Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/KYYCuSW-m4yswDJtjCfgH-WT1gA.roa
File: KYYCuSW-m4yswDJtjCfgH-WT1gA.roa (raw, json)
Hash identifier: JZpY6mk1BITxmaPc9UcbZfzjq0c74hazhbixerrDl7k=
Subject key identifier: 29:86:02:B9:25:BE:9B:8C:AC:C0:32:6D:8C:27:E0:1F:E5:93:D6:00
Certificate issuer: /CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
Certificate serial: 018FA0283D4CBBD226898638F910C9258338
Authority key identifier: C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/KYYCuSW-m4yswDJtjCfgH-WT1gA.roa
Signing time: Wed 22 May 2024 11:55:42 +0000
ROA not before: Wed 22 May 2024 11:55:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202766
IP address blocks: 176.98.220.0/24 maxlen: 24
176.98.223.0/24 maxlen: 24
185.155.64.0/24 maxlen: 24
185.155.67.0/24 maxlen: 24
185.187.180.0/24 maxlen: 24
185.187.181.0/24 maxlen: 24
185.187.182.0/24 maxlen: 24
185.187.183.0/24 maxlen: 24
2a0d:59c1::/32 maxlen: 32
2a0d:59c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/w6uPRPw1YJa45lb8hzmHHsANHxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/w6uPRPw1YJa45lb8hzmHHsANHxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a0:28:3d:4c:bb:d2:26:89:86:38:f9:10:c9:25:83:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
Validity
Not Before: May 22 11:55:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=298602b925be9b8cacc0326d8c27e01fe593d600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:04:9b:6c:e4:04:b3:0c:0d:36:c9:2b:db:
2b:3b:72:4f:54:fd:2d:da:bd:91:f4:9d:db:2b:ab:
37:d6:2d:f2:d7:65:5b:ae:c9:df:33:c9:3a:70:45:
07:bd:0f:23:f4:8a:65:c8:1f:cd:03:b8:11:3f:da:
4a:e4:e1:25:19:01:aa:0f:c0:1a:08:ce:2f:d7:16:
5d:5a:4e:3a:7b:a0:77:3f:45:56:fa:f0:8c:b9:f5:
9d:f8:4b:22:ae:f0:04:20:5d:22:93:0a:9f:b1:da:
45:32:d4:3e:ee:49:a5:8e:d6:85:55:68:15:05:5d:
d2:ed:a0:00:fe:28:f6:eb:33:2a:1c:8d:60:fc:6b:
52:6e:da:a9:7d:22:fb:82:93:3b:e4:39:70:cc:4b:
96:b5:5f:de:18:a0:5c:3e:c7:d3:1b:3a:d7:ae:8c:
c0:47:9f:07:d9:8b:02:dc:c3:ce:ba:ca:8e:1e:48:
49:c9:3b:ab:c2:e6:45:6a:27:58:37:73:34:91:90:
de:a9:fd:97:c8:cf:ef:da:57:5e:35:20:a6:ff:3b:
cd:c0:b8:de:ec:8a:de:2b:78:ec:dc:ee:ff:e4:20:
9c:24:15:bd:42:88:de:13:08:16:bb:b2:47:74:43:
ad:d9:93:43:6c:7b:03:9b:78:32:11:2a:6c:2f:9e:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:86:02:B9:25:BE:9B:8C:AC:C0:32:6D:8C:27:E0:1F:E5:93:D6:00
X509v3 Authority Key Identifier:
keyid:C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/KYYCuSW-m4yswDJtjCfgH-WT1gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/w6uPRPw1YJa45lb8hzmHHsANHxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.220.0/24
176.98.223.0/24
185.155.64.0/24
185.155.67.0/24
185.187.180.0/22
IPv6:
2a0d:59c1::/32
2a0d:59c7::/32
Signature Algorithm: sha256WithRSAEncryption
6d:a1:31:ff:00:f2:a6:68:f9:32:aa:36:74:0d:bf:c8:9f:02:
f9:f5:00:88:33:41:49:f5:f6:90:e2:17:ef:97:03:dd:8b:9f:
65:99:fd:a1:f4:c6:0d:c2:1c:1c:28:8b:9b:a6:7a:c3:7f:d5:
cb:ef:39:b7:27:28:e6:8d:de:fe:79:42:d2:68:7a:cb:b9:1e:
99:fd:bb:e2:cb:9a:45:6f:95:7e:fc:65:ef:6e:41:2f:5f:a2:
30:32:e9:0f:bb:f5:1d:94:8d:6f:c2:93:3d:a1:1c:fb:9a:f9:
91:69:e2:78:82:18:cb:b1:ee:88:f0:f6:a0:6a:f5:d9:7b:f7:
75:49:1f:db:1c:42:1f:87:31:0d:1a:46:bc:80:86:13:bc:01:
15:76:47:dc:68:35:fa:3f:ad:61:f4:4d:89:81:1f:ec:7e:95:
ae:28:83:34:11:19:ef:2b:7e:a7:c3:c6:6b:e4:a5:fd:d1:5a:
0d:52:f0:87:dd:6a:4f:59:4c:87:9e:00:c2:5a:4f:50:5c:aa:
5f:ad:a0:d0:51:25:6b:ed:b7:0e:3c:74:3d:9e:88:5c:db:2f:
25:49:23:f7:c3:04:e9:1b:4d:4f:57:12:b7:6b:21:1f:45:d9:
3b:9f:ff:aa:54:9c:3a:08:50:28:57:2d:f5:97:8b:76:7a:c5:
38:11:d4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:50:42 2024 by rpki-client on console-fra.rpki-client.org