Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/KahNJsY1FeiFl5CGo1ILwO3enEA.roa
File: KahNJsY1FeiFl5CGo1ILwO3enEA.roa (raw, json)
Hash identifier: +tkacath8VGqs9rvaRmIpLIPHEhjyzno+nrwsrr0a8g=
Subject key identifier: 29:A8:4D:26:C6:35:15:E8:85:97:90:86:A3:52:0B:C0:ED:DE:9C:40
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649D40B1E54EBDAE8AA802EF9DCD8F6
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/KahNJsY1FeiFl5CGo1ILwO3enEA.roa
Signing time: Mon 01 Jan 2024 18:29:36 +0000
ROA not before: Mon 01 Jan 2024 18:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12962
IP address blocks: 87.227.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:d4:0b:1e:54:eb:da:e8:aa:80:2e:f9:dc:d8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29a84d26c63515e885979086a3520bc0edde9c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:af:5f:50:12:33:de:82:83:4f:90:85:cd:
0e:89:ec:fe:84:18:c5:49:f3:b2:d9:19:b1:02:58:
a5:88:68:b3:81:cb:fc:fa:c5:04:69:86:73:cf:4f:
a8:1e:49:58:2f:97:2f:9b:14:49:7a:70:cc:6c:e6:
b8:c0:d6:bb:bc:15:ef:5f:3b:50:68:f0:42:ac:05:
3d:40:90:43:c8:3c:99:49:49:7d:f4:a7:16:41:e0:
54:23:c7:e0:7b:04:88:8e:bf:3c:cf:b9:d3:4a:34:
0a:13:92:e9:f8:57:5c:3d:7e:b3:e4:e1:af:48:34:
bb:32:33:a7:31:2f:26:8c:63:6e:05:00:e5:3d:80:
c4:e6:ae:da:3a:53:12:f1:a6:72:a8:a9:f8:4a:2f:
c4:39:eb:cc:e4:30:d6:eb:e4:60:d2:49:0e:92:0f:
e3:75:c2:a2:74:4d:14:e4:ea:f6:69:dc:c2:73:ad:
23:56:c2:72:7d:7f:a1:85:97:46:54:0a:1c:4f:99:
7f:23:f9:d5:da:c6:0f:3d:dd:0c:a6:67:97:50:56:
c0:9b:ac:4a:4c:6d:75:98:ef:c4:21:40:11:c8:db:
31:25:e7:79:1e:8b:e8:72:71:0a:da:8b:f6:f0:e1:
89:f6:6e:0a:c3:8d:bf:74:bc:b5:81:be:f2:c4:6f:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A8:4D:26:C6:35:15:E8:85:97:90:86:A3:52:0B:C0:ED:DE:9C:40
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/KahNJsY1FeiFl5CGo1ILwO3enEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.227.206.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:6f:79:24:e5:51:82:d2:85:67:31:02:6d:3d:26:a3:61:45:
ac:9f:a2:1b:5c:66:35:1c:00:5f:12:81:33:26:19:62:e1:18:
5c:8a:5b:17:81:35:bc:b7:ee:9d:15:62:74:86:84:55:f9:19:
aa:a2:bf:f4:6e:a9:0b:ae:46:c7:ae:1f:ab:27:9e:0d:c8:8c:
be:f5:8f:46:00:63:4f:5a:9f:ab:fe:27:cd:33:1e:31:1d:5f:
23:18:d4:62:82:a5:88:db:42:41:96:e1:8f:cd:36:b4:1a:2a:
b2:17:d4:7b:5f:38:b5:d2:47:ac:a3:65:e6:a5:3c:6e:63:2d:
06:c4:c0:78:da:0b:60:51:6a:8d:bb:c8:10:3a:21:19:2f:95:
a6:8d:96:30:84:d7:5b:1d:0e:15:1f:77:65:69:a2:06:e2:b4:
19:11:fc:5b:2f:8e:75:fa:14:13:98:0e:10:b5:2e:ae:c3:ee:
b6:bd:8b:33:9f:92:e8:74:3c:91:50:2f:88:e7:72:ad:97:d8:
15:d9:c8:e5:67:e4:71:46:c9:cd:a9:cf:a6:2a:f2:bd:84:a0:
76:a2:97:a3:dc:47:bd:60:b9:e6:b9:bf:92:1e:88:67:f5:fc:
6e:cf:d0:85:02:5b:24:b2:da:f3:c3:b7:2b:b1:bc:a1:0c:c7:
7e:3d:dd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:49:05 2024 by rpki-client on console-ams.rpki-client.org