Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/KLBs_kVcHuwf9ZBz9PnFQsUNnTo.roa
File: KLBs_kVcHuwf9ZBz9PnFQsUNnTo.roa (raw, json)
Hash identifier: 6Ao+Ll64ziXh8yXNr11ghqJC3+hOLxIBU5uHnxGV1bA=
Subject key identifier: 28:B0:6C:FE:45:5C:1E:EC:1F:F5:90:73:F4:F9:C5:42:C5:0D:9D:3A
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 018CC94E71EE95BAEBF37F63807516FE193D
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/KLBs_kVcHuwf9ZBz9PnFQsUNnTo.roa
Signing time: Tue 02 Jan 2024 08:33:30 +0000
ROA not before: Tue 02 Jan 2024 08:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59511
IP address blocks: 94.177.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:71:ee:95:ba:eb:f3:7f:63:80:75:16:fe:19:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 2 08:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28b06cfe455c1eec1ff59073f4f9c542c50d9d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:1f:5a:6e:44:4a:05:e6:c1:ff:dd:9b:3d:
17:19:97:20:fd:b4:ea:36:98:36:48:e5:4b:d6:cf:
75:05:15:11:de:c2:71:1c:1d:89:f6:f5:8c:a6:ee:
49:df:20:4e:35:ef:8b:29:94:f3:91:d6:11:b4:d9:
5e:6e:b7:55:9d:24:a5:e9:1e:23:36:68:02:56:12:
33:5e:6f:b3:49:de:05:3a:71:4a:01:08:39:0a:4d:
a6:d5:14:dc:ba:49:65:a4:f0:09:b4:96:28:0c:ce:
7a:86:94:65:db:aa:cb:79:04:cc:63:5d:5d:01:dd:
a5:89:9d:23:9e:01:21:3e:5e:60:dd:89:b3:fd:7d:
4f:09:b6:95:8d:39:d1:92:29:dc:89:4a:2b:4a:5f:
5b:c5:aa:ae:69:6b:56:c4:f8:53:1a:13:3f:2f:dd:
8b:ab:f9:52:f0:92:47:ec:d9:6c:87:bd:b0:9b:1d:
61:c0:7a:16:0a:b0:a1:91:16:9c:ba:2b:8c:e5:49:
39:2e:da:70:fd:83:64:07:2a:fe:ff:18:bb:e2:ca:
7d:4c:5c:d5:0b:66:bd:57:62:43:bd:23:45:62:29:
4d:ef:97:91:5f:84:5b:66:36:0a:06:e5:2f:62:b7:
bb:81:15:ee:44:2f:c8:80:c7:1b:86:c7:71:09:b7:
03:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B0:6C:FE:45:5C:1E:EC:1F:F5:90:73:F4:F9:C5:42:C5:0D:9D:3A
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/KLBs_kVcHuwf9ZBz9PnFQsUNnTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.26.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ba:3c:18:56:98:38:ac:56:81:75:b1:5d:34:c4:c9:3c:0e:
26:43:a3:2a:87:ff:c0:f5:87:9c:b4:7a:db:1d:1f:3a:e3:61:
1c:e8:08:f4:ec:f0:43:1c:a1:7b:f9:c7:c4:4d:10:a7:78:76:
48:62:c7:97:b7:e4:ed:b4:4f:e1:13:ab:23:67:01:3d:72:5d:
a5:21:05:85:92:c3:d0:24:e2:cb:50:35:c2:7b:58:cf:f9:7e:
53:76:d8:d8:48:cf:5c:75:20:45:99:b4:4d:a9:c8:2b:92:33:
fc:39:c2:a8:46:f3:a5:d9:40:fb:b3:00:eb:c9:ea:48:eb:59:
9e:ab:ff:80:e1:3f:a3:22:67:34:11:5c:2e:28:ef:1e:4b:e6:
e1:5d:14:f8:b0:d3:b9:dd:14:7a:e7:25:dd:fb:6c:86:93:81:
b8:fb:5c:51:70:8a:e2:35:70:c3:13:40:aa:b5:f7:32:15:cc:
9b:c7:30:94:11:21:63:f8:e7:14:d8:69:f7:83:32:74:23:dd:
8c:dc:1d:4e:0c:8a:8d:cd:5b:b3:2d:9d:dd:8c:b6:50:68:a6:
74:9d:b9:c9:de:2a:28:7d:92:f3:f2:09:a5:e1:7b:f3:50:9d:
a5:d9:71:4c:a5:ca:95:55:f8:e6:4e:af:f1:0d:26:11:1c:4f:
2b:ac:a2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 16:59:49 2024 by rpki-client on console-ams.rpki-client.org