Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/KfJm9VHZW84RQp7g11N8O2BfcPs.roa
File: KfJm9VHZW84RQp7g11N8O2BfcPs.roa (raw, json)
Hash identifier: VnqdveDbWpMhDP6oOfaFVX7LUUgiq0K8uHBqZNsNy8w=
Subject key identifier: 29:F2:66:F5:51:D9:5B:CE:11:42:9E:E0:D7:53:7C:3B:60:5F:70:FB
Certificate issuer: /CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Certificate serial: 018CC5DC561ACB5D55F7A5261D60F30637EC
Authority key identifier: 33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/KfJm9VHZW84RQp7g11N8O2BfcPs.roa
Signing time: Mon 01 Jan 2024 16:30:00 +0000
ROA not before: Mon 01 Jan 2024 16:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59526
IP address blocks: 91.242.44.0/24 maxlen: 24
91.242.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:56:1a:cb:5d:55:f7:a5:26:1d:60:f3:06:37:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Validity
Not Before: Jan 1 16:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29f266f551d95bce11429ee0d7537c3b605f70fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:af:6a:0a:48:04:c3:b7:a9:7d:4d:99:91:
e8:79:e4:97:b8:c5:5f:f3:43:e7:94:2b:7b:cc:20:
36:5a:ae:3e:46:77:49:76:80:3c:5f:e1:46:19:32:
66:f5:4c:31:04:e5:30:9a:67:b6:d8:b5:6a:d0:86:
43:ec:a5:32:f4:7c:4c:ae:cf:d6:f9:73:e2:fd:1b:
4e:a3:f7:41:88:f2:26:52:27:72:ef:f0:8d:e1:41:
af:7d:95:4d:68:d0:40:a5:54:db:30:f7:88:17:b7:
2d:59:e3:ec:b6:17:49:99:96:8e:7b:99:03:29:b4:
7c:99:c4:14:e9:d6:b3:e0:32:de:02:7b:db:fa:64:
da:c4:b6:f6:32:20:23:03:4d:59:79:03:94:56:9e:
51:48:6b:e5:4e:9f:e9:a9:05:26:8d:8d:ec:f2:1e:
06:a3:95:21:9a:59:86:6c:ea:5e:ed:b8:1d:30:31:
ea:c9:3a:9c:93:d8:24:41:72:92:f4:c9:a9:0e:5f:
b6:c2:63:83:22:cc:b6:c8:aa:12:a3:46:28:49:ee:
ec:65:73:f6:84:e8:75:7f:1a:b2:e1:f0:6b:a9:c3:
fc:e1:ce:82:d7:4c:83:4c:db:e0:e1:2c:00:94:8c:
0b:5b:05:00:7b:c5:44:4b:12:2d:ab:74:49:a4:45:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F2:66:F5:51:D9:5B:CE:11:42:9E:E0:D7:53:7C:3B:60:5F:70:FB
X509v3 Authority Key Identifier:
keyid:33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/KfJm9VHZW84RQp7g11N8O2BfcPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.44.0/23
Signature Algorithm: sha256WithRSAEncryption
75:bc:aa:95:6e:b5:8e:fe:e9:69:5d:8d:e8:ec:bc:45:db:27:
b6:ee:ca:cc:c2:c8:fb:c7:69:f5:e7:42:26:8b:8f:29:2c:18:
55:89:73:17:8c:d8:98:7b:74:15:8f:0d:45:74:bc:48:9c:50:
20:3c:fd:6f:a8:de:be:41:11:ed:7e:33:5c:66:5a:d0:86:57:
80:8c:e3:2c:3c:d0:a7:e8:12:7b:58:8a:a7:7c:ad:92:d6:37:
24:1d:44:97:c0:1c:57:39:98:2b:56:e9:1a:1b:8c:dc:71:6d:
50:d2:47:63:4e:5d:9c:65:5c:64:d7:e6:82:92:f9:cd:13:98:
60:af:9e:b0:48:b4:15:a2:4b:a9:e6:53:7e:7d:5d:6c:ea:99:
17:6a:37:30:32:eb:57:d0:ab:4f:a4:85:28:d9:3b:17:cf:55:
01:c9:50:c6:97:b2:4a:25:24:0b:b5:d4:32:d6:85:93:59:de:
1a:19:1d:30:ee:4f:df:15:55:84:37:86:4a:a1:e6:63:6a:51:
45:3b:e2:b9:85:99:95:7b:55:20:8e:b1:bd:49:b9:66:1a:e5:
bc:3e:8a:bc:f6:03:08:3c:4f:0d:34:41:b8:6d:ab:0a:24:8e:
4c:86:a5:63:81:8a:78:91:0a:a3:59:18:d9:6a:57:8d:1e:5f:
2d:ef:ef:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 08:52:42 2024 by rpki-client on console-ams.rpki-client.org