Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/KmvCujp4Pt1IxsQkXfaZO0sgRGE.roa
File: KmvCujp4Pt1IxsQkXfaZO0sgRGE.roa (raw, json)
Hash identifier: 1l6nh3pmp1X8hN7FRlSqevA9WAotoCNKU2lVjgLlD+Q=
Subject key identifier: 2A:6B:C2:BA:3A:78:3E:DD:48:C6:C4:24:5D:F6:99:3B:4B:20:44:61
Certificate issuer: /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial: 018CC64AA9247C25E4279B732024DAE22084
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/KmvCujp4Pt1IxsQkXfaZO0sgRGE.roa
Signing time: Mon 01 Jan 2024 18:30:30 +0000
ROA not before: Mon 01 Jan 2024 18:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19551
IP address blocks: 149.126.72.0/21 maxlen: 24
149.126.75.178/32 maxlen: 32
185.11.124.0/22 maxlen: 24
149.126.75.177/32 maxlen: 32
2a02:e980::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 22:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:a9:24:7c:25:e4:27:9b:73:20:24:da:e2:20:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
Validity
Not Before: Jan 1 18:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a6bc2ba3a783edd48c6c4245df6993b4b204461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:6f:fc:ad:67:6c:ee:3b:d7:6c:f8:a4:22:
42:bf:9c:62:1a:12:92:11:81:d8:7d:9a:68:bb:4c:
f7:96:c0:8c:0e:74:08:08:2e:a7:84:ff:48:0b:cb:
b1:55:f2:02:f1:81:ae:6c:a2:89:2a:18:12:fa:7e:
34:47:31:b4:18:db:8a:8f:2f:fd:44:41:de:fa:cf:
d9:2c:4c:a8:8e:2b:30:46:38:92:47:2e:8b:77:64:
46:d1:f0:78:b3:6f:03:90:12:ef:78:64:7c:5f:a5:
d1:d3:36:ef:17:f4:9d:d1:fe:ae:ed:48:bc:5f:77:
9a:77:c9:c9:9e:a4:a7:d7:eb:29:09:ed:4f:f9:5f:
a8:f5:fd:e8:a7:5c:6b:d5:9e:97:6b:a8:33:65:ff:
5f:e9:37:c6:5b:ec:e9:84:da:a9:58:2f:7b:79:ce:
a9:19:4a:d3:0c:d0:b6:69:98:59:22:6e:62:ca:f8:
fa:a3:b7:0b:a7:42:a1:f9:38:93:b3:34:05:97:d3:
65:90:ac:55:bc:c2:bb:78:f9:c1:78:bb:a8:64:00:
bd:89:b8:7b:74:ee:e5:5b:66:d7:9d:05:0c:dd:3b:
99:e1:ad:e6:fe:74:73:62:f2:75:ca:a8:dc:d9:db:
96:d6:29:72:19:f5:8f:9e:be:cf:97:be:14:19:34:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6B:C2:BA:3A:78:3E:DD:48:C6:C4:24:5D:F6:99:3B:4B:20:44:61
X509v3 Authority Key Identifier:
keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/KmvCujp4Pt1IxsQkXfaZO0sgRGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.72.0/21
185.11.124.0/22
IPv6:
2a02:e980::/29
Signature Algorithm: sha256WithRSAEncryption
3a:4b:dc:70:d6:ee:84:0d:10:4e:f3:6d:da:5d:ce:c9:06:28:
2c:a6:30:59:5c:e5:9a:5e:f9:b2:53:8c:16:00:e2:9c:0d:ac:
da:4f:d7:ce:61:93:af:da:7c:4c:9a:e3:17:6e:3f:01:bb:33:
a3:13:ca:30:21:72:d2:93:39:8b:b2:7b:1e:fa:9c:4d:7b:41:
d8:4e:7a:74:ca:41:96:4c:ce:f0:9c:7c:a5:dd:ae:e4:13:16:
33:61:a5:9f:88:c0:79:a8:50:c0:84:a8:b4:06:30:af:da:98:
e8:75:91:28:14:92:cd:f9:30:c5:53:8c:74:2a:01:32:13:ae:
f2:e7:60:69:f6:d1:c9:bf:92:6a:aa:17:da:c3:a2:f0:0a:16:
46:5b:cd:ed:53:8d:97:cb:5c:91:fb:19:b4:1b:bc:49:b2:71:
29:c2:28:ee:6d:bc:92:73:84:23:29:1d:4c:b8:e4:7d:81:a7:
37:c5:a7:11:ce:28:2a:8d:30:be:d7:dc:93:90:f6:1b:6d:30:
34:7d:41:18:bb:68:f5:71:83:98:87:ff:cb:5f:5d:1b:7e:aa:
14:7c:f4:3f:4c:fb:01:aa:eb:a9:a0:4e:b9:b5:22:d9:0c:3e:
8e:5a:06:ba:7a:78:82:40:02:1b:c6:7d:bc:cb:c9:95:4e:7f:
43:cc:ad:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:02:52 2024 by rpki-client on console-ams.rpki-client.org