Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/KJzueSKQchWdnmnnrX5aEGPKOQg.roa
File: KJzueSKQchWdnmnnrX5aEGPKOQg.roa (raw, json)
Hash identifier: DLjLDOvTsD5/YDtZrTXNNoeBN94Vj1wDReK4CsqctFs=
Subject key identifier: 28:9C:EE:79:22:90:72:15:9D:9E:69:E7:AD:7E:5A:10:63:CA:39:08
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 018CC64B8BF5E846A323F8681F67E63D5925
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/KJzueSKQchWdnmnnrX5aEGPKOQg.roa
Signing time: Mon 01 Jan 2024 18:31:28 +0000
ROA not before: Mon 01 Jan 2024 18:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14445
IP address blocks: 91.237.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 14:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8b:f5:e8:46:a3:23:f8:68:1f:67:e6:3d:59:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 1 18:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=289cee79229072159d9e69e7ad7e5a1063ca3908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a1:00:21:67:ca:bd:c1:86:b8:ef:ca:c3:b5:
9a:da:74:0b:56:06:32:75:51:d0:73:af:bd:3a:2b:
16:5b:cf:57:a8:d9:a9:97:3f:84:64:a0:da:d5:91:
3a:b5:bd:d5:f5:3a:64:92:f4:ed:03:b8:96:d1:57:
8b:ca:ef:37:27:3c:64:a3:98:71:c1:cf:e0:f2:db:
17:6e:c2:5b:bd:56:f1:5b:de:9b:56:8c:a0:c6:b0:
08:c1:b6:78:3f:6d:1c:31:c0:26:b8:0b:40:f0:bf:
fc:ac:6a:4f:26:25:4d:ce:9d:fb:e7:e2:e6:06:82:
81:f8:ea:4f:69:bd:95:3c:0c:6f:6b:4e:d0:07:b0:
62:a3:bd:e8:e3:7b:2d:bf:7e:de:2d:04:1d:a4:3f:
88:f3:4d:2a:27:e0:9b:1c:29:0f:d8:09:44:00:32:
21:d3:af:f6:59:51:9e:69:72:57:14:bd:76:90:ac:
c0:10:e2:9a:21:bb:9f:66:22:b9:b6:6d:5d:3a:8c:
2a:5a:ce:d7:8f:24:e8:08:2d:81:52:14:cc:52:2e:
24:9f:2d:e1:1c:1b:bc:11:33:db:f5:f1:9c:52:b3:
4b:e2:6d:9b:1a:5a:4d:67:16:67:fa:23:87:ab:f0:
b6:6d:a9:72:40:84:c1:b7:f3:33:78:10:17:c8:aa:
26:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9C:EE:79:22:90:72:15:9D:9E:69:E7:AD:7E:5A:10:63:CA:39:08
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/KJzueSKQchWdnmnnrX5aEGPKOQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b6:ca:27:d8:ed:6d:2e:1c:cb:ae:1a:7f:d4:ba:f7:37:a6:
26:fc:75:0a:c6:6e:d7:8a:31:11:23:79:96:51:fb:1c:c0:ef:
fe:5e:b7:d2:a0:3e:e0:e7:d9:33:35:80:13:0a:74:09:3d:ff:
53:61:3e:93:c9:05:df:8d:ed:74:29:14:15:15:1b:17:b5:9f:
ae:79:ff:95:9d:8b:cd:b1:3e:b6:b3:15:7f:a5:38:01:18:70:
b1:4f:93:f4:7b:d2:db:ed:4f:8b:44:0d:88:17:5f:f0:90:c4:
1e:b1:c0:9d:dd:61:ab:75:8f:64:dd:05:09:1f:3e:4a:07:89:
cf:5c:eb:7f:28:a0:31:23:cc:8a:b3:44:06:a6:f3:60:31:37:
cc:3d:20:a0:01:ef:7d:87:85:ce:7a:cb:d1:53:3e:1b:5f:c3:
c3:da:19:d9:bd:23:cb:ec:83:b9:69:02:87:23:34:20:42:82:
9c:00:50:94:11:a0:da:77:f1:bf:24:06:de:7e:5a:59:35:fd:
b6:2c:f2:42:7c:4f:9a:cc:8d:77:ec:45:4a:f4:ae:78:bb:77:
36:d0:9a:40:90:49:37:00:76:9d:d2:8b:00:15:e8:eb:35:55:
8a:ce:45:86:37:0b:52:8f:41:93:61:52:4b:66:99:89:60:50:
d6:2e:71:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 21:22:36 2024 by rpki-client on console-ams.rpki-client.org