Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/KKQ8FCzYTIUwr_D-MU5D_z204iE.roa
File: KKQ8FCzYTIUwr_D-MU5D_z204iE.roa (raw, json)
Hash identifier: 3l2fANL6oCNeWKKMSCq+SVPaCQxQVxXRHswHOlDjSVU=
Subject key identifier: 28:A4:3C:14:2C:D8:4C:85:30:AF:F0:FE:31:4E:43:FF:3D:B4:E2:21
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018CC56E0F0216F79849F7CBD847B2F110AE
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/KKQ8FCzYTIUwr_D-MU5D_z204iE.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198100
IP address blocks: 45.149.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 21:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0f:02:16:f7:98:49:f7:cb:d8:47:b2:f1:10:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28a43c142cd84c8530aff0fe314e43ff3db4e221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:00:8d:69:a4:ac:4c:2b:62:a4:12:3b:b1:
2b:51:e0:c8:cf:a8:e5:e6:e5:8e:e2:bf:9c:9b:28:
b1:c0:4e:0d:62:1b:e0:3b:10:61:f5:4a:c8:44:07:
e4:61:18:fd:b3:74:6d:23:76:25:e8:02:a1:a5:e8:
4e:d3:b8:52:e2:48:58:e7:98:5c:20:3b:eb:4a:fd:
b7:9c:4a:fb:21:f2:93:0b:25:0b:c5:88:03:e2:bc:
32:63:0a:59:09:d6:36:5e:3c:b0:bb:e5:d6:55:a8:
46:e8:14:13:c4:11:18:2d:f7:09:65:5a:9e:d9:d2:
61:bf:76:f5:5b:cc:68:e3:7c:d2:92:d5:dd:50:5b:
8e:15:b9:cb:cc:52:97:b5:07:88:48:36:1e:6d:a2:
6a:fc:91:15:17:b4:0d:5d:5c:60:a7:4a:b8:2b:3e:
69:7c:ad:71:42:2c:9a:b1:ed:bb:03:39:2b:fa:b8:
d6:e1:54:6d:e9:29:11:ea:82:07:a5:8d:be:4d:5c:
79:16:9b:78:c4:b8:a3:8a:82:c3:6d:69:62:45:64:
da:17:6f:4a:69:ab:93:b7:a5:74:08:a4:83:56:ad:
84:01:88:8d:82:28:c1:0c:b4:4b:2c:4c:d5:82:c8:
df:13:9c:e2:c6:52:7f:3f:97:a2:65:75:2c:b9:65:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A4:3C:14:2C:D8:4C:85:30:AF:F0:FE:31:4E:43:FF:3D:B4:E2:21
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/KKQ8FCzYTIUwr_D-MU5D_z204iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.92.0/24
Signature Algorithm: sha256WithRSAEncryption
31:31:7c:1e:53:6f:e9:d9:7a:91:e8:6b:e9:03:a9:60:d8:e3:
64:34:f4:80:05:4b:9f:a4:c7:f8:cf:9e:c9:c4:f4:5c:bb:83:
2d:59:f4:84:fe:3d:5a:c4:ed:09:b7:0a:b4:36:b6:2d:c4:cb:
80:4c:3e:df:9f:f5:83:55:68:38:e6:6a:6b:59:b7:9b:ac:04:
85:b9:7f:0c:03:14:a8:1d:68:e2:16:92:cb:75:bf:cb:a7:7c:
15:33:a0:4d:f8:59:56:d5:73:48:22:f6:ea:86:b7:01:06:3c:
23:13:e3:3e:98:f7:c9:ff:3f:66:ac:61:06:24:02:3a:e3:90:
d1:a7:a3:7e:c1:8f:c0:0e:18:27:bd:fb:d3:59:69:00:eb:40:
1f:04:6c:1e:96:46:00:de:9a:cc:6b:f7:81:96:24:f3:ca:8b:
31:bb:a7:df:e3:80:bd:b4:6e:e4:9b:78:49:0f:ff:9d:93:0d:
a9:8b:78:87:96:27:c9:65:f4:47:7a:12:c8:f5:42:17:88:ca:
19:ae:d4:8e:29:9a:5c:ea:ed:c5:fb:55:62:d5:0d:17:d5:a1:
c9:2d:b8:0b:8e:53:43:ea:e4:2d:f3:bf:a9:77:f7:d9:29:14:
35:46:48:73:b8:c3:e0:0c:91:bf:26:f5:5a:f6:33:b6:f4:36:
9e:26:a4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:08:57 2024 by rpki-client on console-fra.rpki-client.org