Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/KkPaC_J66mVGT4TrVg2pD6Tx-xY.roa
File: KkPaC_J66mVGT4TrVg2pD6Tx-xY.roa (raw, json)
Hash identifier: 0OM3zFtROjkvPjZzoY2rhWqE6fZq8m7LX3apFFmBlOI=
Subject key identifier: 2A:43:DA:0B:F2:7A:EA:65:46:4F:84:EB:56:0D:A9:0F:A4:F1:FB:16
Certificate issuer: /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial: 018CC7276975041B4C85812734A2C73B8183
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/KkPaC_J66mVGT4TrVg2pD6Tx-xY.roa
Signing time: Mon 01 Jan 2024 22:31:38 +0000
ROA not before: Mon 01 Jan 2024 22:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60672
IP address blocks: 82.192.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:69:75:04:1b:4c:85:81:27:34:a2:c7:3b:81:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Validity
Not Before: Jan 1 22:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a43da0bf27aea65464f84eb560da90fa4f1fb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:f8:57:eb:91:da:a7:42:16:dc:08:d3:b3:
90:f9:e3:02:ad:49:df:fc:92:aa:a3:d9:02:5c:8c:
56:ef:3d:26:56:18:55:bc:74:52:af:24:b5:a7:6c:
a2:4c:5a:70:ba:39:ef:24:1e:b0:34:0e:cc:d3:6a:
cd:b5:59:ab:b5:d3:72:e5:17:05:5b:73:1f:60:29:
fb:66:e4:99:0b:c9:8c:7d:da:a1:86:02:ea:49:6e:
57:e4:df:a8:1d:1e:8c:bd:59:37:fd:2a:d7:09:81:
d9:67:01:f6:19:ed:47:cd:ec:7e:f8:d9:48:b9:04:
b9:06:f8:b7:f0:d9:e1:5b:b8:42:3c:f8:06:24:e2:
41:3c:7d:a5:f4:ae:82:31:4d:86:db:a3:53:6c:4b:
42:50:e5:b6:85:5b:ba:a5:fd:ee:47:86:93:1b:32:
f1:39:ef:8f:ea:63:74:42:59:a4:ba:59:aa:13:48:
13:2c:3f:29:f5:5a:10:31:5a:b6:15:30:af:37:d7:
e2:f9:67:10:13:a3:a1:35:a7:12:a3:8d:ee:4f:56:
dc:a8:03:d6:c6:b8:6e:30:91:20:7f:6c:85:7b:23:
fc:21:42:20:15:ab:9b:7b:b9:84:e4:0c:a1:6e:89:
e3:7b:60:0d:47:77:0b:d8:f7:73:68:39:85:8b:e7:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:43:DA:0B:F2:7A:EA:65:46:4F:84:EB:56:0D:A9:0F:A4:F1:FB:16
X509v3 Authority Key Identifier:
keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/KkPaC_J66mVGT4TrVg2pD6Tx-xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.192.106.0/24
Signature Algorithm: sha256WithRSAEncryption
57:2d:43:c8:7a:d0:45:e4:35:e7:26:c4:b7:ee:b6:75:b7:19:
72:e9:96:f2:1b:d6:15:9e:2b:54:c0:41:46:80:17:36:ed:39:
12:49:92:54:eb:dd:ea:03:0e:cd:e3:9b:1f:43:18:b4:4d:0c:
4f:09:89:2e:94:74:a4:b2:d3:21:95:9c:22:c8:5b:01:14:1d:
81:7a:27:fb:30:4d:bf:fd:58:09:6a:44:3d:65:48:4a:c4:00:
80:0e:de:b7:72:23:61:d4:30:6b:15:58:85:2d:a7:f1:fd:e5:
42:4f:03:5c:66:c9:96:da:9d:67:0e:d4:8c:20:c4:66:3c:08:
25:0a:40:24:ac:6a:03:c6:ef:0b:68:28:fe:4c:e9:0a:ab:fb:
2b:00:1d:c4:67:f6:05:24:a7:50:71:91:ce:9f:4b:45:bb:5f:
16:12:e3:b0:8d:86:b8:e8:3a:a7:d4:f7:64:c5:82:db:91:90:
bb:e7:03:6b:8d:ec:f8:59:ea:ce:dc:9b:46:25:f5:ef:a8:34:
05:b0:0e:7f:24:bb:a8:9d:7a:d0:db:6b:f4:ea:06:33:82:37:
8b:93:50:85:14:a3:c2:d2:d9:f8:c9:af:6e:8b:30:3e:81:13:
8e:2d:9e:52:c0:cf:69:06:8b:ec:17:f9:32:4b:6b:24:f6:32:
99:cf:6c:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJ2l1BBtMhYEnNKLHO4GDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZWNhNDAxMmJmN2I1MDU2ZTJlMGExNjFlYjQ2MTg4NzZj
OTExMmEwHhcNMjQwMTAxMjIzMTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTQzZGEwYmYyN2FlYTY1NDY0Zjg0ZWI1NjBkYTkwZmE0ZjFmYjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0z4V+uR2qdCFtwI07OQ+eMCrUnf
/JKqo9kCXIxW7z0mVhhVvHRSryS1p2yiTFpwujnvJB6wNA7M02rNtVmrtdNy5RcF
W3MfYCn7ZuSZC8mMfdqhhgLqSW5X5N+oHR6MvVk3/SrXCYHZZwH2Ge1Hzex++NlI
uQS5Bvi38NnhW7hCPPgGJOJBPH2l9K6CMU2G26NTbEtCUOW2hVu6pf3uR4aTGzLx
Oe+P6mN0QlmkulmqE0gTLD8p9VoQMVq2FTCvN9fi+WcQE6OhNacSo43uT1bcqAPW
xrhuMJEgf2yFeyP8IUIgFaube7mE5Ayhbonje2ANR3cL2PdzaDmFi+dpGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCpD2gvyeuplRk+E61YNqQ+k8fsWMB8GA1UdIwQY
MBaAFHvspAEr97UFbi4KFh60YYh2yREqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZS15a0FTdjN0UVZ1TGdvV0hyUmhpSGJKRVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85NDg4ZDUtYThkMy00NGI1LTkyZGYt
NThjYWY0NzAxYmUzLzEvS2tQYUNfSjY2bVZHVDRUclZnMnBENlR4LXhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS85NDg4ZDUtYThkMy00NGI1LTkyZGYtNThjYWY0NzAxYmUz
LzEvZS15a0FTdjN0UVZ1TGdvV0hyUmhpSGJKRVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUsBqMA0G
CSqGSIb3DQEBCwUAA4IBAQBXLUPIetBF5DXnJsS37rZ1txly6ZbyG9YVnitUwEFG
gBc27TkSSZJU693qAw7N45sfQxi0TQxPCYkulHSkstMhlZwiyFsBFB2Beif7ME2/
/VgJakQ9ZUhKxACADt63ciNh1DBrFViFLafx/eVCTwNcZsmW2p1nDtSMIMRmPAgl
CkAkrGoDxu8LaCj+TOkKq/srAB3EZ/YFJKdQcZHOn0tFu18WEuOwjYa46Dqn1Pdk
xYLbkZC75wNrjez4WerO3JtGJfXvqDQFsA5/JLuonXrQ22v06gYzgjeLk1CFFKPC
0tn4ya9uizA+gROOLZ5SwM9pBovsF/kyS2sk9jKZz2zl
-----END CERTIFICATE-----
Generated at Mon Jun 17 00:54:59 2024 by rpki-client on console-ams.rpki-client.org