Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/KIJ4ZT-WhXwpa21Qtre_aa_RKjA.roa
File: KIJ4ZT-WhXwpa21Qtre_aa_RKjA.roa (raw, json)
Hash identifier: 56D58bAD1kjTQVHqdHokj2l41BuGqbY7cxh78ApRE9A=
Subject key identifier: 28:82:78:65:3F:96:85:7C:29:6B:6D:50:B6:B7:BF:69:AF:D1:2A:30
Certificate issuer: /CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Certificate serial: 018CC50086BBAABA7BCF9CE3E151C4EA0FF1
Authority key identifier: E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/KIJ4ZT-WhXwpa21Qtre_aa_RKjA.roa
Signing time: Mon 01 Jan 2024 12:29:55 +0000
ROA not before: Mon 01 Jan 2024 12:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207713
IP address blocks: 185.28.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:86:bb:aa:ba:7b:cf:9c:e3:e1:51:c4:ea:0f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Validity
Not Before: Jan 1 12:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=288278653f96857c296b6d50b6b7bf69afd12a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:63:47:24:22:d5:c4:8f:12:6d:a8:0e:aa:
92:80:0c:1c:8e:ed:27:65:0a:57:66:9f:9a:ac:e5:
f2:55:f1:cd:37:97:9d:ae:0d:1f:2d:2a:63:7e:8d:
7f:62:b1:da:4f:c0:cf:62:78:8b:de:e8:83:df:96:
a7:7c:6b:fd:a2:a4:0e:25:f2:d1:4b:be:dd:3d:35:
9a:20:e0:d2:2d:c6:1d:e8:5d:d5:15:3a:bc:ee:f8:
0a:be:80:03:f2:30:63:ab:f1:24:d8:44:42:b8:6a:
ec:e6:27:ae:87:1b:db:f2:9a:d3:c1:ef:19:a1:dd:
3c:17:8b:e5:d4:f1:0d:2f:72:ae:ec:4b:d5:a5:64:
6e:9e:4e:87:c7:6c:cb:68:47:cb:96:e3:a9:78:aa:
40:3f:80:f0:2f:00:f8:9c:75:2e:57:ae:1c:82:72:
ee:ff:bf:1c:b9:64:41:4d:94:f0:fc:7b:8a:56:50:
ee:a8:0a:56:8b:50:21:0c:51:83:e2:2a:6c:d5:66:
2b:07:b2:05:fa:64:e8:61:bc:56:e5:0a:65:5f:05:
78:bb:88:75:77:c4:62:8a:2a:47:84:83:dc:1e:9c:
7b:17:5f:79:a5:41:04:60:d2:ea:ec:12:c0:73:2f:
f6:64:1a:16:d3:b7:a6:18:bb:6e:36:d6:63:6c:2d:
62:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:82:78:65:3F:96:85:7C:29:6B:6D:50:B6:B7:BF:69:AF:D1:2A:30
X509v3 Authority Key Identifier:
keyid:E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/KIJ4ZT-WhXwpa21Qtre_aa_RKjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.119.0/24
Signature Algorithm: sha256WithRSAEncryption
59:1a:2b:64:b4:1a:5e:40:96:90:8c:55:f9:3b:5f:b8:5f:97:
91:a7:ab:2a:1b:d4:58:aa:ed:42:1d:96:ea:c4:71:c9:90:d6:
91:30:f0:27:bb:3c:89:88:b3:ed:e3:0e:35:d1:0e:98:ed:27:
f2:1a:69:ce:8e:a6:95:40:2e:d1:56:e7:e4:f5:f5:5a:89:bb:
80:76:d8:cf:45:08:d0:a3:ea:ce:3f:cd:d5:d9:05:2f:ca:21:
f1:e2:2f:6a:f2:cd:71:6b:28:03:e6:47:e9:11:ad:bf:25:3c:
98:b1:40:d6:ff:98:91:21:c6:69:8d:30:99:5b:14:03:dc:db:
be:6f:b9:c8:c0:f6:fa:5b:88:01:42:54:34:7b:d2:dd:d5:20:
36:8a:46:f1:9c:15:c2:7f:ca:a9:cc:ac:58:ad:c4:82:f8:d2:
20:30:5c:a8:42:ab:f5:1c:3c:84:1a:ae:22:de:4e:92:ff:de:
60:95:ab:37:86:25:f4:8b:68:38:d4:aa:f2:61:36:99:91:68:
d0:34:87:76:37:c4:5d:46:a0:20:59:7f:08:72:90:6d:02:8e:
e0:1c:fe:1a:dd:60:29:b1:38:ba:df:88:8e:75:5d:4c:38:4d:
2c:4d:b4:a5:e0:52:16:a6:a2:4d:6d:67:89:d0:ea:fc:c2:7f:
4c:f9:8b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:22:10 2024 by rpki-client on console-ams.rpki-client.org