Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/kgfQkmxfj42YVmX-oHeKFhEX0Ig.roa
File: kgfQkmxfj42YVmX-oHeKFhEX0Ig.roa (raw, json)
Hash identifier: PfNjY4wz8xbM/CCgKEwZjuOUw27p+V7QA4bu5EqnG54=
Subject key identifier: 92:07:D0:92:6C:5F:8F:8D:98:56:65:FE:A0:77:8A:16:11:17:D0:88
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DFAC2E10205ABE5FB5B2B5B3426FBA
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/kgfQkmxfj42YVmX-oHeKFhEX0Ig.roa
Signing time: Tue 02 Jan 2024 06:32:30 +0000
ROA not before: Tue 02 Jan 2024 06:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208392
IP address blocks: 185.112.80.0/24 maxlen: 24
45.132.253.0/24 maxlen: 24
185.112.100.0/24 maxlen: 24
82.115.222.0/24 maxlen: 24
185.17.1.0/24 maxlen: 24
185.114.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Jun 2024 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:ac:2e:10:20:5a:be:5f:b5:b2:b5:b3:42:6f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9207d0926c5f8f8d985665fea0778a161117d088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:2f:8f:ee:7b:a3:81:3d:ef:c4:ed:bc:32:
13:8c:da:3e:a6:0b:93:40:4c:4d:34:03:03:47:a5:
9d:50:ca:51:64:d1:9a:e0:d6:d2:d5:93:c8:4d:a9:
9a:9c:38:e6:97:eb:08:0f:e8:e6:8e:c4:bd:14:18:
72:cd:24:4e:3f:1b:ba:67:a9:b4:78:ca:13:43:73:
8d:c1:c8:05:d3:a9:55:26:0e:34:93:5c:0e:bd:be:
1e:e1:3c:7e:c5:f9:ed:e4:22:16:32:20:3f:f2:ce:
89:e8:d4:4a:24:c9:d4:69:4e:85:50:80:af:1c:0e:
08:86:83:ce:5f:87:7b:43:e6:7d:39:bd:76:5e:79:
a1:08:8e:a5:10:5d:2e:21:f2:38:8f:02:66:38:7b:
51:b6:bd:53:06:40:c8:6e:66:be:13:f1:79:55:0a:
da:55:6e:7f:2b:3f:66:80:79:b4:4d:88:69:3a:17:
f2:2d:2d:89:5f:fc:ca:8e:ad:79:e0:e1:90:87:64:
ef:ae:61:7c:7f:67:7d:a8:8b:17:71:22:ef:1d:91:
1c:39:20:10:a4:8e:1e:a4:d9:ef:6d:ec:ba:82:f7:
10:51:ed:54:53:8a:6b:30:b0:61:e0:49:46:d6:30:
82:9e:c5:55:a6:ac:bf:c2:48:e4:6d:01:24:67:8f:
62:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:07:D0:92:6C:5F:8F:8D:98:56:65:FE:A0:77:8A:16:11:17:D0:88
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/kgfQkmxfj42YVmX-oHeKFhEX0Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.253.0/24
82.115.222.0/24
185.17.1.0/24
185.112.80.0/24
185.112.100.0/24
185.114.74.0/24
Signature Algorithm: sha256WithRSAEncryption
65:11:fa:0a:0c:96:7c:44:68:c0:1e:2a:e2:01:c2:77:fb:4c:
06:03:b9:e2:5e:b9:ff:03:99:13:57:99:5d:07:5f:b3:01:e7:
2e:36:e0:70:85:f1:6c:6a:de:f2:18:85:06:3f:a3:1d:bc:7a:
f1:30:d9:4a:85:b8:16:52:f9:92:df:63:94:1f:63:ae:07:28:
8c:4d:92:c1:35:00:d4:57:61:0f:91:3e:56:f9:00:f0:e2:96:
3a:ba:7f:de:c4:9c:35:28:29:aa:c6:d0:2a:ca:12:c5:ff:9d:
4f:4a:2c:b4:81:ea:3c:58:ab:a6:24:eb:e1:02:6d:c6:71:72:
fd:24:5d:a9:8a:42:9a:4e:f6:7b:3b:f2:1a:ca:19:18:65:d8:
fd:23:f3:d2:66:1b:b2:25:b0:b5:0d:74:8c:86:b5:85:75:3e:
32:84:cd:22:fe:8c:35:ed:72:91:8f:d9:d7:4e:3e:f5:c0:44:
d8:c0:6b:7d:1b:5b:f0:d8:c5:5c:18:52:f5:65:32:12:79:6a:
fb:e0:72:b0:4b:cf:cc:8e:5d:9a:b2:ad:a1:46:fe:fb:87:02:
7f:80:b9:cc:d7:5b:9b:aa:a7:28:ed:ac:d4:34:e9:32:29:63:
6a:54:0c:1c:7b:9a:2d:79:c4:a0:ea:c8:78:f3:e7:7e:f7:2d:
f6:93:1e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 02:42:21 2024 by rpki-client on console-fra.rpki-client.org