Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/KvJ70ouw5yi6SGEa1y7QJ1RcmE4.roa
File: KvJ70ouw5yi6SGEa1y7QJ1RcmE4.roa (raw, json)
Hash identifier: 0p2RIne+FSp8/qfHnhyKXIPeVbeG2W+Fp7mdJDY1EX0=
Subject key identifier: 2A:F2:7B:D2:8B:B0:E7:28:BA:48:61:1A:D7:2E:D0:27:54:5C:98:4E
Certificate issuer: /CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Certificate serial: 01905ED24B70C514A3934A534AAF69BC467C
Authority key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/KvJ70ouw5yi6SGEa1y7QJ1RcmE4.roa
Signing time: Fri 28 Jun 2024 12:29:18 +0000
ROA not before: Fri 28 Jun 2024 12:29:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29156
IP address blocks: 147.29.0.0/17 maxlen: 17
147.29.128.0/20 maxlen: 20
147.29.144.0/22 maxlen: 22
147.29.148.0/23 maxlen: 23
147.29.152.0/21 maxlen: 21
147.29.160.0/19 maxlen: 19
147.29.192.0/18 maxlen: 18
152.95.0.0/16 maxlen: 16
2a01:5440::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5e:d2:4b:70:c5:14:a3:93:4a:53:4a:af:69:bc:46:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Validity
Not Before: Jun 28 12:29:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2af27bd28bb0e728ba48611ad72ed027545c984e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:8e:a0:01:53:7e:9b:c7:74:05:f9:c2:7e:
36:22:40:a1:8b:57:cc:ec:14:c5:9a:f8:b2:94:2c:
2a:f3:10:60:9d:b5:83:f4:46:20:da:84:c6:9a:fe:
ea:4e:81:9f:2e:af:59:bd:f8:1e:df:78:73:ac:be:
97:0b:c2:a4:bb:f0:5d:2d:86:19:fb:59:59:50:f2:
4d:ef:a3:fa:16:bc:98:d5:5a:c9:cd:ff:1a:ff:c3:
54:79:c0:60:ef:94:d8:da:5c:19:97:cd:67:8d:e0:
2e:b7:7d:97:3e:96:83:f9:52:27:97:65:bb:66:9e:
e4:29:78:1f:c2:6c:69:8c:29:f1:5d:33:ad:35:43:
fa:39:f7:ca:ca:8a:40:67:7f:06:2d:91:b3:67:6b:
06:d2:1c:8a:21:32:d0:f9:b8:73:24:9e:f9:26:b7:
f0:9c:1f:5b:44:fe:32:41:d3:a6:e1:86:83:42:18:
72:69:45:f8:98:28:d2:b6:cd:a4:c1:12:ad:19:6a:
e0:05:36:f8:da:35:4d:e9:99:f2:7b:d6:93:db:8e:
2b:f6:d2:70:25:5d:63:f8:8f:e1:fc:4d:e8:30:19:
13:c7:44:c4:4b:bb:70:dd:b7:1e:0a:ef:71:03:b1:
d9:73:67:b1:22:25:f2:3e:b9:cf:48:75:89:51:17:
71:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F2:7B:D2:8B:B0:E7:28:BA:48:61:1A:D7:2E:D0:27:54:5C:98:4E
X509v3 Authority Key Identifier:
keyid:C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/KvJ70ouw5yi6SGEa1y7QJ1RcmE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.29.0.0-147.29.149.255
147.29.152.0-147.29.255.255
152.95.0.0/16
IPv6:
2a01:5440::/32
Signature Algorithm: sha256WithRSAEncryption
94:17:ea:d9:da:b3:89:e9:eb:b9:36:98:81:07:b1:dc:97:af:
64:36:a2:25:2c:c8:a9:26:da:12:cf:bb:0b:57:15:c0:a4:af:
25:21:dc:aa:f6:70:bd:1c:70:e4:34:8b:60:0b:74:60:90:2d:
51:69:c1:99:b2:3f:3d:53:5d:ee:70:c2:d6:fc:b9:24:05:81:
3a:50:fe:17:f4:af:75:f0:4f:12:6e:c3:1e:8c:28:7f:93:c3:
69:90:f6:ed:94:3c:78:f0:45:cf:33:c6:a1:ed:10:b3:de:08:
1b:38:7b:fe:29:02:bc:b9:86:39:47:d4:e4:c2:9f:91:ed:6a:
c7:c1:ba:5c:5a:1d:4a:0f:93:fa:b6:0d:51:7c:7b:a1:88:f4:
54:a8:ab:6e:55:cc:f9:60:03:a9:8b:ad:a7:9b:25:65:3b:1d:
34:a7:20:fd:78:d4:eb:01:59:5d:77:0e:a7:b3:a3:e7:ee:07:
9d:02:54:22:26:a9:c9:06:bb:be:17:53:0f:13:77:b5:95:f8:
18:f1:4b:2b:03:2e:3d:c6:0c:99:e2:18:24:94:52:96:e1:a0:
46:f5:ee:40:7f:c9:ab:40:56:87:54:54:8f:b7:bd:23:a3:92:
2c:81:5d:6f:c9:96:e0:af:8f:d8:c5:e4:57:0c:b1:73:e0:e7:
50:36:2c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:02:21 2024 by rpki-client on console-fra.rpki-client.org