Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/KksK7vE9KEFcF4K2vabFtS2UObo.roa
File: KksK7vE9KEFcF4K2vabFtS2UObo.roa (raw, json)
Hash identifier: Daz+ZKhVeRr2AsMFajIBDXUAl26P8eGi7u7/Kq7nHKo=
Subject key identifier: 2A:4B:0A:EE:F1:3D:28:41:5C:17:82:B6:BD:A6:C5:B5:2D:94:39:BA
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01900606E9035F9827741FFE325AD3F93472
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/KksK7vE9KEFcF4K2vabFtS2UObo.roa
Signing time: Tue 11 Jun 2024 06:40:34 +0000
ROA not before: Tue 11 Jun 2024 06:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35509
IP address blocks: 195.155.104.0/24 maxlen: 24
195.155.105.0/24 maxlen: 24
212.253.107.0/24 maxlen: 24
213.74.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:06:e9:03:5f:98:27:74:1f:fe:32:5a:d3:f9:34:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jun 11 06:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a4b0aeef13d28415c1782b6bda6c5b52d9439ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:c3:b4:b3:d1:e8:fc:54:34:0e:c1:57:03:
ed:c7:5d:bd:32:8d:6b:1d:80:60:f9:ec:ee:f2:a7:
de:d6:6c:2f:07:1d:58:9b:bb:3d:dc:c0:9d:bb:21:
e9:e2:86:2c:1f:51:7c:07:14:4f:b3:57:23:ac:3e:
52:59:44:03:6e:04:34:96:8d:ec:68:8c:1a:2b:ee:
84:b1:4e:80:92:a5:47:17:ee:be:ae:83:c1:b6:b9:
54:90:70:1c:0a:91:91:be:3e:2e:fe:82:f6:7f:29:
1f:f8:7a:04:5f:ec:86:ce:fa:76:82:ba:56:fc:09:
97:2b:8b:93:5f:3c:9f:49:b3:e2:e6:8f:32:9b:ec:
e6:99:bf:5e:c0:64:3a:87:0a:93:26:8c:6a:8e:8e:
c3:87:7a:52:93:d5:f0:04:ae:23:79:39:3d:2c:9f:
0f:4f:af:9a:b2:86:de:93:9e:e2:ee:3e:f7:b0:89:
f0:9a:90:24:57:81:ca:0b:17:76:8b:10:84:2f:9c:
34:1e:c5:01:7c:5c:5f:66:f8:cc:a5:82:f5:ed:4b:
21:b1:0d:2f:49:47:24:7e:3d:64:14:65:1f:ce:7e:
8b:41:f6:71:ba:30:e5:9a:57:be:b7:f2:4d:cd:d9:
85:fd:c2:ec:c2:01:d4:e2:55:f9:89:7c:aa:84:db:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4B:0A:EE:F1:3D:28:41:5C:17:82:B6:BD:A6:C5:B5:2D:94:39:BA
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/KksK7vE9KEFcF4K2vabFtS2UObo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.155.104.0/23
212.253.107.0/24
213.74.80.0/24
Signature Algorithm: sha256WithRSAEncryption
05:3c:59:8d:fd:5a:76:c6:10:04:9b:3a:cd:27:00:ba:82:d6:
81:c2:56:c4:00:cd:5b:bd:78:ca:9a:1a:82:ed:98:cb:07:2a:
b8:54:81:75:89:08:dd:5d:8c:e8:31:aa:2f:34:e1:b6:e9:83:
4e:b2:3a:3d:53:dd:ff:7d:0b:e8:d0:40:fe:6d:4c:4a:c8:88:
4b:36:55:55:67:01:5e:8a:76:ef:47:30:40:17:fb:b8:5b:4c:
00:c3:4a:36:31:1e:18:1e:db:ed:13:05:82:35:44:25:1d:a9:
a2:c0:bf:23:63:b4:c2:64:f1:f8:51:dd:17:45:37:4b:c9:16:
cb:ae:8d:e3:b1:59:da:0e:59:e5:4b:db:ba:da:8c:cb:4d:94:
0f:0f:d1:34:f4:39:5c:a1:b9:d0:93:55:f1:f8:4d:7a:60:69:
4a:d7:2e:ee:d4:3d:37:4f:d2:23:48:1f:73:62:71:c6:4e:45:
05:50:d9:30:6e:d4:9a:bb:c5:fa:98:bb:78:9f:77:b5:55:41:
e3:15:24:9a:cd:70:b2:78:96:8b:f2:f4:85:b3:70:af:0c:72:
8b:ef:5d:8e:23:6f:56:7a:9a:63:aa:c8:63:79:7f:6e:83:bb:
c1:4a:af:8f:a4:06:48:f2:ce:c0:04:f8:42:f4:75:bf:9a:4b:
8a:91:3e:90
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZAGBukDX5gndB/+MlrT+TRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm
YmQzZTkwHhcNMjQwNjExMDY0MDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTRiMGFlZWYxM2QyODQxNWMxNzgyYjZiZGE2YzViNTJkOTQzOWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuPDtLPR6PxUNA7BVwPtx129Mo1r
HYBg+ezu8qfe1mwvBx1Ym7s93MCduyHp4oYsH1F8BxRPs1cjrD5SWUQDbgQ0lo3s
aIwaK+6EsU6AkqVHF+6+roPBtrlUkHAcCpGRvj4u/oL2fykf+HoEX+yGzvp2grpW
/AmXK4uTXzyfSbPi5o8ym+zmmb9ewGQ6hwqTJoxqjo7Dh3pSk9XwBK4jeTk9LJ8P
T6+asobek57i7j73sInwmpAkV4HKCxd2ixCEL5w0HsUBfFxfZvjMpYL17UshsQ0v
SUckfj1kFGUfzn6LQfZxujDlmle+t/JNzdmF/cLswgHU4lX5iXyqhNuCNwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCpLCu7xPShBXBeCtr2mxbUtlDm6MB8GA1UdIwQY
MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt
ZjJiZTlmNmM2NjRjLzEvS2tzSzd2RTlLRUZjRjRLMnZhYkZ0UzJVT2JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj
LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBw5toAwQA
1P1rAwQA1UpQMA0GCSqGSIb3DQEBCwUAA4IBAQAFPFmN/Vp2xhAEmzrNJwC6gtaB
wlbEAM1bvXjKmhqC7ZjLByq4VIF1iQjdXYzoMaovNOG26YNOsjo9U93/fQvo0ED+
bUxKyIhLNlVVZwFeinbvRzBAF/u4W0wAw0o2MR4YHtvtEwWCNUQlHamiwL8jY7TC
ZPH4Ud0XRTdLyRbLro3jsVnaDlnlS9u62ozLTZQPD9E09DlcobnQk1Xx+E16YGlK
1y7u1D03T9IjSB9zYnHGTkUFUNkwbtSau8X6mLt4n3e1VUHjFSSazXCyeJaL8vSF
s3CvDHKL712OI29WeppjqshjeX9ug7vBSq+PpAZI8s7ABPhC9HW/mkuKkT6Q
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:15:09 2024 by rpki-client on console-fra.rpki-client.org