Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/kbkRllkr_MFbZ5hNynspGe8m15g.roa
File: kbkRllkr_MFbZ5hNynspGe8m15g.roa (raw, json)
Hash identifier: g43Ocw3JOcahnePP14dseV97RyZ11pdaVBDa2LtZRvg=
Subject key identifier: 91:B9:11:96:59:2B:FC:C1:5B:67:98:4D:CA:7B:29:19:EF:26:D7:98
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 018FEE18575A18AF8B960A463372F40DEF46
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/kbkRllkr_MFbZ5hNynspGe8m15g.roa
Signing time: Thu 06 Jun 2024 15:08:43 +0000
ROA not before: Thu 06 Jun 2024 15:08:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399114
IP address blocks: 94.154.8.0/24 maxlen: 24
178.211.157.0/24 maxlen: 24
185.234.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ee:18:57:5a:18:af:8b:96:0a:46:33:72:f4:0d:ef:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: Jun 6 15:08:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91b91196592bfcc15b67984dca7b2919ef26d798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:37:8a:15:f8:42:c8:83:21:a7:7b:85:80:
e6:d2:61:d7:fa:01:df:c3:d0:b0:54:3d:fb:f6:66:
f7:b7:40:65:6e:38:f3:da:69:ce:8f:13:6a:93:ae:
02:d7:d2:c9:e4:4d:f2:4f:44:13:8e:92:cc:c0:70:
5b:32:9b:8d:fc:0f:f5:72:cb:59:f2:c5:a6:60:f4:
60:b5:d0:5a:16:03:d9:35:b4:32:15:a6:18:6f:4c:
5a:a8:e3:b1:5d:db:57:26:06:33:34:02:61:48:42:
76:f8:24:a9:12:74:7d:3c:14:c6:c5:56:b5:c3:f4:
78:91:5a:5e:56:d3:35:83:d9:33:67:8a:99:7a:97:
33:82:32:20:7a:5d:1f:ef:11:7e:b8:df:3f:a3:bb:
03:3e:93:f5:8c:58:ca:ef:a8:34:db:c5:a0:64:ce:
1a:00:49:12:2b:3f:18:1c:4d:87:7b:31:8c:64:69:
68:b2:18:4b:26:a0:fb:96:79:65:49:8f:62:11:21:
7f:a1:55:65:59:ef:2d:38:a5:81:70:ad:96:ba:72:
10:57:4c:9e:a9:b1:fe:d2:1c:5e:4e:30:17:b0:70:
8e:02:a9:b5:a9:aa:5a:3c:e3:ba:e5:b2:6b:1c:06:
17:6b:c3:e2:a2:16:07:68:71:e6:7f:e7:f4:38:94:
8e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B9:11:96:59:2B:FC:C1:5B:67:98:4D:CA:7B:29:19:EF:26:D7:98
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/kbkRllkr_MFbZ5hNynspGe8m15g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.8.0/24
178.211.157.0/24
185.234.115.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a4:b1:47:f3:b6:85:32:27:db:4c:6d:5d:10:c3:c1:f7:5b:
a5:0d:a8:77:9b:38:12:5c:40:ef:0c:94:13:b0:b5:8b:ac:c2:
10:2b:05:01:2e:90:2f:58:48:b7:4d:2a:81:f3:9a:23:c0:11:
69:af:75:79:c4:0a:d9:0f:7d:d2:5a:cd:a0:9b:db:ba:ab:35:
69:b2:38:68:26:8c:13:af:96:36:05:85:61:b8:82:48:67:52:
12:51:35:22:1b:fa:3a:5d:d3:d5:d7:79:71:67:43:d2:79:7e:
48:0b:9b:ab:c0:fe:d7:22:ac:97:a3:7e:cd:2d:67:1d:b4:33:
5d:30:54:cd:79:7e:62:fd:e1:41:a3:1a:e3:5d:6c:b4:15:b6:
5d:3b:96:82:8e:46:cc:56:46:7b:b0:32:1f:57:bc:92:25:13:
53:1a:3c:01:3a:06:50:ab:00:01:6e:bc:33:56:3c:9a:46:e3:
f7:89:a6:2e:92:f5:d9:cf:b6:fd:58:9c:0b:9d:9f:a0:1d:de:
a7:37:4f:6f:e2:cf:ce:e3:9c:84:a7:a4:67:f1:fe:64:ee:df:
8e:1a:c3:59:ad:09:9b:01:95:91:78:ed:0f:d4:0d:c7:4f:2c:
07:9c:64:0f:1a:ba:51:09:25:f9:0d:b4:13:6c:52:67:a5:d4:
c7:e2:1f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:38:58 2024 by rpki-client on console-fra.rpki-client.org