Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/kTK3gwS-USa_w7npZO2RVLzaN5I.roa
File: kTK3gwS-USa_w7npZO2RVLzaN5I.roa (raw, json)
Hash identifier: W+sQtg8UZSAXOfbg/YzbOpEOqxYF4S0V74y7xL2rae8=
Subject key identifier: 91:32:B7:83:04:BE:51:26:BF:C3:B9:E9:64:ED:91:54:BC:DA:37:92
Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial: 018CC870920847A5C8AB47C6A437CAD638A5
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/kTK3gwS-USa_w7npZO2RVLzaN5I.roa
Signing time: Tue 02 Jan 2024 04:31:09 +0000
ROA not before: Tue 02 Jan 2024 04:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210201
IP address blocks: 194.34.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:92:08:47:a5:c8:ab:47:c6:a4:37:ca:d6:38:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Validity
Not Before: Jan 2 04:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9132b78304be5126bfc3b9e964ed9154bcda3792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:2b:83:22:ab:f1:a2:75:95:8c:2e:d1:98:
5c:ea:30:21:93:c5:b4:4c:c1:b9:0f:5e:48:20:bf:
8f:14:38:aa:66:51:54:62:3c:44:96:96:ae:12:b9:
c5:6d:a7:cb:8d:56:ed:72:57:8f:92:cb:9b:e2:71:
8b:23:73:e7:44:2e:3d:f2:25:8c:d3:af:4a:76:c7:
76:24:87:7f:78:59:4c:08:e9:d9:4f:b1:ee:60:a1:
66:e4:90:7a:61:5e:70:8b:eb:64:09:84:b6:76:96:
3e:6d:36:b4:b9:83:19:96:57:a4:df:c2:18:4a:22:
e6:26:2b:7d:42:0d:af:90:5e:e9:14:6c:62:14:80:
13:26:e6:bb:21:77:a0:4a:f8:2d:2d:cc:c2:15:4e:
bc:9e:08:83:03:06:a1:cc:d9:03:80:62:61:69:27:
6d:de:50:a7:59:b3:a5:82:9f:e1:e4:53:cc:57:06:
94:3a:78:a6:c3:60:5f:1e:39:ab:bd:0c:c5:14:dd:
74:74:cf:5d:2d:b5:a7:7f:00:02:26:ff:75:21:e5:
f8:10:cd:1a:f3:69:62:4a:3e:03:cf:df:c1:61:1e:
58:2b:91:6f:55:5a:e3:57:6d:5b:e5:8b:41:d0:a3:
96:4a:53:85:99:1d:9a:88:39:29:ec:4c:7d:0b:1f:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:32:B7:83:04:BE:51:26:BF:C3:B9:E9:64:ED:91:54:BC:DA:37:92
X509v3 Authority Key Identifier:
keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/kTK3gwS-USa_w7npZO2RVLzaN5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.96.0/23
Signature Algorithm: sha256WithRSAEncryption
39:8d:53:1d:09:22:0a:9d:06:97:a5:7a:d9:52:7e:db:f9:73:
a2:ae:43:67:07:81:e6:50:e8:a7:16:14:f0:22:86:60:2a:b3:
fd:dd:26:e0:bc:1b:95:24:97:f3:ce:43:e8:47:05:45:79:b4:
f6:61:4b:f2:6c:c5:2d:57:5e:99:f9:43:bd:16:6e:44:af:69:
9d:09:22:47:13:38:8f:12:ae:d6:0e:cb:fa:c0:d5:d2:0b:b0:
8e:6c:77:aa:8c:92:da:e2:ea:a5:0f:bd:c3:61:02:6d:b7:92:
46:81:ee:fd:c8:0e:76:ef:9a:de:49:c5:31:73:df:98:60:4f:
be:ca:7b:fc:78:4a:56:a6:7f:5e:e4:32:40:c0:7b:0d:5e:a2:
81:69:cf:5d:31:1e:cd:88:3b:b9:c4:34:9d:10:26:fc:88:c5:
3c:f7:3f:b2:be:53:a8:33:16:15:42:46:10:77:ce:e2:ed:c4:
9f:b9:57:18:9b:53:13:a5:1a:59:ac:1e:83:ee:0f:c6:7e:29:
b2:e1:0a:b0:c5:af:ab:9f:fd:20:46:5a:ba:5a:ea:bb:b9:8b:
84:b4:75:03:2e:a0:7d:76:85:bb:64:bd:5e:17:fd:e9:3d:c8:
15:02:db:22:83:cb:1c:4f:4f:80:c6:12:0f:30:4c:85:73:8d:
cf:81:82:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIcJIIR6XIq0fGpDfK1jilMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NDBjZjc3OGRkOTgxNzY1N2NkOGQ0ZmVlZGQ0MjNkNDZk
MWE5NjUwHhcNMjQwMTAyMDQzMTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTMyYjc4MzA0YmU1MTI2YmZjM2I5ZTk2NGVkOTE1NGJjZGEzNzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa4rgyKr8aJ1lYwu0Zhc6jAhk8W0
TMG5D15IIL+PFDiqZlFUYjxElpauErnFbafLjVbtclePksub4nGLI3PnRC498iWM
069Kdsd2JId/eFlMCOnZT7HuYKFm5JB6YV5wi+tkCYS2dpY+bTa0uYMZllek38IY
SiLmJit9Qg2vkF7pFGxiFIATJua7IXegSvgtLczCFU68ngiDAwahzNkDgGJhaSdt
3lCnWbOlgp/h5FPMVwaUOnimw2BfHjmrvQzFFN10dM9dLbWnfwACJv91IeX4EM0a
82liSj4Dz9/BYR5YK5FvVVrjV21b5YtB0KOWSlOFmR2aiDkp7Ex9Cx+VowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJEyt4MEvlEmv8O56WTtkVS82jeSMB8GA1UdIwQY
MBaAFElAz3eN2YF2V82NT+7dQj1G0allMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1VEUGQ0M1pnWFpYelkxUDd0MUNQVWJScVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iMDI1YmMtYmM3My00ZDNjLWE0MzAt
MDAzOTRiNjEwYTM0LzEva1RLM2d3Uy1VU2FfdzducFpPMlJWTHphTjVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9iMDI1YmMtYmM3My00ZDNjLWE0MzAtMDAzOTRiNjEwYTM0
LzEvU1VEUGQ0M1pnWFpYelkxUDd0MUNQVWJScVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwiJgMA0G
CSqGSIb3DQEBCwUAA4IBAQA5jVMdCSIKnQaXpXrZUn7b+XOirkNnB4HmUOinFhTw
IoZgKrP93SbgvBuVJJfzzkPoRwVFebT2YUvybMUtV16Z+UO9Fm5Er2mdCSJHEziP
Eq7WDsv6wNXSC7CObHeqjJLa4uqlD73DYQJtt5JGge79yA5275reScUxc9+YYE++
ynv8eEpWpn9e5DJAwHsNXqKBac9dMR7NiDu5xDSdECb8iMU89z+yvlOoMxYVQkYQ
d87i7cSfuVcYm1MTpRpZrB6D7g/Gfimy4Qqwxa+rn/0gRlq6Wuq7uYuEtHUDLqB9
doW7ZL1eF/3pPcgVAtsig8scT0+AxhIPMEyFc43PgYIC
-----END CERTIFICATE-----
Generated at Sat Jun 8 06:07:55 2024 by rpki-client on console-fra.rpki-client.org