Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/CLI1Q2G9BA3vkdDuTnZ2GreDfhE.roa
File: CLI1Q2G9BA3vkdDuTnZ2GreDfhE.roa (raw, json)
Hash identifier: oJ1ZZcFv3HiDD3qG2s9JzK6XxLnIB4n1KCw3WepETVE=
Subject key identifier: 08:B2:35:43:61:BD:04:0D:EF:91:D0:EE:4E:76:76:1A:B7:83:7E:11
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DDE74AEBA9ADC921D558022DFAF90
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/CLI1Q2G9BA3vkdDuTnZ2GreDfhE.roa
Signing time: Mon 01 Jan 2024 14:29:21 +0000
ROA not before: Mon 01 Jan 2024 14:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12396
IP address blocks: 212.109.175.0/24 maxlen: 24
195.191.18.0/23 maxlen: 24
195.49.192.0/21 maxlen: 21
194.247.168.0/23 maxlen: 23
91.219.124.0/22 maxlen: 22
195.8.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:de:74:ae:ba:9a:dc:92:1d:55:80:22:df:af:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08b2354361bd040def91d0ee4e76761ab7837e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:b2:5a:9d:61:b8:44:72:73:e9:e8:74:db:
d1:4f:e7:5a:bf:38:e0:da:96:6f:11:4d:07:c8:1c:
3e:ea:75:98:12:a7:e2:47:09:49:d0:d9:73:5a:ce:
8b:15:86:bf:8b:0b:63:20:0e:28:dd:d2:80:1f:a8:
97:1a:4e:bc:60:3b:43:64:d0:4a:b5:81:6d:59:6b:
20:2b:b4:ab:d1:63:f7:fa:bd:e7:87:87:65:a7:7f:
0d:e4:0a:ef:49:56:85:e4:21:7e:71:70:c7:65:d1:
bf:3c:7c:a8:a4:af:0b:d9:d4:39:19:a8:5a:a0:78:
44:09:81:06:c0:5a:f4:ab:ac:22:50:76:9d:d5:27:
c3:c9:2a:82:a6:ec:01:e6:e0:48:fa:23:e2:7f:f0:
6a:d7:bf:cb:91:e8:12:9d:6d:bf:47:09:da:6c:df:
2f:f0:a7:87:dd:1a:02:9a:1b:34:4d:ee:89:2f:00:
c5:4d:28:e3:98:b5:b4:f7:6c:ea:0a:dc:75:af:35:
62:d6:d4:50:a5:6d:cf:22:db:4b:f1:0b:0d:f8:1a:
66:63:ab:8a:d0:0e:46:0f:02:fe:6d:08:b9:d0:6e:
00:5c:b6:4a:5b:f7:af:32:46:3a:bd:e0:98:2b:37:
c3:51:d5:e8:ad:c9:47:c3:0f:7a:1a:7d:10:fa:70:
48:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B2:35:43:61:BD:04:0D:EF:91:D0:EE:4E:76:76:1A:B7:83:7E:11
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/CLI1Q2G9BA3vkdDuTnZ2GreDfhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.124.0/22
194.247.168.0/23
195.8.34.0/23
195.49.192.0/21
195.191.18.0/23
212.109.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:85:24:77:d5:17:1d:f5:c7:44:2a:2a:9e:a4:11:51:de:9e:
c2:ed:a2:c6:eb:73:58:fc:1f:28:7b:00:00:9c:cf:07:0c:bf:
c1:be:dd:46:ae:98:0a:df:db:03:81:5e:5f:89:49:5b:04:24:
23:60:72:df:03:89:78:ec:25:8c:10:ef:e1:e7:1c:18:26:7d:
98:95:d2:3b:20:09:5a:a8:f1:4b:96:90:87:68:db:56:36:e6:
50:06:1a:ca:d4:38:53:93:71:74:e0:84:4e:08:84:49:85:c6:
9b:a6:ec:06:2c:98:48:06:52:35:33:0a:c8:4f:29:72:b4:4d:
f7:eb:fd:df:9c:1f:57:b5:90:d0:69:68:04:38:2a:9e:d8:98:
90:16:f3:0a:c3:46:8d:ac:4f:8f:56:d1:73:0c:67:e0:d0:a5:
dd:92:99:d4:93:87:f4:1e:84:52:dc:e5:8a:97:20:29:01:ef:
8b:71:7a:bb:25:1e:89:f8:71:15:e6:f0:73:1a:a6:1e:57:77:
cd:07:bc:00:2c:3e:26:d5:77:52:94:14:6c:32:63:c2:28:54:
4c:3f:c1:b1:67:92:b9:bf:be:f8:f0:69:e5:63:9a:55:f5:69:
26:d9:4c:57:a3:46:75:18:41:cf:2e:97:ee:13:02:7c:e1:20:
71:9e:17:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:57 2024 by rpki-client on console-ams.rpki-client.org