Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/KLBqlNRDcWY8X2eusLvc0YZ_9Pk.roa
File: KLBqlNRDcWY8X2eusLvc0YZ_9Pk.roa (raw, json)
Hash identifier: dyQ97AL/B53J7dcafmXwBdtYr5OyvwPmiVDT5DaMPLk=
Subject key identifier: 28:B0:6A:94:D4:43:71:66:3C:5F:67:AE:B0:BB:DC:D1:86:7F:F4:F9
Certificate issuer: /CN=039916dc890f08fe55c75bb4439d6016704b7a61
Certificate serial: 018CC9BCAA71B935FA2C548A8F962EAE8656
Authority key identifier: 03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/KLBqlNRDcWY8X2eusLvc0YZ_9Pk.roa
Signing time: Tue 02 Jan 2024 10:33:53 +0000
ROA not before: Tue 02 Jan 2024 10:33:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51232
IP address blocks: 91.216.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:aa:71:b9:35:fa:2c:54:8a:8f:96:2e:ae:86:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039916dc890f08fe55c75bb4439d6016704b7a61
Validity
Not Before: Jan 2 10:33:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28b06a94d44371663c5f67aeb0bbdcd1867ff4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:9a:9e:38:b7:47:47:e6:8d:e6:7f:58:3d:
2a:70:79:5e:02:53:a1:ef:c8:2d:b2:d0:ef:7c:30:
8f:b2:66:d2:67:ad:87:de:90:9c:1b:91:53:61:5d:
b6:69:ae:88:ea:c8:9c:9a:e7:66:c2:d4:e9:19:4a:
ff:7e:9f:ee:0d:df:ee:50:1d:11:e0:cb:31:c4:17:
1b:58:61:67:8d:a7:bc:f1:b3:71:bb:4b:a5:5c:23:
cd:8b:1e:46:1c:f8:4b:8e:85:3c:d5:86:35:9c:6a:
0f:30:c4:80:9f:f3:95:b9:a3:ad:52:91:04:88:f5:
8e:ed:0e:d5:3d:d8:f5:c7:20:59:3f:a6:01:59:0f:
30:8c:43:05:69:2e:51:c0:d3:0c:a5:e4:3a:9d:d9:
a9:ed:9e:61:d1:73:5e:f4:f8:21:b3:4c:9f:53:17:
3b:a6:af:d0:8c:94:26:eb:73:52:1a:11:72:8e:6e:
f6:2a:dc:98:92:de:90:7f:b5:91:96:1b:83:60:85:
59:b7:e5:4c:95:1e:de:69:f4:ed:fa:ff:40:24:7d:
f3:92:0c:b0:7e:a5:b8:cc:ef:1a:6f:7d:a1:6a:d3:
dd:aa:8a:6f:15:a2:d2:3d:af:c8:20:3a:37:94:0f:
e7:75:11:6f:cb:8c:92:3a:79:cc:fb:98:f7:0f:3c:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B0:6A:94:D4:43:71:66:3C:5F:67:AE:B0:BB:DC:D1:86:7F:F4:F9
X509v3 Authority Key Identifier:
keyid:03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/KLBqlNRDcWY8X2eusLvc0YZ_9Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.60.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ae:7c:9d:22:27:81:fb:b8:c4:77:a6:52:97:51:62:6b:d3:
0c:4c:bd:95:2e:3b:69:12:a5:c8:67:1e:18:8c:ae:34:0a:9d:
e8:21:99:b9:88:95:e4:99:e1:12:c5:47:07:00:13:3b:74:a7:
b1:66:71:2f:60:ac:7c:3d:e8:d3:eb:9f:60:e1:b5:5e:03:56:
40:66:bd:9f:bd:16:8c:15:e9:c8:67:57:f4:ab:4d:c5:7c:ea:
e7:e6:cd:f9:e5:99:15:06:ae:34:8b:0c:be:47:1d:92:70:93:
20:71:81:93:c2:62:ed:72:49:ef:f1:44:66:6b:48:54:54:aa:
4f:7f:20:04:be:48:79:98:4a:aa:ce:0d:bd:26:27:8a:35:f6:
56:45:62:01:6a:07:04:92:8e:29:84:09:71:9b:bd:6a:f9:00:
5b:51:42:f7:4f:d2:77:98:c5:55:56:ac:9b:a1:6d:bb:75:0a:
e1:ab:95:b9:9f:53:10:57:db:fa:e3:39:6b:cb:11:1b:8c:4b:
05:9b:d8:98:bf:b9:9f:02:46:d3:42:3d:20:14:6b:5f:c3:40:
52:ef:d1:ac:26:4c:5b:2e:7a:ea:d9:83:fb:06:ff:c6:c1:52:
19:04:7a:22:66:16:da:b2:cd:e4:98:b3:42:05:84:a4:21:21:
fc:7e:de:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:29 2024 by rpki-client on console-ams.rpki-client.org