Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/KJHrEEqrk_rT9bdqg9opfybeMKE.roa
File: KJHrEEqrk_rT9bdqg9opfybeMKE.roa (raw, json)
Hash identifier: uEci5BLUc+eTanY+xeAGHkZt+qrkLHv1Lc9W1d1hF1A=
Subject key identifier: 28:91:EB:10:4A:AB:93:FA:D3:F5:B7:6A:83:DA:29:7F:26:DE:30:A1
Certificate issuer: /CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Certificate serial: 018CC9BBC445ACC185628ECFC74F8525425C
Authority key identifier: C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/KJHrEEqrk_rT9bdqg9opfybeMKE.roa
Signing time: Tue 02 Jan 2024 10:32:55 +0000
ROA not before: Tue 02 Jan 2024 10:32:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35673
IP address blocks: 194.187.245.0/24 maxlen: 24
194.187.246.0/24 maxlen: 24
194.187.244.0/24 maxlen: 24
194.187.247.0/24 maxlen: 24
2a11:aa80::/48 maxlen: 48
2a11:aa80:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:c4:45:ac:c1:85:62:8e:cf:c7:4f:85:25:42:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Validity
Not Before: Jan 2 10:32:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2891eb104aab93fad3f5b76a83da297f26de30a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:84:21:3b:85:39:ac:4f:7c:29:c1:94:52:52:
8a:ca:16:82:06:17:57:4b:6e:46:09:64:b0:eb:07:
9b:28:6d:8e:f2:8f:16:3f:b4:30:14:ad:50:ff:3f:
37:2b:1f:26:4a:96:40:f3:f4:af:a4:f2:5f:46:30:
98:dc:59:61:cb:e7:da:c9:05:39:14:fa:96:5b:76:
3f:fd:e8:19:fe:d1:fc:73:a7:f7:9c:26:24:ce:02:
78:d1:78:1c:d7:d4:c5:8e:01:98:06:34:39:14:1d:
c0:7b:73:71:86:6e:89:22:87:1a:b6:be:99:19:84:
34:78:d0:47:14:32:ec:b7:26:f1:97:09:1c:0c:dc:
c4:d8:29:17:f3:6e:7b:d2:98:70:f7:0f:d3:4f:59:
37:0c:d1:57:dc:7d:58:82:d5:95:ed:8d:8e:55:e4:
f5:14:96:36:61:24:05:a1:d0:f9:c0:4c:b0:83:67:
f3:d8:0e:e3:6a:90:0c:e0:e0:b1:0f:5d:03:96:7a:
70:e5:c4:be:67:7e:29:85:38:67:22:0f:ef:65:9e:
d6:b4:17:9d:f6:2a:2f:57:96:30:58:ee:9d:76:ce:
dd:ca:be:f5:eb:a8:4d:7d:83:ba:87:e1:bc:fe:9a:
4a:a1:c2:53:1b:52:11:31:f7:75:06:7c:7b:24:b1:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:91:EB:10:4A:AB:93:FA:D3:F5:B7:6A:83:DA:29:7F:26:DE:30:A1
X509v3 Authority Key Identifier:
keyid:C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/KJHrEEqrk_rT9bdqg9opfybeMKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.244.0/22
IPv6:
2a11:aa80::/47
Signature Algorithm: sha256WithRSAEncryption
27:a9:92:31:fa:7a:bd:cf:54:08:01:dd:0f:d0:a2:fa:04:a2:
73:d1:91:55:8a:11:17:1a:1a:16:bd:0d:1f:10:c5:71:9a:e5:
ce:bb:fc:36:ee:15:b3:c3:1d:0a:51:c4:67:8f:c4:16:67:ca:
cc:77:be:46:59:19:72:2c:b9:bc:00:83:5d:f2:e4:54:dc:36:
82:db:7b:36:5c:ab:fd:94:46:54:68:73:3c:28:c4:ec:f1:a5:
4d:06:5e:be:ca:dd:39:68:d3:c4:df:8f:74:1d:b9:55:1a:b4:
87:88:66:57:26:cc:fa:35:8b:30:66:c4:1c:07:1a:e3:72:99:
e0:65:97:46:f9:a2:b7:77:d5:a2:42:24:f2:90:73:41:09:3d:
90:35:ae:27:b2:91:38:a4:c9:4c:35:26:ff:76:4b:f4:72:b9:
ee:89:67:01:a6:a4:e3:e0:8d:b2:a2:6c:6c:3c:77:5e:fe:49:
6b:d0:87:af:d7:d6:2b:21:cc:9e:97:e2:2d:3a:e2:55:8f:89:
84:ea:44:30:c4:05:ac:04:c9:f8:6c:81:e4:d2:6a:89:67:0d:
ee:ce:f5:90:26:63:3e:4f:cb:58:d5:9c:8d:04:a8:c5:46:6d:
84:f6:e3:99:52:01:f0:dc:78:e4:5f:97:b8:f5:f0:cf:6b:4c:
cf:19:f5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:46:52 2024 by rpki-client on console-ams.rpki-client.org