Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/KlkPll-2eT4OEc7JEVeBjKeKFvY.roa
File: KlkPll-2eT4OEc7JEVeBjKeKFvY.roa (raw, json)
Hash identifier: D5i0rk6m1yJPb6vmyolamvrhIx1gvzHDS5KpZlKyc8E=
Subject key identifier: 2A:59:0F:96:5F:B6:79:3E:0E:11:CE:C9:11:57:81:8C:A7:8A:16:F6
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0194282399BAA9F0FADD7C646FDD96C000D0
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/KlkPll-2eT4OEc7JEVeBjKeKFvY.roa
Signing time: Thu 02 Jan 2025 17:50:09 +0000
ROA not before: Thu 02 Jan 2025 17:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44400
IP address blocks: 87.248.140.0/24 maxlen: 24
87.248.141.0/24 maxlen: 24
87.248.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:99:ba:a9:f0:fa:dd:7c:64:6f:dd:96:c0:00:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 2 17:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a590f965fb6793e0e11cec91157818ca78a16f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:4b:68:bc:68:37:1b:89:48:e7:b6:e8:67:
6d:e9:42:f5:ef:59:06:21:22:5e:3c:a4:4e:41:7c:
08:2b:6c:10:56:83:b6:51:a4:34:3d:c0:ef:e4:c2:
e4:07:88:f9:98:24:0c:19:ca:be:01:f3:d4:13:1b:
f1:7c:25:fd:6b:f4:c3:25:71:9c:e5:6d:05:a4:f9:
05:c9:81:8d:95:f7:14:5e:17:4c:9b:6f:47:29:96:
ab:0b:aa:ab:93:19:60:f4:4c:46:5e:4b:c9:c9:5c:
71:3f:db:42:72:e8:35:1c:24:b8:44:65:65:11:c2:
e9:85:0b:b5:a5:d2:17:78:bc:8b:23:e1:75:5e:82:
21:3d:4a:1f:71:d4:a0:a5:2f:11:a2:a7:0c:98:32:
ce:37:42:1f:a3:21:9f:52:c2:98:55:b2:aa:3d:0d:
1b:a2:26:f5:17:2c:46:76:e8:87:4b:ab:2c:c2:8a:
6d:b7:1a:08:b4:3a:1b:a3:61:89:9e:a4:8c:ce:ab:
34:13:dd:0a:bb:5e:15:47:6d:3f:47:e3:6b:8a:81:
ff:79:7f:0e:f3:d8:47:a8:f9:99:25:9f:2b:c6:f3:
fd:9d:91:ca:a9:2a:31:fc:11:e2:1e:10:01:6b:3c:
eb:f1:6a:23:5f:27:49:bb:2c:12:3a:10:73:03:8b:
2e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:59:0F:96:5F:B6:79:3E:0E:11:CE:C9:11:57:81:8C:A7:8A:16:F6
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/KlkPll-2eT4OEc7JEVeBjKeKFvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.140.0-87.248.142.255
Signature Algorithm: sha256WithRSAEncryption
58:1c:a8:17:c7:36:7e:e2:76:50:e0:71:f9:59:e9:75:cb:fe:
bd:89:db:a1:1b:4b:6b:20:21:41:2a:25:2a:66:d2:4e:38:f4:
68:a6:31:2e:5c:62:73:a6:72:6d:5f:eb:4f:74:df:7b:25:20:
45:17:e5:79:98:ab:60:63:20:35:43:32:23:67:6e:0e:08:bd:
e0:c3:27:9c:5d:14:62:86:5d:be:aa:29:ed:93:62:ad:0a:d0:
39:07:93:2f:08:81:2d:e9:21:68:c4:6a:eb:67:ab:2a:45:a3:
4f:55:3f:9b:48:0d:16:5a:39:bb:b0:b1:2c:57:63:d0:dd:58:
41:5e:a6:38:6c:01:cd:ba:46:e9:03:84:68:b8:24:67:21:d8:
3a:50:86:38:c0:20:c6:68:3a:f5:e7:04:ff:c3:e1:d3:77:09:
a8:30:a9:4f:52:46:8c:79:7e:dc:b1:3d:c6:6f:f9:96:d9:1b:
15:5f:1c:c1:6f:54:d2:e1:13:03:76:a5:ec:d6:92:71:13:9d:
8f:40:17:e7:14:8a:5b:0f:f9:4d:f0:5b:ee:5d:fc:b4:be:54:
ef:11:a9:6a:8b:64:de:60:ff:c6:c2:42:12:80:f1:d9:f5:38:
2e:96:d2:04:19:fa:e6:11:79:90:77:e6:ec:55:ba:66:44:e4:
7c:04:11:e0
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQoI5m6qfD63Xxkb92WwADQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjUwMTAyMTc1MDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTU5MGY5NjVmYjY3OTNlMGUxMWNlYzkxMTU3ODE4Y2E3OGExNmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa1LaLxoNxuJSOe26Gdt6UL171kG
ISJePKROQXwIK2wQVoO2UaQ0PcDv5MLkB4j5mCQMGcq+AfPUExvxfCX9a/TDJXGc
5W0FpPkFyYGNlfcUXhdMm29HKZarC6qrkxlg9ExGXkvJyVxxP9tCcug1HCS4RGVl
EcLphQu1pdIXeLyLI+F1XoIhPUofcdSgpS8RoqcMmDLON0IfoyGfUsKYVbKqPQ0b
oib1FyxGduiHS6sswopttxoItDobo2GJnqSMzqs0E90Ku14VR20/R+NrioH/eX8O
89hHqPmZJZ8rxvP9nZHKqSox/BHiHhABazzr8WojXydJuywSOhBzA4suvQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCpZD5Zftnk+DhHOyRFXgYynihb2MB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvS2xrUGxsLTJlVDRPRWM3SkVWZUJqS2VLRnZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJX+IwD
BABX+I4wDQYJKoZIhvcNAQELBQADggEBAFgcqBfHNn7idlDgcflZ6XXL/r2J26Eb
S2sgIUEqJSpm0k449GimMS5cYnOmcm1f609033slIEUX5XmYq2BjIDVDMiNnbg4I
veDDJ5xdFGKGXb6qKe2TYq0K0DkHky8IgS3pIWjEautnqypFo09VP5tIDRZaObuw
sSxXY9DdWEFepjhsAc26RukDhGi4JGch2DpQhjjAIMZoOvXnBP/D4dN3CagwqU9S
Rox5ftyxPcZv+ZbZGxVfHMFvVNLhEwN2pezWknETnY9AF+cUilsP+U3wW+5d/LS+
VO8RqWqLZN5g/8bCQhKA8dn1OC6W0gQZ+uYReZB35uxVumZE5HwEEeA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:44:05 2025 by rpki-client