Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/Kbjd4Dqi0TnC6qtaa0kVBqih8Qc.roa
File: Kbjd4Dqi0TnC6qtaa0kVBqih8Qc.roa (raw, json)
Hash identifier: jfkOqoZxFkrpjbjuH8HoWsCjInDv8kqX9g7Eql27jGg=
Subject key identifier: 29:B8:DD:E0:3A:A2:D1:39:C2:EA:AB:5A:6B:49:15:06:A8:A1:F1:07
Certificate issuer: /CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Certificate serial: 018CC424CC9AEE99FE9570D96334A8A4EDA7
Authority key identifier: E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/Kbjd4Dqi0TnC6qtaa0kVBqih8Qc.roa
Signing time: Mon 01 Jan 2024 08:29:55 +0000
ROA not before: Mon 01 Jan 2024 08:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206141
IP address blocks: 185.155.188.0/22 maxlen: 22
147.28.48.0/20 maxlen: 20
2a07:9540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:cc:9a:ee:99:fe:95:70:d9:63:34:a8:a4:ed:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Validity
Not Before: Jan 1 08:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29b8dde03aa2d139c2eaab5a6b491506a8a1f107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:8c:e4:95:15:80:79:c9:2f:d7:c0:55:b6:
fb:28:26:d7:44:be:ef:db:28:ab:1a:c2:27:2f:9e:
e3:ab:0f:3e:45:b8:52:fb:84:31:f0:f5:c7:0f:12:
6b:29:3b:f6:ec:af:0a:05:db:2d:34:78:57:3d:5e:
31:ff:4b:86:46:0f:a1:ec:a9:fb:7c:ed:c7:31:89:
eb:b4:d6:3b:43:f1:39:83:0e:f9:c7:0a:2e:99:cf:
b1:2f:c7:d0:cd:9f:de:b7:21:d5:89:37:8a:e5:44:
9c:73:cc:71:eb:59:d4:6f:ce:bd:ce:ea:21:c9:b1:
a8:3d:71:45:57:a5:f3:ac:69:ad:0a:1f:49:67:75:
51:42:ab:84:8d:3e:8b:44:0d:1f:f8:cd:81:66:a1:
0a:23:48:67:43:2e:ad:8b:a3:44:fa:49:da:f3:ab:
79:4f:01:b1:af:1d:91:85:7c:95:1a:39:69:5d:7f:
11:01:8d:f6:fc:f5:c9:0e:e7:4e:0c:a5:63:68:7a:
bc:44:e4:5f:9c:64:52:06:f5:f2:32:bd:4c:4e:ba:
fc:a9:1d:e1:8e:95:c4:b0:27:c5:f6:56:56:53:a0:
a2:11:f5:cd:77:49:37:c7:44:d3:fd:74:3f:9c:42:
9b:d0:41:03:42:fa:92:fc:27:be:dd:b1:54:09:73:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B8:DD:E0:3A:A2:D1:39:C2:EA:AB:5A:6B:49:15:06:A8:A1:F1:07
X509v3 Authority Key Identifier:
keyid:E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/Kbjd4Dqi0TnC6qtaa0kVBqih8Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.28.48.0/20
185.155.188.0/22
IPv6:
2a07:9540::/29
Signature Algorithm: sha256WithRSAEncryption
2c:e0:d0:b6:67:92:cb:60:76:bf:99:c1:5f:50:61:56:fe:4e:
1a:5a:7d:c0:44:62:3f:42:32:ec:e4:fc:7c:0d:06:d3:27:41:
95:2e:ef:e7:d3:e0:92:fe:6c:9e:72:12:8a:44:e2:f0:4e:98:
4f:05:53:19:34:72:0a:96:b8:ef:25:3b:49:2c:09:ce:f5:be:
5a:ce:d4:45:21:37:36:80:3e:8d:46:1d:14:9a:99:87:a6:b6:
5a:76:2a:fb:51:15:82:ec:a1:da:d1:cc:cd:78:85:ed:56:a1:
54:6e:9c:5c:26:7f:d9:f5:e6:dc:1b:2c:2b:ee:f2:e3:af:9b:
8d:4b:9f:18:77:ee:f8:93:9f:72:06:40:16:be:28:bd:5b:82:
4d:6e:86:4a:90:30:98:9a:a3:fb:03:2b:7c:04:1b:66:76:88:
c0:1e:ea:74:07:9c:e8:fc:1d:a6:c6:83:88:8f:52:af:1a:49:
a3:52:15:fc:77:6e:87:11:4b:7b:15:52:72:b8:06:5e:ca:eb:
a4:45:ab:3c:fa:47:ba:7c:4a:9d:83:dc:19:b1:9b:02:48:49:
5f:a0:0a:41:5d:a2:77:db:8b:1e:17:10:fd:fa:d2:88:5b:fa:
08:17:fb:3b:b8:54:a4:da:ab:2c:7e:14:58:85:5d:26:91:b8:
85:da:31:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:09:43 2024 by rpki-client on console-ams.rpki-client.org