Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/KKyPsfccdUEQCyunv0cypw6VjYo.roa
File: KKyPsfccdUEQCyunv0cypw6VjYo.roa (raw, json)
Hash identifier: ZIa/LGPNpDjmSQrIOtNS9WMb7tbHSpJnuj11XZy8zuo=
Subject key identifier: 28:AC:8F:B1:F7:1C:75:41:10:0B:2B:A7:BF:47:32:A7:0E:95:8D:8A
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 018CC9BC6CA977765057368DA60C81E23E09
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/KKyPsfccdUEQCyunv0cypw6VjYo.roa
Signing time: Tue 02 Jan 2024 10:33:38 +0000
ROA not before: Tue 02 Jan 2024 10:33:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47687
IP address blocks: 185.225.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:6c:a9:77:76:50:57:36:8d:a6:0c:81:e2:3e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:33:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28ac8fb1f71c7541100b2ba7bf4732a70e958d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:2b:48:e5:1d:5b:1d:cc:82:14:c9:46:18:
b4:58:4b:14:89:b7:94:91:26:d5:91:68:2d:7a:85:
0f:f0:d3:f5:2a:76:ed:43:c4:61:3b:58:16:d2:e3:
b2:34:90:24:0e:14:61:73:b4:72:3d:bc:38:ea:85:
9d:35:90:eb:27:87:67:e2:cb:5c:a5:c0:b8:8b:9f:
6c:c2:3b:2d:1a:31:ae:0e:62:a7:df:1d:5b:31:cb:
3c:60:e3:df:00:06:e5:45:63:be:4c:a7:35:65:62:
9a:0c:26:6f:18:2f:43:e3:ab:8d:9b:13:b2:07:8a:
7c:6e:5a:28:33:22:56:d7:0a:0c:73:27:6e:88:52:
6a:02:c0:c3:e4:a7:2e:e4:40:50:a1:ee:e9:db:38:
9c:54:d6:8f:28:2d:4c:65:7a:e5:35:69:32:9b:16:
44:6d:51:ee:b7:a4:1d:a0:19:a0:95:75:92:c2:f0:
a4:23:23:1b:1d:bd:16:b9:49:ed:8e:53:c8:34:9b:
0c:3c:76:39:41:61:ad:0e:16:d4:93:3e:85:32:a9:
03:75:3d:f2:cd:ee:c6:8f:3c:c8:d6:40:04:00:42:
52:b9:c1:52:20:e3:a3:ec:df:48:cf:fa:fd:ca:c2:
d5:68:f2:81:23:79:17:37:55:2e:35:58:70:7e:7f:
9c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AC:8F:B1:F7:1C:75:41:10:0B:2B:A7:BF:47:32:A7:0E:95:8D:8A
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/KKyPsfccdUEQCyunv0cypw6VjYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.207.0/24
Signature Algorithm: sha256WithRSAEncryption
92:30:b5:89:3f:03:b8:cd:85:a4:a2:e4:12:64:51:6f:12:5c:
39:f0:48:06:fc:8b:98:44:28:b6:e6:6f:98:28:8e:d1:79:a8:
bb:3a:9d:09:89:b0:a5:30:33:fc:49:35:89:81:3d:06:6b:24:
c1:64:b9:e3:a8:5f:14:e1:6e:35:99:88:7f:b4:07:19:fa:04:
38:2b:e2:fe:1a:6f:08:35:3a:89:6f:af:c4:88:0c:58:88:ec:
b3:cc:32:fd:48:c4:a7:5a:98:b3:70:34:23:39:c9:0a:bf:80:
59:9f:5b:58:b9:b5:1c:06:e5:b2:3f:e7:81:9b:48:20:c1:8d:
56:59:c8:36:a7:d9:98:f9:aa:98:bd:b3:b5:00:de:35:63:17:
50:5e:31:06:51:61:30:ba:ba:23:03:bc:13:8d:ac:56:27:40:
f1:f1:83:22:f4:74:62:54:8e:55:a8:72:21:77:91:9e:43:68:
68:78:2e:ab:c8:2d:49:1e:5d:d2:24:fe:f9:e8:a7:df:04:ee:
d5:a0:53:11:12:24:7a:dd:54:b5:8e:04:12:34:a5:19:ab:57:
40:9e:e0:56:df:75:70:9a:3d:47:3e:b1:ad:48:9c:0a:ad:41:
39:c0:af:cf:d5:bb:d9:1f:7d:17:45:90:31:72:17:0a:aa:26:
b0:76:41:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:41:24 2024 by rpki-client on console-ams.rpki-client.org