Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/kdK0FOtxaSQwSMnn_frZospjkRs.roa
File: kdK0FOtxaSQwSMnn_frZospjkRs.roa (raw, json)
Hash identifier: FBfnRqk713WqFbtko/shSav2i0hkwl/rd+d3jTLvidk=
Subject key identifier: 91:D2:B4:14:EB:71:69:24:30:48:C9:E7:FD:FA:D9:A2:CA:63:91:1B
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018CC56EE85D3E2EB98E4972B506B68D2071
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/kdK0FOtxaSQwSMnn_frZospjkRs.roa
Signing time: Mon 01 Jan 2024 14:30:29 +0000
ROA not before: Mon 01 Jan 2024 14:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24940
IP address blocks: 94.72.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e8:5d:3e:2e:b9:8e:49:72:b5:06:b6:8d:20:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 14:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91d2b414eb7169243048c9e7fdfad9a2ca63911b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ef:61:d5:00:58:28:ce:d6:fc:88:69:16:7d:
af:dd:07:92:19:d5:08:f9:87:a1:9f:5e:da:fc:a5:
e4:20:28:05:c5:db:28:94:47:47:25:7a:9d:f8:3f:
20:5b:c7:73:52:82:02:27:5e:3a:48:1f:e8:5a:53:
00:c8:82:bb:32:90:a3:4c:f1:63:08:47:6a:67:17:
21:d4:93:07:41:e6:03:21:87:81:f3:3f:12:46:f6:
a5:73:b7:98:1a:37:a6:f1:55:cf:58:90:4e:8b:7d:
c2:d1:65:c2:f6:13:61:70:f0:46:ef:fb:e0:fa:5e:
5d:fd:74:c6:29:3a:e5:36:94:35:b5:7c:c3:ea:d1:
46:d1:42:16:27:e5:23:af:40:60:89:68:70:56:50:
57:6d:3c:8e:72:d4:a7:80:dd:68:4c:be:08:41:a0:
8a:7e:42:d7:09:5c:85:82:c9:ee:c6:67:4d:71:a7:
cd:e0:44:22:72:55:3f:d5:61:3b:61:09:b8:46:75:
8a:6d:1d:08:b9:01:52:fe:38:14:08:7b:2b:12:b7:
83:47:95:92:1e:7b:4d:a4:d1:7e:91:1b:ec:ce:dd:
a6:d6:1d:36:b0:f9:f1:a4:ba:83:14:45:a1:04:dc:
f6:42:c1:50:3d:27:76:c3:3d:97:69:0e:84:63:49:
a9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D2:B4:14:EB:71:69:24:30:48:C9:E7:FD:FA:D9:A2:CA:63:91:1B
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/kdK0FOtxaSQwSMnn_frZospjkRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.72.141.0/24
Signature Algorithm: sha256WithRSAEncryption
86:16:3c:71:8f:db:77:0f:1b:13:f8:65:34:07:dd:3a:5d:f3:
3f:a6:04:67:e6:a4:ad:1b:5d:06:93:68:6b:fb:eb:6b:9c:83:
2e:93:3a:0f:ec:67:06:92:1c:82:fb:d6:4d:4d:27:1c:ad:6e:
be:7c:cd:f8:c0:28:89:79:08:65:fd:e3:b3:9b:c8:00:76:9c:
ee:85:4f:71:33:20:f3:70:f8:5e:39:f9:1d:50:82:c5:e0:20:
25:28:66:7d:da:4a:60:bb:cf:37:8c:f5:8c:19:0a:fe:b6:3e:
09:10:78:74:40:39:2a:79:eb:75:1f:21:33:a5:71:2b:75:11:
06:15:d9:61:85:68:71:0d:e2:9a:2f:72:53:f3:9d:45:73:58:
96:9e:40:b1:65:31:eb:1b:e1:6b:e3:48:0f:35:ac:38:8f:1f:
3e:0e:65:44:2a:ad:bb:71:a8:10:b0:bc:40:4e:0d:33:dd:79:
ab:17:57:3f:c4:15:8f:a6:77:3a:97:aa:2f:ed:c2:9b:03:ce:
a2:fa:14:39:be:f2:2d:7a:a9:a8:0a:46:d2:ed:cb:79:a8:e7:
de:cc:ad:8d:f5:04:ec:30:30:06:af:e6:cc:1e:c8:13:bd:f7:
fe:d6:bb:87:a7:81:dc:10:3f:2a:25:35:dc:37:97:a9:66:4b:
7a:f6:84:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:48:27 2024 by rpki-client on console-ams.rpki-client.org