Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/KyZ7V1ZDOAh08qGuUSci98IKSm4.roa
File: KyZ7V1ZDOAh08qGuUSci98IKSm4.roa (raw, json)
Hash identifier: OdIyIzqHEIcYVyTdaSLalgdeRp7VxQiTSxmnL0QbSHw=
Subject key identifier: 2B:26:7B:57:56:43:38:08:74:F2:A1:AE:51:27:22:F7:C2:0A:4A:6E
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018F0647595017902E57CE539FF1A42A369E
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/KyZ7V1ZDOAh08qGuUSci98IKSm4.roa
Signing time: Mon 22 Apr 2024 14:48:10 +0000
ROA not before: Mon 22 Apr 2024 14:48:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212335
IP address blocks: 185.244.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:06:47:59:50:17:90:2e:57:ce:53:9f:f1:a4:2a:36:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 22 14:48:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b267b575643380874f2a1ae512722f7c20a4a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:e9:4b:47:aa:0f:5e:da:86:90:99:2a:18:
fa:19:d1:d5:aa:56:78:f4:e6:27:e8:d4:61:58:ec:
78:13:43:4f:35:c0:de:6c:ea:56:63:50:f0:3d:fe:
80:69:a1:3b:d8:aa:d4:4e:5f:b4:d6:4f:c0:ce:25:
b8:b9:3e:45:52:85:b6:c4:00:aa:2c:59:1a:b9:97:
95:b5:7a:fa:d7:c2:b0:06:96:34:12:ff:ba:c9:23:
c2:30:c3:1d:35:c5:52:a2:2c:ef:27:52:5c:13:54:
1d:18:1d:65:0a:01:88:08:c1:56:99:60:dd:65:b4:
97:1a:1c:79:bb:6e:56:57:a9:9a:8d:88:a4:52:0d:
06:91:16:9b:25:13:8d:52:7c:ac:70:47:7c:c8:4d:
c2:34:ea:bb:65:b4:1e:2f:43:27:ab:55:7d:dc:a0:
b0:23:e0:a5:2e:63:0c:3f:a8:65:67:0a:e6:31:18:
fd:a1:e0:86:11:1f:b8:6b:07:aa:88:af:2c:30:d8:
84:11:4b:14:e4:1c:ac:48:b5:a5:8f:86:11:6e:b1:
ce:a4:7e:6a:bc:da:33:fc:b6:f4:e6:a3:9e:7e:0c:
25:46:4d:7c:ae:64:c9:c3:1f:8b:f0:e4:78:0a:06:
07:b2:0b:2f:11:f0:b4:79:0a:06:f3:4e:07:ee:ad:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:26:7B:57:56:43:38:08:74:F2:A1:AE:51:27:22:F7:C2:0A:4A:6E
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/KyZ7V1ZDOAh08qGuUSci98IKSm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.107.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:56:86:7a:3a:11:5c:9b:67:5c:f1:97:6e:8c:e1:c9:6d:95:
46:db:74:35:7a:e9:49:5e:8a:ae:f7:b0:c3:e1:bb:60:e0:ee:
44:3d:2c:24:e7:fc:42:e5:2c:49:64:49:d3:49:08:2d:94:2f:
7b:00:5e:52:aa:0c:b7:1c:b7:45:63:58:65:c9:1a:51:a1:4b:
08:5a:cb:44:c5:4b:b2:d1:2d:f2:69:4d:cf:6c:a2:e6:00:24:
87:66:fa:94:2e:8e:e7:27:fd:90:14:71:d2:8e:5d:cc:f1:c2:
8f:6b:2a:cc:70:80:39:db:ec:fe:11:10:17:87:a6:3b:21:d7:
51:10:f6:f3:ba:5e:12:e6:6c:5e:3d:b2:4f:25:93:10:c4:7a:
ba:86:e7:79:a5:db:aa:20:71:92:25:e5:b1:ae:8d:0f:43:6d:
5a:b2:ce:eb:47:10:f2:3f:60:25:68:35:a1:20:90:31:b0:c3:
62:ae:6a:d1:fa:17:16:1b:b2:c7:e3:fc:4e:27:4c:6a:a5:df:
82:fc:d9:43:1f:cf:b8:d3:97:81:54:ff:75:a7:e6:2e:06:9b:
aa:f1:cc:1e:0e:b1:29:9c:5e:f2:4b:c2:78:06:33:48:00:e1:
1c:4c:eb:60:74:8e:42:c2:35:59:e9:5d:27:c7:88:5a:eb:58:
f9:5b:be:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 09:40:46 2024 by rpki-client on console-fra.rpki-client.org