Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/kPDKu6zt4cS5NTOupZbv04MSRTU.roa
File: kPDKu6zt4cS5NTOupZbv04MSRTU.roa (raw, json)
Hash identifier: Wu+FKeErxAasGPq7KtFqmACKkzE6i3iMbTq/pq3O270=
Subject key identifier: 90:F0:CA:BB:AC:ED:E1:C4:B9:35:33:AE:A5:96:EF:D3:83:12:45:35
Certificate issuer: /CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Certificate serial: 018CC3B679542A4D8B766F1FE8FD3AC4D686
Authority key identifier: 2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/kPDKu6zt4cS5NTOupZbv04MSRTU.roa
Signing time: Mon 01 Jan 2024 06:29:24 +0000
ROA not before: Mon 01 Jan 2024 06:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51545
IP address blocks: 91.217.245.0/24 maxlen: 24
185.155.104.0/24 maxlen: 24
185.155.107.0/24 maxlen: 24
185.155.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:79:54:2a:4d:8b:76:6f:1f:e8:fd:3a:c4:d6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Validity
Not Before: Jan 1 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90f0cabbacede1c4b93533aea596efd383124535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:eb:6c:c1:09:e0:a5:18:3e:d7:d1:cc:34:e0:
e3:0e:55:12:68:46:f4:67:31:87:1d:fc:03:72:3a:
40:c7:74:82:29:86:48:58:82:b0:1a:c7:bd:be:df:
fd:75:a5:ff:d7:29:be:8c:4c:26:8d:f3:ef:d8:88:
bd:19:12:5b:f8:2b:41:2e:76:5b:cd:c1:3e:b3:5e:
62:a5:b7:f9:1a:31:04:15:e2:ad:d0:66:36:0a:d4:
ff:fb:e0:6b:fc:d8:94:45:63:7c:9b:5d:2b:f3:5d:
e8:96:15:ed:3e:95:ca:3a:41:a3:83:6c:17:1d:e4:
80:c7:b8:92:f5:9a:3b:0f:fe:75:cf:9e:e0:a3:ac:
aa:28:2b:08:c3:72:8d:63:39:97:e5:35:a0:55:72:
a1:f4:57:b2:59:c4:00:75:95:73:a1:74:b8:aa:3d:
ad:ab:6f:29:69:8e:4f:19:50:8a:16:82:7b:0a:0f:
65:10:58:c7:ea:11:91:ba:24:08:53:69:36:56:37:
89:c9:44:c6:a0:81:03:b9:b2:31:d8:f1:a7:a3:62:
15:51:f3:9b:2b:95:3d:79:b3:2a:b1:56:fa:86:46:
03:7f:8a:af:a5:80:23:59:92:b2:d6:09:e3:14:70:
7a:cd:9f:c5:66:c6:ed:c0:04:eb:5e:1a:23:23:09:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F0:CA:BB:AC:ED:E1:C4:B9:35:33:AE:A5:96:EF:D3:83:12:45:35
X509v3 Authority Key Identifier:
keyid:2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/kPDKu6zt4cS5NTOupZbv04MSRTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.245.0/24
185.155.104.0/24
185.155.106.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:44:ee:36:21:16:ee:8f:e4:39:66:7b:8a:c6:14:c2:60:16:
47:48:13:1d:c6:7d:55:82:02:ae:57:9b:b2:13:a6:48:94:b0:
e8:37:d5:54:9d:3c:c8:21:80:ac:53:33:07:25:f3:d9:46:8d:
d6:dc:22:75:d2:db:ed:a1:f0:84:e8:ca:59:bc:f6:fe:f1:f0:
22:1c:f7:34:aa:83:ca:94:43:95:49:ac:ef:3c:be:7e:6f:32:
a2:2e:b8:7f:c4:70:b7:33:fb:4f:22:73:33:11:61:d6:c7:7e:
8b:a6:6b:8e:eb:eb:78:b3:0c:db:41:96:39:23:69:c1:71:12:
41:6f:75:a3:02:75:a7:a6:76:bc:96:db:a5:4a:0f:1c:28:9b:
96:05:3a:31:bc:e0:b9:e8:55:c4:3e:6b:d8:79:9e:ca:12:f8:
81:f6:b5:33:f5:6e:a5:88:f8:f5:41:e2:97:58:4e:46:91:6b:
3f:44:60:3e:46:d1:e7:15:c3:fe:f3:c1:0f:27:46:17:1a:f8:
2d:c4:aa:24:e3:b0:ba:e9:01:f4:fe:73:b4:82:03:c0:30:39:
94:e5:de:14:0b:1c:a7:d6:1b:e3:1d:bb:9b:20:89:9b:3b:20:
da:6a:fd:57:07:41:5d:b9:a5:4a:ba:b9:7f:4d:30:c8:45:cf:
75:5c:cd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:42:19 2024 by rpki-client on console-ams.rpki-client.org