Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/nKKYEQKrRP5xEFd57UDfxtyoRqE.roa
File: nKKYEQKrRP5xEFd57UDfxtyoRqE.roa (raw, json)
Hash identifier: c9wduxNEqkqgOgYNsCfsZ8K9VddWUfh1BK4jl135OwM=
Subject key identifier: 9C:A2:98:11:02:AB:44:FE:71:10:57:79:ED:40:DF:C6:DC:A8:46:A1
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 018F61EB8807944614FBEBE330C390AE20AE
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/nKKYEQKrRP5xEFd57UDfxtyoRqE.roa
Signing time: Fri 10 May 2024 09:52:56 +0000
ROA not before: Fri 10 May 2024 09:52:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215837
IP address blocks: 104.167.18.0/24 maxlen: 24
2a13:5682:400::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:61:eb:88:07:94:46:14:fb:eb:e3:30:c3:90:ae:20:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: May 10 09:52:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ca2981102ab44fe71105779ed40dfc6dca846a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d3:1e:75:cb:6d:d3:26:25:51:a1:13:4e:58:
a3:e6:22:74:16:46:2c:db:1f:e1:a5:3f:31:bc:0b:
99:82:17:5c:09:a5:4b:ce:d6:b9:6a:62:a7:6a:83:
36:02:b3:90:5c:7d:31:a3:99:5c:ed:b7:80:15:40:
6c:19:92:90:78:ec:2b:d8:c9:c6:85:51:06:55:10:
4b:af:1b:b4:d4:b1:a5:95:83:c4:a9:8d:fd:ae:79:
8f:f4:b3:78:b9:76:ca:af:e3:b6:d7:d6:60:12:50:
5a:db:a6:73:31:06:c5:c2:45:af:b0:30:a2:ea:88:
bd:75:05:d4:50:72:20:0e:ca:2c:7b:56:09:0f:8f:
72:e2:24:97:ed:4f:40:99:98:48:c7:3f:d5:f1:81:
d5:37:a5:df:0c:05:a8:00:85:f1:62:9a:f8:76:b8:
ad:0e:b9:0f:02:21:a1:11:0f:ba:90:f1:91:e8:a4:
4e:ea:97:63:94:ae:82:91:e0:10:3f:9a:f1:30:d1:
37:86:70:dc:98:83:cc:a8:25:a6:98:49:8c:ac:f0:
a2:77:9a:7e:01:60:e4:5d:e3:7a:7a:9c:4d:a8:33:
48:10:86:dd:9b:3e:67:76:5d:f7:54:56:69:7d:3a:
e7:0e:72:98:3e:c8:65:68:8e:5c:bb:9a:44:e0:a7:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A2:98:11:02:AB:44:FE:71:10:57:79:ED:40:DF:C6:DC:A8:46:A1
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/nKKYEQKrRP5xEFd57UDfxtyoRqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.167.18.0/24
IPv6:
2a13:5682:400::/44
Signature Algorithm: sha256WithRSAEncryption
7e:47:79:9f:52:18:1f:95:fa:99:50:99:d0:83:07:3d:70:88:
f6:45:0a:6f:38:60:5d:fc:60:72:5e:70:45:b3:f8:30:e9:d8:
ef:bc:85:e4:bf:21:03:a3:f2:ed:e9:ee:a9:c5:46:80:a2:f7:
86:a6:24:ed:f7:28:55:bc:e0:80:10:1a:3e:fc:aa:bf:48:ec:
c9:09:e6:67:ae:e4:ba:ed:4c:12:48:d4:86:e4:38:2f:77:f8:
57:2d:d2:04:73:43:4c:68:82:d4:47:ca:d1:47:60:4c:66:48:
7b:61:20:98:13:3c:a1:c1:e6:48:4f:46:76:4a:47:ea:0c:d7:
1b:11:e7:1c:64:39:3d:3d:9a:90:bc:4c:20:bd:c6:5e:2c:64:
da:b6:b3:5b:fc:d4:1f:0c:ed:f3:7d:7e:d5:fa:84:20:9a:25:
dc:fa:a4:66:77:ff:f9:93:0e:44:4c:36:7e:6e:41:ec:c5:de:
5b:b5:44:49:7b:ce:f1:7a:b5:d6:6e:4b:f4:e7:ff:7d:68:d5:
21:20:a8:96:59:d2:4f:1d:76:04:01:e4:72:ce:46:5a:33:8f:
22:4d:a0:c7:80:ae:ba:2b:fc:0b:5e:12:2a:16:7d:ba:02:4d:
fb:a0:de:9d:4d:37:34:02:5c:5c:bd:61:2f:2f:61:24:47:a0:
7b:d3:c3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 08:10:52 2024 by rpki-client on console-ams.rpki-client.org