Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/K5H-LYRvkiXXBM0FJgRX0LGZSTo.roa
File: K5H-LYRvkiXXBM0FJgRX0LGZSTo.roa (raw, json)
Hash identifier: CvOiDOYI9t1mQsM5msxWxv8sw1uJSBLq2jzm/+zYnLA=
Subject key identifier: 2B:91:FE:2D:84:6F:92:25:D7:04:CD:05:26:04:57:D0:B1:99:49:3A
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 018FBFADB20A09ACC666FC3450D60DE907BD
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/K5H-LYRvkiXXBM0FJgRX0LGZSTo.roa
Signing time: Tue 28 May 2024 14:49:42 +0000
ROA not before: Tue 28 May 2024 14:49:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198102
IP address blocks: 78.111.224.0/20 maxlen: 24
86.105.236.0/22 maxlen: 24
89.35.168.0/22 maxlen: 24
89.45.212.0/22 maxlen: 24
91.231.62.0/24 maxlen: 24
128.65.200.0/23 maxlen: 24
128.65.204.0/23 maxlen: 24
134.255.164.0/22 maxlen: 24
134.255.168.0/22 maxlen: 24
185.85.192.0/23 maxlen: 24
185.85.194.0/24 maxlen: 24
195.28.8.0/23 maxlen: 24
195.210.40.0/23 maxlen: 24
195.225.40.0/23 maxlen: 24
195.238.80.0/23 maxlen: 24
213.225.240.0/20 maxlen: 24
2a00:4060::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bf:ad:b2:0a:09:ac:c6:66:fc:34:50:d6:0d:e9:07:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: May 28 14:49:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b91fe2d846f9225d704cd05260457d0b199493a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:d8:75:b9:3b:2b:b3:a3:7f:25:2d:0b:d6:
e0:22:60:f3:f9:a6:3c:c1:5a:6d:19:b8:26:46:4f:
60:00:df:dd:c5:b8:ec:4a:b0:45:44:11:03:e8:0b:
2a:ae:11:c9:4d:54:bc:af:e5:2d:35:16:3a:bd:90:
d7:fe:0d:d5:50:29:4e:cf:f6:2b:8f:d9:7c:8d:4a:
a3:ad:89:5a:21:9c:98:80:bb:fd:d7:b2:2b:ef:57:
ec:fd:53:a2:99:f7:aa:eb:78:23:ca:f2:b0:32:9f:
10:3b:ce:b2:29:74:3f:57:81:80:5f:27:60:8f:58:
df:39:7c:c7:b5:39:ca:35:72:64:15:f7:15:ef:d9:
45:4c:89:69:17:59:7a:3f:ab:f9:48:2e:c8:1f:70:
2b:04:a8:c4:b8:b1:b1:ca:a7:fd:41:4c:16:9b:7c:
52:2e:c8:b3:87:81:c6:ac:34:95:45:d1:32:c8:45:
be:5e:0c:21:ed:f1:34:1a:e4:79:8e:81:ef:75:0f:
90:db:e7:7b:1b:92:f0:96:c8:50:cb:84:a1:36:2e:
87:46:de:cd:01:e6:bb:44:20:ac:9e:ae:97:4b:25:
d8:3d:4a:e7:c4:2b:77:7a:69:8e:68:e6:52:e2:24:
39:9b:3a:26:fa:91:3d:c1:b2:4f:39:a0:50:89:55:
85:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:91:FE:2D:84:6F:92:25:D7:04:CD:05:26:04:57:D0:B1:99:49:3A
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/K5H-LYRvkiXXBM0FJgRX0LGZSTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.224.0/20
86.105.236.0/22
89.35.168.0/22
89.45.212.0/22
91.231.62.0/24
128.65.200.0/23
128.65.204.0/23
134.255.164.0-134.255.171.255
185.85.192.0-185.85.194.255
195.28.8.0/23
195.210.40.0/23
195.225.40.0/23
195.238.80.0/23
213.225.240.0/20
IPv6:
2a00:4060::/29
Signature Algorithm: sha256WithRSAEncryption
04:83:a2:6f:a1:55:a6:a6:37:00:6c:88:40:b0:e4:f1:af:14:
a3:5a:f2:03:13:f4:ec:05:8f:72:35:6a:9c:e5:bb:30:15:ba:
dd:5b:a6:84:16:3a:bc:97:17:58:eb:69:e2:3f:71:dc:40:17:
a6:00:ee:2f:06:2b:eb:db:ea:a3:0a:81:1a:20:9e:97:6a:18:
91:08:90:aa:a5:5f:6f:e0:e8:f2:41:b8:06:5e:41:1d:9d:70:
50:c2:f8:53:ad:76:89:a3:d3:bb:f8:eb:e3:b0:0e:9e:35:a5:
95:ea:e0:52:3b:5c:b7:21:2b:2d:6b:cd:ed:1e:75:5a:e5:52:
43:4c:f6:db:24:b6:c6:70:3d:f1:a5:51:20:86:37:e2:34:77:
fd:24:d8:ae:c4:9f:87:eb:2c:83:1c:6d:31:71:f6:bc:a3:64:
30:9e:01:55:a4:72:6a:56:dd:a0:72:90:84:b0:14:97:88:4f:
f2:92:b4:ff:99:5b:6b:01:1c:08:72:a9:d6:08:19:4e:1d:44:
36:a2:d1:b4:8c:41:05:4c:0c:fd:cc:a3:27:c6:a4:38:1a:8c:
76:89:71:0d:23:55:bf:b4:c8:6d:45:52:af:57:f2:e6:9a:f8:
fb:2c:e5:f5:c9:5d:d4:b1:0c:1a:55:a0:fc:b8:00:a7:88:67:
6e:28:da:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 21 17:37:17 2024 by rpki-client on console-fra.rpki-client.org