Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/KrwryehKSOwdVvupqs7rB72LGVI.roa
File: KrwryehKSOwdVvupqs7rB72LGVI.roa (raw, json)
Hash identifier: AQSuH057WdHyCVpalL6E7JSlKvFJTtflQDV1NEa8DT0=
Subject key identifier: 2A:BC:2B:C9:E8:4A:48:EC:1D:56:FB:A9:AA:CE:EB:07:BD:8B:19:52
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B5D92DBEE90930C493498DA2914C7
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/KrwryehKSOwdVvupqs7rB72LGVI.roa
Signing time: Tue 02 Jan 2024 12:34:48 +0000
ROA not before: Tue 02 Jan 2024 12:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134526
IP address blocks: 188.116.18.0/24 maxlen: 32
45.138.109.0/24 maxlen: 32
185.236.80.0/24 maxlen: 32
194.49.108.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:5d:92:db:ee:90:93:0c:49:34:98:da:29:14:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2abc2bc9e84a48ec1d56fba9aaceeb07bd8b1952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:c6:4d:8b:28:56:f4:dc:c6:ab:df:fb:49:
80:8a:12:42:b8:52:95:ba:a3:a0:41:27:df:fa:29:
27:ff:e8:1e:fd:93:d6:b1:dc:0c:05:98:ac:eb:30:
58:ef:42:ef:d3:9c:a2:e9:35:99:e1:c6:31:0f:1a:
3a:40:2e:a0:0b:4c:59:6c:c4:25:7f:67:cf:35:02:
a1:01:46:96:da:d4:72:8e:54:f5:ff:97:0e:61:c3:
a3:27:f0:61:84:89:3d:b2:55:2e:58:0b:fd:f1:5e:
f6:f6:fc:18:58:97:93:ed:21:0e:f1:eb:74:23:ec:
7a:62:c8:1e:d6:cb:4c:70:ac:7b:ad:65:19:88:4f:
3d:bf:05:bc:18:13:f4:22:77:c6:e2:f0:d6:22:ec:
c6:b1:2a:09:b6:ad:37:d2:c9:f8:65:64:7d:08:0e:
f0:0a:dc:e1:21:d5:42:2d:5d:91:c8:f4:09:71:78:
ba:e5:3c:05:9d:fb:38:85:8e:50:3c:1b:e6:cf:e3:
53:0f:ce:82:df:3a:89:a6:4f:5d:aa:b7:84:ff:5d:
b6:9a:cf:9c:34:78:79:79:13:04:0c:23:d9:d2:06:
d6:84:54:f0:7f:b0:2c:5c:53:b8:84:73:2d:5f:01:
88:ca:a4:d5:d4:6a:f4:e2:13:10:91:6c:7b:84:f1:
26:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BC:2B:C9:E8:4A:48:EC:1D:56:FB:A9:AA:CE:EB:07:BD:8B:19:52
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/KrwryehKSOwdVvupqs7rB72LGVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.109.0/24
185.236.80.0/24
188.116.18.0/24
194.49.108.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c0:47:24:36:f2:81:5c:95:87:fd:b0:3e:66:d7:c4:5e:0a:
e5:73:fe:6a:9d:e0:77:fd:55:6a:52:68:96:3d:bc:51:56:b1:
32:e2:36:45:51:5d:24:74:f7:8b:93:7e:fe:d0:7c:55:75:b2:
d9:ef:b9:8b:78:1b:8d:65:06:67:c6:d6:a5:52:d3:35:a1:fe:
13:79:ea:66:c9:e9:5c:7b:28:89:a3:0b:76:d9:d2:3f:49:2f:
4c:20:65:ca:45:6c:97:0a:62:d0:c9:1b:f9:bb:a0:cd:8f:cd:
9b:2f:82:67:c4:6f:67:4e:26:1e:e2:1f:7c:8c:19:bc:b7:8b:
0c:0a:c6:00:4d:bb:53:40:06:9c:6b:06:b0:07:4d:18:a4:31:
6b:4b:d2:5c:72:ed:36:d7:0b:63:ef:3f:44:41:18:34:b8:e5:
08:83:1c:31:aa:27:40:d8:4c:d6:c7:6b:7c:4d:29:50:6e:01:
a6:7a:61:d8:3b:bf:f6:ec:ab:56:5b:3d:ed:90:62:bc:b9:07:
d0:cc:0e:9d:49:3c:bb:ae:0e:37:00:00:c7:df:16:0e:a4:bf:
31:f9:cd:97:11:0a:ce:58:62:20:06:bb:6f:9f:a3:da:cd:a3:
69:35:84:67:a3:55:1d:04:0d:22:f0:ff:b8:32:46:8b:1a:4c:
d6:e0:bf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:08:14 2024 by rpki-client on console-ams.rpki-client.org