Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KALv4u8GR8HDFm3bSkl3dd9ANaM.roa
File: KALv4u8GR8HDFm3bSkl3dd9ANaM.roa (raw, json)
Hash identifier: 6/U9dn/1OmH3kPULjz9+5yufD49ywvHxFYHXyNYRi7U=
Subject key identifier: 28:02:EF:E2:EF:06:47:C1:C3:16:6D:DB:4A:49:77:75:DF:40:35:A3
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A7327921CB518AF79D5C5BB3A960F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KALv4u8GR8HDFm3bSkl3dd9ANaM.roa
Signing time: Tue 02 Jan 2024 12:33:48 +0000
ROA not before: Tue 02 Jan 2024 12:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41082
IP address blocks: 194.87.100.0/24 maxlen: 24
195.133.90.0/24 maxlen: 24
195.133.91.0/24 maxlen: 24
194.87.15.0/24 maxlen: 24
194.87.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:73:27:92:1c:b5:18:af:79:d5:c5:bb:3a:96:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2802efe2ef0647c1c3166ddb4a497775df4035a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:11:d3:b5:66:8a:ff:4b:3a:0a:47:49:52:
87:6b:db:d6:8f:2b:16:c7:a4:3a:16:6e:3d:28:00:
9d:98:be:c3:c0:8b:90:af:6c:b8:f6:25:b6:86:de:
5e:22:f6:26:d6:f2:ab:3d:d5:3c:65:5f:be:1e:6f:
5b:ee:98:14:b9:ed:86:09:e9:82:f7:97:ec:5d:f1:
14:8b:be:d8:c9:3b:dd:49:b9:84:10:01:0e:45:48:
94:63:cb:74:21:22:78:7c:ef:d9:ad:60:2c:1a:c7:
81:cf:7b:08:e7:2c:69:8d:7b:78:a1:62:30:e4:01:
5b:9d:e5:98:15:dc:2b:cc:11:7c:b9:7e:a7:ec:2d:
64:80:48:a3:38:45:ee:0d:d2:2d:b6:c8:8c:4b:10:
fc:27:6a:17:a4:33:be:25:ce:9f:20:d3:8b:51:e9:
68:b9:db:0d:21:a2:80:5f:5b:12:99:a1:17:15:fc:
41:a5:bd:d7:7c:0e:ab:28:72:a3:ae:60:98:2c:15:
10:17:b9:71:e9:59:b0:bb:5e:4a:3c:ae:92:16:6d:
b2:02:ad:fc:f2:ad:28:43:5a:aa:00:ca:e8:0d:07:
e9:34:2f:31:9f:e7:5b:8d:28:b0:f8:0c:50:33:35:
2e:5c:f6:32:33:43:cd:f8:33:81:f5:43:2d:c4:30:
38:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:02:EF:E2:EF:06:47:C1:C3:16:6D:DB:4A:49:77:75:DF:40:35:A3
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KALv4u8GR8HDFm3bSkl3dd9ANaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.15.0/24
194.87.100.0/24
194.87.173.0/24
195.133.90.0/23
Signature Algorithm: sha256WithRSAEncryption
25:cc:2c:5d:12:3e:76:5d:fe:c9:34:3c:bf:a3:4d:65:ab:85:
c2:af:47:64:42:ac:a1:14:25:9c:6d:4d:3b:ed:42:40:2c:f9:
d8:c6:bf:de:79:05:f5:c6:a6:25:2d:c8:ca:e0:f4:d8:b4:6a:
3d:cf:a8:c7:7e:0e:a9:f4:07:86:66:08:1c:30:ec:81:41:05:
68:2b:f0:5c:5f:e5:3d:cf:4d:46:33:16:cd:37:2b:63:97:d8:
5a:09:b3:7e:22:f7:3e:9e:9c:4a:6a:dd:77:be:45:19:6c:21:
ff:a7:c3:41:a4:74:6f:96:d1:d8:37:17:0d:da:ae:db:c3:a2:
63:4d:1e:11:97:33:7d:f1:c1:c5:2e:6c:d6:07:42:fb:0b:a4:
7d:ca:93:65:79:6c:06:7f:ca:55:28:ce:61:0f:85:2d:9b:c3:
81:ff:6b:4a:c0:56:aa:16:d5:72:4d:6f:dd:55:18:1a:11:16:
c4:23:74:dd:9a:3f:dd:df:fa:5d:25:59:c4:af:22:04:09:21:
21:c8:c4:3e:59:3c:07:08:ea:48:cf:7a:5c:7d:7a:38:02:6c:
49:dd:c0:61:c7:24:29:34:88:70:1d:03:72:0b:c8:0a:1a:02:
5d:c6:0b:37:d8:ea:ee:9d:f4:4c:22:4d:92:b2:2e:2e:72:97:
ef:0d:1f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:39 2024 by rpki-client on console-fra.rpki-client.org