Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/kplbPAA693CAyWa1x_KMnZQYvFk.roa
File: kplbPAA693CAyWa1x_KMnZQYvFk.roa (raw, json)
Hash identifier: v6C4iMrzREfQZyjCwij9EvxbxCYmdA3xgTF29gH8zp0=
Subject key identifier: 92:99:5B:3C:00:3A:F7:70:80:C9:66:B5:C7:F2:8C:9D:94:18:BC:59
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018FF201AFB6E00D0577B8F661A9CC2B6B14
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/kplbPAA693CAyWa1x_KMnZQYvFk.roa
Signing time: Fri 07 Jun 2024 09:22:27 +0000
ROA not before: Fri 07 Jun 2024 09:22:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 45.43.172.0/22 maxlen: 22
64.137.29.0/24 maxlen: 24
64.137.39.0/24 maxlen: 24
64.137.44.0/24 maxlen: 24
64.137.45.0/24 maxlen: 24
64.137.46.0/24 maxlen: 24
64.137.72.0/24 maxlen: 24
64.137.85.0/24 maxlen: 24
64.137.114.0/24 maxlen: 24
64.137.116.0/24 maxlen: 24
64.137.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f2:01:af:b6:e0:0d:05:77:b8:f6:61:a9:cc:2b:6b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jun 7 09:22:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92995b3c003af77080c966b5c7f28c9d9418bc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5d:03:0f:a2:86:cd:d3:6a:00:c4:99:10:8a:
44:cd:a9:29:fc:4c:78:bd:a8:ed:35:41:73:d9:89:
f8:7d:d2:be:30:70:4a:4e:c0:30:2d:43:20:cc:e0:
6c:95:44:89:04:a0:27:bf:ec:a4:1e:2b:f0:dd:da:
5d:8f:67:26:b3:85:34:95:08:f5:94:df:d2:c5:15:
e9:fa:cd:2a:b4:43:18:85:82:b8:82:5b:9e:77:d7:
df:eb:13:7d:72:88:b2:fc:ec:67:7c:c7:4d:e7:7d:
b8:17:28:a8:80:58:cc:9d:c0:f9:01:cc:f1:3a:9b:
ff:1c:6e:5b:cc:f1:9c:7e:d3:46:29:1a:61:27:c3:
a0:34:64:46:0c:b2:4c:62:33:e2:23:44:28:9e:09:
ec:8f:6b:ae:31:b6:2f:c8:1e:50:31:e2:4e:59:94:
bf:ad:f6:b5:c1:22:fc:6c:19:ea:2a:f4:ca:46:c7:
92:e4:07:e4:d4:42:b5:4e:c7:e2:72:ad:d9:e8:86:
c1:ee:6c:46:d3:a2:35:16:8a:85:92:d1:f2:da:e8:
57:de:5f:ce:77:47:e8:f3:00:3f:de:d2:82:4a:9c:
c8:16:3a:b1:82:49:10:da:7f:80:60:2c:58:e9:38:
6a:3d:1e:09:22:6e:cb:8c:44:c2:a4:87:71:98:40:
bd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:99:5B:3C:00:3A:F7:70:80:C9:66:B5:C7:F2:8C:9D:94:18:BC:59
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/kplbPAA693CAyWa1x_KMnZQYvFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.172.0/22
64.137.29.0/24
64.137.39.0/24
64.137.44.0-64.137.46.255
64.137.72.0/24
64.137.85.0/24
64.137.114.0/24
64.137.116.0/24
64.137.125.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:84:5a:a0:9c:32:63:2b:42:aa:aa:d4:3c:76:de:cc:f7:03:
49:04:bf:64:1a:d1:15:e4:1f:f1:e3:5d:14:c4:0c:79:16:48:
0a:4c:7f:7f:27:f5:9c:2c:d1:9b:d6:e0:b1:51:d4:b7:e3:32:
19:2c:8b:a5:bb:6a:8b:e9:da:0e:eb:9a:f2:ff:3e:08:ab:64:
ce:f6:84:44:c8:81:23:fd:ec:6d:71:e0:8f:8c:10:4e:ba:79:
44:2b:bf:28:ad:16:19:e8:08:8f:20:86:00:f2:b5:f5:86:c2:
41:52:fe:87:3c:87:44:fa:99:4b:41:c4:1f:0e:e8:8d:98:63:
e5:bc:c2:db:a8:da:20:23:95:4b:a6:27:4f:97:01:aa:2b:ff:
93:0b:92:b1:e0:ab:00:1b:99:d7:c7:c7:6b:21:a9:17:a2:58:
62:75:cc:45:a0:d0:1e:6f:77:6f:bf:70:74:5a:83:df:b7:1f:
2d:61:4a:ea:79:d3:24:18:b3:01:13:31:5b:fa:31:e9:24:17:
e7:8d:08:a3:fc:78:4a:0f:5a:3a:41:e1:4e:1e:31:1b:0b:1f:
c1:ab:b8:95:70:d4:b2:8a:16:27:54:8c:bb:6c:1c:6c:64:03:
5f:36:30:c0:03:20:8e:d2:f6:19:4a:a6:0c:91:05:82:e7:57:
f4:7b:cf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:09:16 2024 by rpki-client on console-fra.rpki-client.org