Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/1-_s0DWSZ2-iq3DxUrwGLGY_kegg.roa
File: 1-_s0DWSZ2-iq3DxUrwGLGY_kegg.roa (raw, json)
Hash identifier: uqag8qEtNTDk1Gu1fhrvO9MLh1N2EPGMyZ/OD5MMwtQ=
Subject key identifier: FB:FB:34:0D:64:99:DB:E8:AA:DC:3C:54:AF:01:8B:19:8F:E4:7A:08
Certificate issuer: /CN=78356c6a831680e9b8b7c95514953007a9407e87
Certificate serial: 018CC5014DC1C4C349AB00D12CF61EDD52EB
Authority key identifier: 78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/1-_s0DWSZ2-iq3DxUrwGLGY_kegg.roa
Signing time: Mon 01 Jan 2024 12:30:46 +0000
ROA not before: Mon 01 Jan 2024 12:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3223
IP address blocks: 185.181.104.0/22 maxlen: 24
45.87.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4d:c1:c4:c3:49:ab:00:d1:2c:f6:1e:dd:52:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78356c6a831680e9b8b7c95514953007a9407e87
Validity
Not Before: Jan 1 12:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbfb340d6499dbe8aadc3c54af018b198fe47a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:50:1b:74:3c:30:fa:84:15:2c:7f:49:9c:fc:
97:da:f2:b9:97:fe:3a:a0:85:ea:0a:7f:5c:ca:2b:
be:7b:60:e6:9b:32:91:05:7b:48:82:b2:bd:ab:41:
ec:ac:82:56:11:48:a0:03:4e:52:87:9f:df:db:68:
17:b9:29:fd:be:6b:05:9f:7b:50:b0:2e:81:25:80:
4b:17:c8:bd:35:dd:1e:65:5a:08:89:5a:f9:72:36:
f4:ea:61:80:a7:21:3e:7f:14:79:9e:30:53:4f:e4:
59:22:3a:95:08:6e:91:7e:9d:28:d9:be:9a:67:2d:
7c:32:fd:9c:3e:14:7b:cd:92:a9:36:4a:1c:a9:09:
44:cb:4b:ba:93:5f:cc:61:a0:42:04:d1:49:65:bf:
dd:ee:b6:43:c5:97:00:c4:b7:0c:01:68:e1:56:59:
a7:3d:c1:94:67:65:ea:4b:63:32:5a:c2:00:d3:74:
18:8f:f0:a0:36:f8:82:f5:0f:69:8b:bd:a5:81:53:
79:c3:cb:35:f1:28:35:5b:d1:bd:73:44:1a:fb:28:
46:c9:e6:0f:cc:06:c9:00:b4:a9:ed:6d:3b:c6:2a:
ff:ee:ae:5d:0c:87:6e:57:b6:09:6a:d6:05:79:7d:
fc:ff:66:47:b0:40:9a:43:66:b6:a5:2d:6a:cc:89:
ae:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FB:34:0D:64:99:DB:E8:AA:DC:3C:54:AF:01:8B:19:8F:E4:7A:08
X509v3 Authority Key Identifier:
keyid:78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/1-_s0DWSZ2-iq3DxUrwGLGY_kegg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.156.0/22
185.181.104.0/22
Signature Algorithm: sha256WithRSAEncryption
50:d0:a9:18:7e:62:41:9e:b9:05:9f:da:ba:8c:2d:be:18:b8:
94:dd:24:5a:13:e3:30:87:24:88:1a:87:9b:c7:91:73:9e:89:
61:2a:c2:41:25:b1:cd:4a:e1:26:30:60:17:58:b0:44:18:b1:
05:cb:03:90:19:78:a3:3d:07:6c:69:24:f5:f8:3b:8a:01:26:
fa:02:51:c5:66:63:2d:08:2f:05:82:18:6b:39:8b:ed:a5:cc:
d4:d0:88:38:08:22:6a:6e:1d:4d:60:0d:ff:b7:82:f9:b0:4b:
f8:cf:9f:56:6b:6e:8e:e7:6b:17:cf:03:c4:18:84:8b:80:16:
6d:b2:0e:99:1a:b0:31:0e:f5:fe:28:fe:34:1f:d7:a9:9e:1c:
3d:c7:77:fa:8e:11:cf:45:20:e4:c2:ee:69:6b:35:9a:51:2f:
9e:18:28:df:eb:af:60:ed:0a:8a:a0:9b:2f:08:c2:ff:c3:0b:
e4:43:5e:c9:aa:dc:40:e7:1a:c6:58:c7:26:60:fd:ac:3d:75:
d9:c5:9a:78:4f:64:e0:fe:3a:57:16:e3:e9:65:30:f6:d5:b2:
d9:3f:19:62:47:c5:41:3f:90:85:ea:f3:85:ec:6c:ee:a9:73:
be:aa:33:0d:b6:6c:b4:f5:5d:3c:15:27:00:7a:6b:ec:a4:c2:
eb:4d:c2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:13:30 2024 by rpki-client on console-ams.rpki-client.org