Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/kAJllXxV_4I8r1Md4e6QBx1JuHo.roa
File: kAJllXxV_4I8r1Md4e6QBx1JuHo.roa (raw, json)
Hash identifier: 3pemV5O2UdfjY+qibJH+HYX5iuKp9D6NaDAnDHCEFgw=
Subject key identifier: 90:02:65:95:7C:55:FF:82:3C:AF:53:1D:E1:EE:90:07:1D:49:B8:7A
Certificate issuer: /CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Certificate serial: 018CC79330CD4ED5CEE197760C39F589238B
Authority key identifier: 89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/kAJllXxV_4I8r1Md4e6QBx1JuHo.roa
Signing time: Tue 02 Jan 2024 00:29:21 +0000
ROA not before: Tue 02 Jan 2024 00:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7155
IP address blocks: 185.155.198.0/23 maxlen: 23
185.155.198.0/24 maxlen: 24
185.155.196.0/24 maxlen: 24
37.99.212.0/24 maxlen: 24
37.99.213.0/24 maxlen: 24
37.99.209.0/24 maxlen: 24
37.99.210.0/24 maxlen: 24
37.99.208.0/24 maxlen: 24
37.99.208.0/21 maxlen: 21
37.99.211.0/24 maxlen: 24
37.99.214.0/24 maxlen: 24
37.99.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:30:cd:4e:d5:ce:e1:97:76:0c:39:f5:89:23:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Validity
Not Before: Jan 2 00:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=900265957c55ff823caf531de1ee90071d49b87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b3:8d:a6:b2:e1:87:aa:b4:07:15:f1:20:b9:
06:e9:eb:63:b8:f4:bc:d3:ef:14:a5:27:c0:82:e9:
73:70:35:00:70:9a:6a:1c:d7:74:b5:3c:5c:31:71:
cc:ad:83:88:86:1c:69:a1:e0:9a:f4:71:59:44:39:
01:73:8b:66:62:cf:84:71:ae:0d:39:cd:48:b0:53:
f8:e6:5e:dc:f0:da:74:03:72:8d:93:75:18:c3:b6:
d9:21:ef:75:43:9b:e6:d6:d4:7f:17:30:e0:a8:e4:
0f:7c:14:11:01:2b:17:3c:03:b0:bd:12:ad:5d:6b:
14:44:a2:3c:15:4b:1d:b6:3e:28:5e:c8:4e:92:8f:
7d:97:4e:46:1d:44:9e:9c:28:0a:7e:0a:4a:99:c6:
a4:3c:f5:3a:53:e5:6b:cf:68:65:95:5a:bf:74:16:
eb:85:96:68:e8:f3:b7:1c:83:ec:c2:75:2d:a0:13:
a0:7d:a5:36:a2:8e:94:ca:7a:10:0c:56:d4:de:be:
ae:9a:1a:06:e8:54:77:62:11:d1:a8:5c:d2:1d:95:
98:8c:7f:e2:9f:63:d4:54:b0:76:de:15:eb:95:6e:
5d:a4:d6:a2:22:75:f8:e4:18:fe:45:37:8a:d7:3f:
25:4a:43:2b:f7:b1:1c:84:6f:f5:9b:a2:73:23:58:
00:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:02:65:95:7C:55:FF:82:3C:AF:53:1D:E1:EE:90:07:1D:49:B8:7A
X509v3 Authority Key Identifier:
keyid:89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/kAJllXxV_4I8r1Md4e6QBx1JuHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.99.208.0/21
185.155.196.0/24
185.155.198.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:ff:9b:59:cb:e6:cf:c3:c3:f1:2d:97:5d:a8:17:56:2f:09:
ac:33:1f:10:62:58:10:94:78:aa:e0:4d:26:c9:70:04:74:e0:
91:66:0f:2b:80:98:33:43:57:58:59:48:e4:87:27:6c:f6:d0:
d7:14:37:13:73:0d:80:c3:52:5e:b4:bc:14:51:80:e3:4b:d4:
c7:4c:c1:8a:71:f7:a0:ed:f4:a8:52:81:a3:cd:05:f4:ec:17:
29:c6:0e:8c:47:19:ad:5c:8d:61:17:bd:96:58:e1:65:85:01:
58:1f:f4:f9:5c:7f:5e:5e:eb:41:49:df:98:b4:f0:d4:53:aa:
8b:44:f4:4a:2b:a0:85:d5:be:75:f3:21:3d:7c:d8:37:72:b1:
48:a8:91:9b:82:b4:32:24:51:cf:a0:f3:6c:ad:f5:cb:dc:3e:
18:31:7e:4f:3a:f5:09:33:e7:21:4d:65:ef:00:a8:26:eb:1d:
23:e1:74:05:93:d6:1e:01:0c:e6:87:e8:7e:55:d8:53:ed:c1:
4e:35:68:69:7b:78:11:ad:e9:4a:51:25:da:d4:8e:d2:e0:7d:
66:92:6f:c5:e9:f0:05:73:e6:11:c9:85:f1:95:25:7a:b3:f3:
cf:06:d5:3b:6a:04:bd:af:fa:2f:6b:5f:05:e2:5e:70:96:30:
70:e1:28:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 17:33:58 2024 by rpki-client on console-ams.rpki-client.org