Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/Kwe3Ad3pOhho9wgmGA81n6fKp9M.roa
File: Kwe3Ad3pOhho9wgmGA81n6fKp9M.roa (raw, json)
Hash identifier: iONMgjbDrdey3suuVyFGK4YIGq093QsvxOH7/Q3p8z8=
Subject key identifier: 2B:07:B7:01:DD:E9:3A:18:68:F7:08:26:18:0F:35:9F:A7:CA:A7:D3
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 018CC64B6FCB341F9E28C1B3D61B17F4B6ED
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/Kwe3Ad3pOhho9wgmGA81n6fKp9M.roa
Signing time: Mon 01 Jan 2024 18:31:21 +0000
ROA not before: Mon 01 Jan 2024 18:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199263
IP address blocks: 92.118.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:6f:cb:34:1f:9e:28:c1:b3:d6:1b:17:f4:b6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jan 1 18:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b07b701dde93a1868f70826180f359fa7caa7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:36:7e:f8:2c:54:6b:1a:3e:30:fb:8d:7d:
28:f0:b5:92:2d:c5:f3:a1:60:00:56:d9:20:95:9f:
f0:2c:f5:04:92:9f:9a:5b:a8:2d:bf:c3:fb:75:d8:
2c:a8:9b:1a:7e:24:07:9a:9f:bc:a2:2b:08:1b:c1:
4d:81:fe:97:48:45:d4:b8:03:47:c3:a5:47:6f:97:
88:b3:f1:26:13:2e:26:82:98:15:37:6d:e0:44:79:
df:2f:3b:a0:bc:3c:da:a2:b9:cb:94:bc:c3:17:53:
d7:e6:14:b5:74:0d:63:50:7a:8b:65:3e:4e:8d:1a:
5a:16:1a:c4:a3:ec:4c:7e:57:91:e6:9f:9b:46:81:
ee:e6:61:8c:39:ef:5c:5d:a1:f4:fd:c1:70:60:73:
58:df:8d:94:09:b0:2c:c4:57:05:b7:d5:b1:a0:47:
a1:a1:ed:8f:7f:ed:a0:25:83:b8:fb:2d:83:7f:a0:
f0:e9:71:ff:ee:7e:0a:4b:92:93:64:38:a1:62:c4:
aa:7a:55:3f:e7:6d:d7:85:68:ad:28:8c:81:0f:4a:
7f:fa:55:9d:85:90:fb:a4:93:c3:9c:dc:c0:57:cf:
2f:07:4d:c6:73:8a:6f:10:32:a3:5a:db:84:58:81:
65:1d:42:2e:c3:0e:ef:e1:0c:a6:16:b9:02:c4:66:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:07:B7:01:DD:E9:3A:18:68:F7:08:26:18:0F:35:9F:A7:CA:A7:D3
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/Kwe3Ad3pOhho9wgmGA81n6fKp9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.227.0/24
Signature Algorithm: sha256WithRSAEncryption
30:bb:0f:c3:7d:c8:db:79:90:81:04:b6:d8:0b:59:6e:3e:d7:
cb:fd:66:e7:69:a5:4e:a3:b0:e9:07:48:ee:53:1b:e8:9c:7c:
af:73:a6:79:ac:57:49:e6:8b:98:aa:aa:86:e4:08:86:bf:b9:
8f:e4:49:02:0c:a7:e5:90:1c:76:1f:69:ce:0a:8a:c5:26:cd:
8e:42:15:a2:43:54:e5:92:f6:8e:d9:cb:53:ad:2e:0a:8d:6c:
68:43:13:5f:8c:3d:7e:8a:f1:59:6e:11:70:75:42:0f:3a:d6:
08:cd:3f:f0:d4:64:a0:1e:54:a4:d8:dc:0c:b0:f1:02:34:ae:
15:86:52:4e:3c:d5:46:17:8a:c0:31:0e:37:32:45:72:78:a0:
b5:27:49:43:3a:33:78:f3:bd:58:49:0e:22:f3:ab:40:80:37:
00:31:f1:fe:16:a0:7a:b3:f1:a2:df:ae:89:68:68:ff:6d:5c:
a8:7b:2e:31:30:36:c5:6c:77:6c:51:1e:c9:83:51:40:ad:70:
d9:02:35:03:14:e6:99:d6:2b:94:8b:60:ad:4f:ff:4d:c9:10:
24:8b:db:91:fb:af:d9:65:b1:06:8c:ef:32:00:de:3f:1e:d3:
b4:41:fa:75:30:37:da:72:29:90:5c:61:1f:9c:e6:50:87:d9:
3e:46:eb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:58 2024 by rpki-client on console-fra.rpki-client.org