Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/k1pkb1vXZT4K2DP-fge1ZIyBZAo.roa
File: k1pkb1vXZT4K2DP-fge1ZIyBZAo.roa (raw, json)
Hash identifier: 3hOnsRpg/abFBbHEXDc2HgqucXKS3R1S+k0c2tS+VIQ=
Subject key identifier: 93:5A:64:6F:5B:D7:65:3E:0A:D8:33:FE:7E:07:B5:64:8C:81:64:0A
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 018CC86F28DD31CE7D38F5A2150E20D63DF2
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/k1pkb1vXZT4K2DP-fge1ZIyBZAo.roa
Signing time: Tue 02 Jan 2024 04:29:37 +0000
ROA not before: Tue 02 Jan 2024 04:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 178.251.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:28:dd:31:ce:7d:38:f5:a2:15:0e:20:d6:3d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Jan 2 04:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=935a646f5bd7653e0ad833fe7e07b5648c81640a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b6:b6:92:f6:0d:05:72:b8:7e:f5:a1:65:cd:
44:e7:af:c3:36:a2:73:e0:16:72:3a:0e:2c:c2:73:
49:48:15:0e:0e:cd:bf:eb:96:93:71:01:d3:e6:89:
24:6c:9f:de:61:8b:d2:05:ac:ce:73:96:0a:e1:28:
82:e9:aa:b7:08:a2:95:86:f5:78:64:27:82:a0:73:
4e:4f:6a:e9:79:ec:65:c7:83:75:22:df:e4:ae:85:
5f:d0:92:7f:db:98:37:a9:87:66:7c:18:34:75:73:
5e:1b:25:cd:02:bd:9a:77:39:29:13:38:1c:27:63:
81:80:8c:53:8d:11:96:50:f8:c7:ce:9c:c5:a4:8a:
6f:1d:38:06:9c:c6:1e:b7:76:f1:7d:e2:0e:19:0c:
40:ad:d0:da:aa:1a:91:0f:3c:6f:63:e0:9b:f6:a9:
e2:ec:e6:6c:08:cc:28:fe:a6:8a:83:6d:be:fc:93:
d3:36:cf:bf:d1:38:6f:a7:d3:ca:e9:ad:a3:73:d7:
d6:c0:c7:98:11:d1:54:25:1e:2b:48:62:cb:21:e7:
ee:1e:b5:da:4a:bf:85:e4:9a:d0:69:1a:44:71:65:
8a:cb:13:a2:b9:af:32:74:40:77:5b:16:75:37:ac:
37:44:4c:4c:27:cc:7e:3c:9c:a5:17:f7:e5:28:77:
f5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5A:64:6F:5B:D7:65:3E:0A:D8:33:FE:7E:07:B5:64:8C:81:64:0A
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/k1pkb1vXZT4K2DP-fge1ZIyBZAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.16.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:bd:0d:40:e7:85:ce:7d:8a:36:98:7d:83:9d:8a:96:5e:92:
2a:a6:ef:fc:ae:1a:c5:c2:9a:b4:f0:6e:1b:9b:78:bd:2a:5e:
19:f7:a7:80:23:73:90:bd:cb:20:9f:3a:1f:5b:13:97:49:4d:
ab:7c:6c:f2:51:ba:d1:f8:fe:2f:74:3f:3a:34:a1:d6:e6:67:
ff:58:d9:da:cc:88:2b:5e:68:91:96:26:bd:a1:6d:4e:17:74:
26:2e:14:f0:1b:96:8d:ba:b3:dd:70:e4:03:75:88:ec:fe:5e:
32:61:d6:ba:00:b9:1c:ad:58:fe:8f:0f:e7:98:a8:8f:b4:fb:
63:19:a1:43:9d:10:57:07:7e:a4:f4:cf:7f:ee:72:0c:b1:5a:
bf:b5:73:00:1e:60:9b:48:a1:b5:b2:09:7b:b9:6a:70:33:90:
ed:7c:3c:7d:54:a2:e5:0c:39:48:7d:97:72:55:d8:58:19:57:
ba:20:f2:90:d4:70:59:fd:fa:d8:9c:63:6b:e1:e5:f9:83:0a:
8c:ea:24:b5:cc:de:cf:99:87:3b:e3:4a:8d:db:8c:35:21:62:
6a:c9:8e:f3:2a:9d:b7:bc:c5:48:0d:44:9b:c7:94:bd:2c:78:
e3:17:55:87:b9:44:16:aa:d9:59:71:23:e3:9a:06:67:60:d7:
e5:36:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:48 2024 by rpki-client on console-ams.rpki-client.org