17:c2:48:be:e5:9b:81:e6:65:84:30:57:69:f5:9f:8b:
b4:8f:4d:9f:66:fb:37:44:24:29:d7:2c:8a:91:72:c1:9c:c9:
04:51:68:55:7e:59:f8:f4:0a:2f:45:cf:ac:6a:c9:57:7b:4f:
fd:e8:d7:2f:e1:46:5e:4f:0f:61:bd:57:f5:20:a4:bb:dc:eb:
9a:94:4f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:04:47 2024 by rpki-client on console-ams.rpki-client.org