Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/kbSisnsteXgFAsygaw629-A5QbM.roa
File: kbSisnsteXgFAsygaw629-A5QbM.roa (raw, json)
Hash identifier: hxM1mCYZf/u1enawDoCPY/24r9mcEOBkehG9z4UG/n4=
Subject key identifier: 91:B4:A2:B2:7B:2D:79:78:05:02:CC:A0:6B:0E:B6:F7:E0:39:41:B3
Certificate issuer: /CN=435e41960d590e99804e90b9af0365584c712c72
Certificate serial: 0191FE4EE465B092923B2555928A4FF283A9
Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/kbSisnsteXgFAsygaw629-A5QbM.roa
Signing time: Tue 17 Sep 2024 04:47:48 +0000
ROA not before: Tue 17 Sep 2024 04:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60887
IP address blocks: 185.196.148.0/24 maxlen: 24
185.196.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fe:4e:e4:65:b0:92:92:3b:25:55:92:8a:4f:f2:83:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435e41960d590e99804e90b9af0365584c712c72
Validity
Not Before: Sep 17 04:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91b4a2b27b2d79780502cca06b0eb6f7e03941b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:77:29:ee:75:c2:5e:46:08:7f:72:ae:a7:78:
36:f5:c1:27:d4:04:28:c3:e6:af:ee:0c:e1:3c:cf:
f5:6b:fe:a1:50:46:e7:1c:a7:e0:7c:bb:2c:a8:4d:
69:08:86:4c:ea:b7:96:52:42:93:37:e9:ff:52:37:
15:9d:42:2e:86:54:45:15:cc:1d:f5:0a:c9:b8:d7:
3d:62:ab:3d:65:b5:d7:7a:01:1a:eb:f6:66:56:31:
51:0d:2c:c6:aa:43:a8:6f:c8:5f:5b:17:85:4c:53:
33:3e:07:2b:c8:5c:9b:1e:ff:b1:de:55:42:41:ec:
86:2f:9d:e2:38:07:57:6f:53:72:99:11:bb:60:80:
e9:ab:25:71:36:73:55:dc:88:50:ce:e3:e0:ee:3d:
62:77:bb:94:62:35:1b:8a:2a:8b:fb:cd:fc:7c:1d:
03:ef:d8:4e:92:a1:b7:ad:e7:dd:7e:f8:e8:c9:29:
24:d5:c7:95:9c:38:f5:35:85:77:fd:02:e7:11:68:
6a:71:72:ec:e3:bd:9a:a4:ef:f9:02:7e:87:ff:b1:
91:3a:d6:f7:3d:33:3b:2e:04:8f:be:be:e1:c5:72:
11:03:5c:4c:2b:d8:18:d7:dc:4c:7d:ef:03:14:30:
3b:96:b6:86:86:bc:3d:8a:62:a9:50:87:20:da:74:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B4:A2:B2:7B:2D:79:78:05:02:CC:A0:6B:0E:B6:F7:E0:39:41:B3
X509v3 Authority Key Identifier:
keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/kbSisnsteXgFAsygaw629-A5QbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.148.0/23
Signature Algorithm: sha256WithRSAEncryption
86:56:99:00:bc:c7:9c:7c:ba:24:27:8e:9b:b7:29:39:f8:e0:
d4:fe:43:54:24:4f:58:f9:0a:eb:81:c4:97:25:56:65:91:81:
85:e5:17:63:8c:c4:32:c0:12:89:87:7c:b1:67:7e:25:92:ef:
59:e1:30:25:6a:59:4b:2e:71:f1:b8:de:a1:57:e5:2b:65:42:
04:c2:d6:bd:a3:ad:8f:f1:90:09:86:79:75:78:dc:e3:f9:2d:
37:c5:c8:0a:86:84:0a:e1:84:cf:04:0e:2a:0c:60:3c:6a:4b:
42:94:05:1a:59:d7:e3:2c:75:f0:78:5a:94:b4:22:40:39:15:
18:6c:3f:a9:9e:90:29:4d:1f:17:78:fd:a4:51:5e:51:83:0c:
32:ba:d6:80:95:65:02:8b:3e:ed:ac:c2:4a:20:0c:0d:e2:a8:
4a:e1:77:02:6e:ca:08:7a:5a:71:83:7b:32:a8:95:55:a9:56:
5b:04:49:29:6b:d6:ba:88:6c:ab:51:ec:e3:41:4d:c2:e5:fd:
ed:7a:dc:44:17:d8:24:d6:8e:cd:73:1a:01:0d:70:30:6e:e7:
fe:f2:17:2f:07:d0:2e:a8:e8:a3:ac:13:5e:cd:e4:29:9b:20:
7f:5c:a0:07:51:1a:05:a9:57:12:23:cd:ee:e9:20:b9:94:7e:
11:1f:fa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:05 2024 by rpki-client on console-fra.rpki-client.org