Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/KKJqDEOnbwwxc4zPn00ryCz7UZQ.roa
File: KKJqDEOnbwwxc4zPn00ryCz7UZQ.roa (raw, json)
Hash identifier: 8NaBAh6p1xFVvqnqpNsYDG6RkM2P9WtSmMlIkx6YGYo=
Subject key identifier: 28:A2:6A:0C:43:A7:6F:0C:31:73:8C:CF:9F:4D:2B:C8:2C:FB:51:94
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 018CC9BC3A0DB559A45CDB70B5E9BDDB3805
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/KKJqDEOnbwwxc4zPn00ryCz7UZQ.roa
Signing time: Tue 02 Jan 2024 10:33:25 +0000
ROA not before: Tue 02 Jan 2024 10:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12843
IP address blocks: 194.59.18.0/23 maxlen: 23
194.59.20.0/22 maxlen: 22
2001:67c:12f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:3a:0d:b5:59:a4:5c:db:70:b5:e9:bd:db:38:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: Jan 2 10:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28a26a0c43a76f0c31738ccf9f4d2bc82cfb5194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:91:fd:64:3c:a1:53:d9:fb:58:b7:fe:c2:
b3:e0:bc:4a:40:ac:34:fc:2e:1b:23:5f:33:41:cc:
a9:41:2d:12:cb:cb:ef:3e:68:c7:f8:79:2a:66:8d:
49:e2:9f:18:52:00:10:52:48:55:51:a3:47:9f:7d:
1d:10:84:f4:9b:72:2b:fc:be:9c:cc:00:6f:9c:b8:
0a:4c:e2:f4:5d:e5:e8:3b:12:9a:5c:bc:f4:f5:7a:
a6:8e:f1:07:f0:73:cc:75:ca:b4:f0:5b:83:a8:e6:
13:fa:be:65:c0:86:f3:00:78:7c:6a:90:7d:c5:7b:
bb:a1:82:77:dd:d1:7d:61:f2:f5:35:2f:75:19:02:
00:79:6b:cf:4f:47:fe:56:22:4b:4f:18:1d:0b:16:
ab:b4:16:6e:47:4e:21:5e:5b:62:7f:4e:e6:e5:14:
06:0c:a9:f4:84:f5:1d:ac:94:d4:50:48:3f:de:90:
77:5e:66:58:49:8b:b9:ac:24:ad:d6:eb:1f:51:3f:
09:a4:df:56:36:e5:59:31:61:8f:a2:61:26:1f:73:
bf:8a:2b:54:08:73:5d:fb:00:4b:00:ff:ed:f7:47:
78:ec:4b:1c:bf:d6:a3:1c:43:d0:ec:e7:32:1b:8e:
b6:15:31:3d:2d:0e:a7:db:47:fa:6e:08:77:b1:e0:
a4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A2:6A:0C:43:A7:6F:0C:31:73:8C:CF:9F:4D:2B:C8:2C:FB:51:94
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/KKJqDEOnbwwxc4zPn00ryCz7UZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.18.0-194.59.23.255
IPv6:
2001:67c:12f0::/48
Signature Algorithm: sha256WithRSAEncryption
25:b2:84:c3:b0:7f:64:be:83:a9:8d:9d:b1:91:88:52:cd:6e:
b2:2b:e5:dd:47:9f:5e:1a:c9:43:13:1a:ca:45:bd:8a:4c:ca:
45:38:12:6c:a7:40:19:0e:c9:2b:2a:21:69:21:02:cd:f6:b9:
be:9e:39:37:a0:f5:9e:5f:ae:b0:72:d5:35:a6:55:23:d2:05:
5c:bf:f4:44:bc:e3:e0:86:57:dc:4f:6f:5c:4d:8b:52:52:f1:
ed:86:22:b5:ba:69:2c:a6:2b:7f:33:d1:70:f8:b7:8c:84:74:
41:77:fd:0b:be:91:55:db:8d:11:91:2d:6f:fa:11:ce:9c:84:
9c:e7:33:d7:1c:55:ce:2a:17:dc:db:37:40:6a:44:56:52:df:
2b:cd:c5:da:4f:b4:47:b8:72:e3:64:55:78:7b:ca:45:84:a1:
01:4a:89:59:c3:2c:dc:62:0a:01:24:42:cd:47:c7:b1:8a:bd:
4c:ad:15:8b:c1:6c:3a:28:e0:89:6e:6b:d2:f2:42:12:36:02:
dc:ad:af:ca:81:f9:96:7e:04:dd:31:55:7e:fd:a7:0e:9e:64:
3c:40:c6:af:ca:ec:f8:e4:2b:a6:b2:a0:1d:c3:a5:d3:72:17:
48:cb:53:b7:23:f6:a0:dd:3e:05:34:be:12:8d:f8:f5:08:46:
da:bc:57:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:21:52 2024 by rpki-client on console-ams.rpki-client.org