Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/KKI9xATMwKNICiloFX5GAN2feGw.roa
File: KKI9xATMwKNICiloFX5GAN2feGw.roa (raw, json)
Hash identifier: 5Q3h3G2fQbRCyoA932NsQvE1H0A32XYGHgmU9o2BIqQ=
Subject key identifier: 28:A2:3D:C4:04:CC:C0:A3:48:0A:29:68:15:7E:46:00:DD:9F:78:6C
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 018F38AA021C86828E5D8D490B7B853F281E
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/KKI9xATMwKNICiloFX5GAN2feGw.roa
Signing time: Thu 02 May 2024 09:36:56 +0000
ROA not before: Thu 02 May 2024 09:36:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209024
IP address blocks: 176.109.64.0/24 maxlen: 24
176.109.65.0/24 maxlen: 24
176.109.66.0/24 maxlen: 24
176.109.68.0/24 maxlen: 24
176.109.69.0/24 maxlen: 24
2a02:28:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:aa:02:1c:86:82:8e:5d:8d:49:0b:7b:85:3f:28:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: May 2 09:36:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28a23dc404ccc0a3480a2968157e4600dd9f786c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:1c:7d:79:52:ec:0c:c3:6b:63:df:42:5f:
ca:d8:6c:6b:cf:a2:e3:ef:70:44:74:5f:6e:f2:94:
f2:ce:c9:1a:58:83:a6:0b:db:2c:d5:37:f8:d3:26:
48:f4:d6:69:dc:05:71:d9:0b:9a:47:ff:8f:ef:ea:
86:0b:31:c5:7d:99:95:c7:3f:a6:5c:a8:2a:a6:df:
54:3e:2f:48:02:5c:11:62:ea:45:6a:44:0e:8c:f4:
4a:d4:92:83:2e:e5:f4:e3:3a:94:3f:d5:aa:64:34:
1a:be:9e:75:01:90:f7:8c:0d:97:0f:15:cf:17:a7:
6e:9e:9a:41:85:4f:39:6b:3d:1f:93:b9:c1:1e:46:
0d:91:fb:46:f2:45:84:be:d3:e3:6f:af:a6:54:ac:
4d:4d:e3:67:63:63:26:1f:a1:48:01:be:af:24:4a:
40:82:34:5f:5a:06:7d:71:e9:19:69:cb:29:51:b6:
ec:ae:e2:ce:b3:ea:c5:eb:ca:a6:15:0d:8a:96:30:
fd:22:4a:1b:4d:85:9c:18:61:00:ce:05:36:2b:25:
81:93:c5:49:22:f5:51:0f:6a:8e:52:40:7a:41:69:
a1:11:06:04:b8:7d:53:3c:64:aa:ae:17:49:94:42:
56:e3:c0:c3:73:4b:4e:3d:86:81:0d:d8:95:92:3d:
94:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A2:3D:C4:04:CC:C0:A3:48:0A:29:68:15:7E:46:00:DD:9F:78:6C
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/KKI9xATMwKNICiloFX5GAN2feGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.109.64.0-176.109.66.255
176.109.68.0/23
IPv6:
2a02:28:d::/48
Signature Algorithm: sha256WithRSAEncryption
4b:8c:a9:68:ef:09:bc:47:c3:ee:ae:2c:07:13:99:81:f9:22:
fe:ae:d5:1e:b6:c2:d4:14:e7:41:f8:54:23:71:43:2b:7f:02:
fd:b2:ac:44:9d:e3:a9:09:b2:40:69:1e:d0:83:52:fb:41:f3:
3f:bf:65:f1:6d:7e:f6:68:1c:64:9b:a0:1e:82:ac:23:c6:8b:
78:48:db:2f:ce:00:5a:f2:bb:e1:9e:bb:43:ad:e5:5c:af:15:
02:89:b4:61:c8:1e:be:ef:bf:85:69:ca:d9:cb:66:5d:b0:bf:
52:9e:b0:9e:79:3a:35:71:f6:58:3c:19:9a:53:73:53:7d:f5:
18:a6:e8:01:b4:1e:1f:50:d6:82:bc:dd:92:4b:8d:a7:ec:fa:
05:99:7b:47:54:59:41:83:bf:ba:1e:2c:4e:e1:2a:b0:00:6d:
fd:3f:3b:45:93:f7:4e:f7:f1:1f:54:7e:a0:60:e8:ec:20:b4:
38:89:29:41:a8:de:bf:5c:cf:c3:b1:ef:93:de:fb:9e:20:1b:
c0:a2:ae:86:ac:24:fd:eb:07:8a:88:6b:1b:8c:8a:84:96:50:
3f:4a:03:dd:bb:d8:66:fb:c5:21:82:36:3c:1e:32:b3:8c:08:
b3:1e:b0:4c:38:29:d8:be:be:a8:3c:c3:23:5b:7e:4f:7b:e3:
ca:31:43:be
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAY84qgIchoKOXY1JC3uFPygeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl
NmI3ZTUwHhcNMjQwNTAyMDkzNjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGEyM2RjNDA0Y2NjMGEzNDgwYTI5NjgxNTdlNDYwMGRkOWY3ODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBAcfXlS7AzDa2PfQl/K2Gxrz6Lj
73BEdF9u8pTyzskaWIOmC9ss1Tf40yZI9NZp3AVx2QuaR/+P7+qGCzHFfZmVxz+m
XKgqpt9UPi9IAlwRYupFakQOjPRK1JKDLuX04zqUP9WqZDQavp51AZD3jA2XDxXP
F6dunppBhU85az0fk7nBHkYNkftG8kWEvtPjb6+mVKxNTeNnY2MmH6FIAb6vJEpA
gjRfWgZ9cekZacspUbbsruLOs+rF68qmFQ2KljD9IkobTYWcGGEAzgU2KyWBk8VJ
IvVRD2qOUkB6QWmhEQYEuH1TPGSqrhdJlEJW48DDc0tOPYaBDdiVkj2U1wIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFCiiPcQEzMCjSAopaBV+RgDdn3hsMB8GA1UdIwQY
MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt
NDI4NDU4Njc5Y2U0LzEvS0tJOXhBVE13S05JQ2lsb0ZYNUdBTjJmZUd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0
LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUMAwDBAawbUAD
BACwbUIDBAGwbUQwDwQCAAIwCQMHACoCACgADTANBgkqhkiG9w0BAQsFAAOCAQEA
S4ypaO8JvEfD7q4sBxOZgfki/q7VHrbC1BTnQfhUI3FDK38C/bKsRJ3jqQmyQGke
0INS+0HzP79l8W1+9mgcZJugHoKsI8aLeEjbL84AWvK74Z67Q63lXK8VAom0Ycge
vu+/hWnK2ctmXbC/Up6wnnk6NXH2WDwZmlNzU331GKboAbQeH1DWgrzdkkuNp+z6
BZl7R1RZQYO/uh4sTuEqsABt/T87RZP3TvfxH1R+oGDo7CC0OIkpQajev1zPw7Hv
k977niAbwKKuhqwk/esHiohrG4yKhJZQP0oD3bvYZvvFIYI2PB4ys4wIsx6wTDgp
2L6+qDzDI1t+T3vjyjFDvg==
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:16:56 2024 by rpki-client on console-ams.rpki-client.org