Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/KP34PiQzzsyDb_JEegl8-pyTlsM.roa
File: KP34PiQzzsyDb_JEegl8-pyTlsM.roa (raw, json)
Hash identifier: pjgSRJMtfsfi0DXIdLkWnnvfE6E/RpEh3l/1gnbnBL8=
Subject key identifier: 28:FD:F8:3E:24:33:CE:CC:83:6F:F2:44:7A:09:7C:FA:9C:93:96:C3
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 018CC5006C57D7C6A520A9377CC22F4DAEA8
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/KP34PiQzzsyDb_JEegl8-pyTlsM.roa
Signing time: Mon 01 Jan 2024 12:29:48 +0000
ROA not before: Mon 01 Jan 2024 12:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212552
IP address blocks: 185.110.191.0/24 maxlen: 24
193.163.201.0/24 maxlen: 24
185.221.237.0/24 maxlen: 24
185.231.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:6c:57:d7:c6:a5:20:a9:37:7c:c2:2f:4d:ae:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Jan 1 12:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28fdf83e2433cecc836ff2447a097cfa9c9396c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:10:82:76:2f:73:a1:8f:ae:49:8c:5c:42:89:
ec:5f:81:ee:26:b1:fa:74:b7:f4:e8:63:b6:c7:5d:
e9:c8:ce:79:59:69:52:29:90:ac:09:37:f2:40:59:
31:b5:9c:48:8d:20:f3:c4:e4:bd:dd:40:dc:b7:dd:
ef:c9:e5:49:12:e7:24:c9:27:a4:b1:c6:89:11:5c:
c5:a1:d2:a8:ce:c7:78:f1:f1:28:ba:08:59:6b:e6:
8a:17:dd:bb:ce:6c:48:4c:19:39:9d:6e:4a:b8:ef:
db:9a:4a:5f:0c:2d:aa:c1:ab:3b:bb:2d:3e:5a:27:
a9:9c:c3:32:0a:8d:d7:3a:5c:5a:6a:bd:c3:74:04:
e3:f6:6c:4a:b0:79:fb:a8:3f:9b:e2:d1:cd:2b:aa:
4c:78:e6:17:fc:e8:62:46:52:36:33:c5:92:11:d5:
ed:bc:ce:e9:cc:6f:ad:9c:5e:74:19:32:dc:68:88:
cf:7a:35:0b:2f:5a:8f:65:a3:79:4a:f7:e8:28:71:
af:60:bd:2b:82:9e:c4:db:b6:45:20:1d:6e:87:a3:
49:1f:5e:f3:ce:d9:37:95:3c:8a:48:3e:f2:57:5a:
2c:e4:20:a8:06:a7:a2:58:e7:aa:2a:d4:a0:a0:25:
bf:37:a8:0b:36:61:17:a0:3a:5a:73:e9:cd:c5:ec:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FD:F8:3E:24:33:CE:CC:83:6F:F2:44:7A:09:7C:FA:9C:93:96:C3
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/KP34PiQzzsyDb_JEegl8-pyTlsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.191.0/24
185.221.237.0/24
185.231.59.0/24
193.163.201.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:46:bb:99:a6:d3:86:94:78:a7:54:50:e1:32:06:48:89:8c:
1e:e0:b5:0f:c3:09:88:43:5c:b4:23:1e:68:5a:63:79:8a:67:
6b:a7:51:8b:e9:91:d4:ab:c7:d1:35:e4:bf:7a:44:98:43:a1:
ad:6f:5a:1e:7c:b1:4e:1d:3f:7c:66:5c:e2:2c:34:01:de:46:
f0:05:06:4e:04:f8:ad:f3:ac:a4:e4:ba:a5:8e:52:c3:dc:04:
36:79:e4:83:be:0d:55:ad:8c:60:c7:fb:00:ad:6c:ed:f1:d0:
5d:ec:39:fa:b9:89:c1:42:94:8b:c9:4a:7c:41:71:f9:38:ef:
24:6a:24:20:f3:95:75:ba:a9:a2:c0:bf:6d:48:b6:c9:bf:67:
c2:8a:24:3a:87:d8:29:0a:a8:3b:ab:b7:c6:ff:a8:db:f0:6f:
7f:e2:af:a4:c9:ce:e1:6c:41:d4:58:5b:e5:96:40:94:91:c4:
79:12:03:45:b5:69:88:2b:01:10:82:67:4e:63:dd:ec:b5:6a:
5b:a2:ba:73:18:ca:34:77:1e:ca:77:da:9f:04:62:cd:ad:20:
ac:f8:fa:ee:8c:e5:74:c7:c7:6a:f9:eb:36:55:bf:c0:f7:bc:
10:75:f2:88:38:6b:66:7e:62:93:56:94:75:bf:6e:1b:b3:87:
c7:d8:bd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:01:25 2024 by rpki-client on console-fra.rpki-client.org