Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/K_kGEDOPsLxRtyZuSALkl2GJuwI.roa
File: K_kGEDOPsLxRtyZuSALkl2GJuwI.roa (raw, json)
Hash identifier: WBV4xvDwlQCLgW3xxspr979oECPdDj/H3Lz/3YSpZzo=
Subject key identifier: 2B:F9:06:10:33:8F:B0:BC:51:B7:26:6E:48:02:E4:97:61:89:BB:02
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 019020B86801A5F5C17472E32BDF75F308AB
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/K_kGEDOPsLxRtyZuSALkl2GJuwI.roa
Signing time: Sun 16 Jun 2024 11:04:34 +0000
ROA not before: Sun 16 Jun 2024 11:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207724
IP address blocks: 92.114.50.0/24 maxlen: 24
92.114.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:20:b8:68:01:a5:f5:c1:74:72:e3:2b:df:75:f3:08:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jun 16 11:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bf90610338fb0bc51b7266e4802e4976189bb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:69:41:cc:b1:f8:31:d7:36:e6:5f:27:c4:
54:08:27:70:3b:b3:e6:bb:87:a3:41:28:1d:ed:6e:
3b:54:99:06:e3:ab:8f:fd:b0:48:8c:67:50:b2:b8:
c6:94:de:e1:57:61:2e:2b:e6:5f:dd:a6:77:25:76:
90:9f:28:94:b1:bf:d4:c7:33:11:c1:e6:03:4d:e2:
00:0e:13:95:07:bd:dc:e0:c4:36:19:ad:53:21:6b:
bd:ed:b8:fc:5d:c9:cf:0b:b2:4d:de:5f:6b:2a:a9:
2e:58:64:8b:46:78:42:e8:7b:85:a5:fb:a2:82:1e:
eb:3e:a4:a9:4b:24:32:61:bb:c1:bf:17:16:73:04:
5a:16:ca:bd:fe:13:18:b4:83:25:ba:4c:d2:ca:bd:
69:f3:87:75:bd:09:72:41:ba:20:de:ae:a1:4e:70:
b8:bf:ea:f9:e1:08:c6:7e:3a:60:d7:4b:33:1c:3a:
1d:02:94:da:8b:79:7f:d3:65:23:4c:a2:bf:d1:1d:
72:84:10:5c:16:74:df:f3:4e:1e:7c:43:15:ea:00:
5b:4c:b5:f8:0d:3b:21:1a:72:99:e7:6c:9e:bf:bf:
b8:88:24:c3:ab:a2:83:fe:06:b6:5a:06:96:6b:d9:
9b:53:b3:78:cf:7d:40:eb:b4:d1:5f:76:ce:2a:d2:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F9:06:10:33:8F:B0:BC:51:B7:26:6E:48:02:E4:97:61:89:BB:02
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/K_kGEDOPsLxRtyZuSALkl2GJuwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.50.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:cd:b5:69:43:90:33:6e:85:bc:51:2d:6b:80:89:f7:8a:20:
b8:75:cb:5d:a9:3f:59:c1:41:3e:f2:c0:3c:16:df:b5:17:f9:
07:f3:d6:47:e4:89:a8:7f:38:ae:6e:e6:fb:8c:1c:63:fa:de:
48:cb:42:db:44:67:67:03:2c:6c:d5:c9:0f:40:63:af:4c:17:
85:a1:e9:5b:1e:e6:c6:c1:36:76:dc:c3:eb:21:4e:b6:79:f6:
7f:5f:f2:2d:a2:0d:8f:67:93:03:04:60:be:4e:3e:1f:80:ad:
0c:c5:5a:3b:93:c7:41:3d:37:14:0a:44:98:d4:97:d0:43:fc:
68:dc:5d:98:6a:e2:4b:43:8f:df:fc:c8:be:16:9e:80:74:ef:
8f:ef:1e:79:12:f2:b3:43:8e:6d:cf:4e:b2:e9:18:fe:97:8c:
ed:59:34:0f:62:6d:95:20:3c:6f:d7:3f:80:cc:1f:a3:86:7d:
77:77:76:e5:9f:74:b0:36:ff:7a:46:4e:c6:4d:67:92:00:34:
62:24:12:1d:94:86:c2:85:69:e4:fe:9c:4e:fd:3f:71:63:17:
ab:0a:25:2d:f0:7c:a6:97:a1:0c:bb:94:e4:b7:ea:98:42:bc:
c5:e4:50:f2:7f:9d:5e:7a:d5:9e:9a:0d:60:bb:3a:fc:65:bd:
e9:82:c9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 08:13:18 2024 by rpki-client on console.sobornost.net