Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/KGLVA7rydQC7m2R8pGkYmdASlos.roa
File: KGLVA7rydQC7m2R8pGkYmdASlos.roa (raw, json)
Hash identifier: G62jHh0YDTIrX8RX3JqirZDeQukCfIhXSsvfxYa4z9Q=
Subject key identifier: 28:62:D5:03:BA:F2:75:00:BB:9B:64:7C:A4:69:18:99:D0:12:96:8B
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018CC56E367CECECDC32FC738C7893AE37E0
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/KGLVA7rydQC7m2R8pGkYmdASlos.roa
Signing time: Mon 01 Jan 2024 14:29:43 +0000
ROA not before: Mon 01 Jan 2024 14:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35053
IP address blocks: 85.237.69.0/24 maxlen: 24
85.237.70.0/24 maxlen: 24
85.237.84.0/22 maxlen: 22
85.237.88.0/24 maxlen: 24
85.237.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 15:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:36:7c:ec:ec:dc:32:fc:73:8c:78:93:ae:37:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jan 1 14:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2862d503baf27500bb9b647ca4691899d012968b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:b5:c6:4e:2c:6c:5b:03:ed:ae:66:a3:d3:
c3:72:e6:52:5e:c3:e4:b2:e1:e7:40:33:a4:d4:df:
c8:95:22:6a:b1:92:99:d2:e3:5d:b0:ad:2b:64:bb:
1d:b4:3f:ed:cc:3e:84:9c:c0:3d:67:40:12:59:15:
1b:95:95:2a:b2:da:b1:77:57:4c:9d:15:e7:8c:97:
a1:13:3c:55:8c:61:cb:f8:58:57:b7:4f:46:4c:ca:
d5:57:fd:2b:e9:cb:18:71:5c:18:43:bf:a6:9d:65:
64:b7:53:06:fb:68:26:18:06:02:ec:f3:4b:62:8f:
0f:a1:ad:55:22:1b:31:a8:db:f9:ee:da:ee:fa:1e:
7f:24:c7:34:d0:fb:16:fd:b0:4f:5d:14:d2:e7:f2:
9a:df:ba:f0:ee:fd:f6:ee:64:fb:fc:d6:78:62:b9:
cd:bb:f9:b7:b1:93:5f:04:fd:36:b5:eb:40:14:30:
ee:05:bc:7a:96:26:9b:f5:3e:5a:69:a7:d5:80:0d:
7e:a9:57:a1:9f:1d:c5:7a:93:18:71:fc:22:e6:da:
8f:b4:0a:e1:15:83:80:fa:ed:9b:d6:94:ef:94:77:
83:68:e0:3e:cf:23:24:71:da:1a:ad:a1:84:4d:46:
54:56:fc:ef:f7:cf:23:fa:9c:4d:5f:41:3b:2f:6d:
d8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:62:D5:03:BA:F2:75:00:BB:9B:64:7C:A4:69:18:99:D0:12:96:8B
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/KGLVA7rydQC7m2R8pGkYmdASlos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.64.0/22
85.237.69.0-85.237.70.255
85.237.84.0-85.237.88.255
Signature Algorithm: sha256WithRSAEncryption
4c:fb:69:d3:18:49:69:7f:1f:be:a7:75:21:13:40:84:82:f1:
b2:06:da:7a:43:2e:0e:2a:8c:00:11:29:f1:3d:5c:d1:4c:59:
49:16:d0:ed:04:c4:31:4b:80:50:00:05:bf:b2:28:d3:43:96:
30:cc:81:6e:97:8c:82:73:4d:62:6d:31:12:fd:0a:74:0b:bd:
37:63:80:83:85:59:56:69:ab:97:16:b4:8e:65:3a:5b:d2:02:
96:56:4e:ec:43:08:75:30:39:23:16:c3:64:f7:a6:38:9c:19:
f0:80:76:77:e4:27:37:70:32:69:ca:ff:2c:b1:ff:d2:30:17:
3e:1a:8f:cb:ce:dd:76:00:9b:2e:8f:35:bf:57:8e:7a:b5:44:
5d:df:81:a4:72:75:7d:e9:f2:79:df:50:b3:52:a7:a9:7b:45:
93:c6:79:fa:3d:97:fe:c2:cf:44:3a:bb:46:0f:c2:76:66:05:
38:60:f6:f5:76:f2:c3:10:ab:1a:3c:18:65:28:03:73:26:46:
ea:0b:a9:fa:ad:d8:32:8d:3c:41:b0:fd:ea:66:05:ca:ea:d7:
6d:30:71:85:8c:51:04:08:b9:9e:06:4c:88:e5:c0:2e:78:fa:
b6:99:50:f6:89:48:3e:a9:e4:1f:b1:4c:2a:08:5e:53:70:5e:
65:f7:02:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org