Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/KK_N2sCksBBPMNr-pvbkHVa02z4.roa
File: KK_N2sCksBBPMNr-pvbkHVa02z4.roa (raw, json)
Hash identifier: G+X7aeYSXUzcDhDcK2ClLERzKZRFTRVrfTzT6lJsdLM=
Subject key identifier: 28:AF:CD:DA:C0:A4:B0:10:4F:30:DA:FE:A6:F6:E4:1D:56:B4:DB:3E
Certificate issuer: /CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Certificate serial: 018CC3B703B176620D310357CC8DCFF8FED6
Authority key identifier: 0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/KK_N2sCksBBPMNr-pvbkHVa02z4.roa
Signing time: Mon 01 Jan 2024 06:30:00 +0000
ROA not before: Mon 01 Jan 2024 06:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60667
IP address blocks: 91.132.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:03:b1:76:62:0d:31:03:57:cc:8d:cf:f8:fe:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Validity
Not Before: Jan 1 06:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28afcddac0a4b0104f30dafea6f6e41d56b4db3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:82:a9:63:85:f7:f6:fc:1b:a0:79:12:32:1e:
b0:82:b2:9e:c1:8b:85:5d:8d:aa:4e:7c:ef:d6:91:
eb:f0:18:4c:53:90:70:e0:ec:50:e4:85:87:72:63:
9c:c2:33:2a:34:f9:eb:3d:76:e2:3c:22:d0:ec:6d:
0f:91:95:53:d3:43:89:eb:be:7b:a3:87:5d:25:31:
98:ec:16:57:d8:0c:5d:60:5c:c9:46:29:18:74:68:
64:5c:c5:17:af:5d:c6:70:4b:fc:5a:d5:33:9d:b8:
e8:80:52:ed:f9:8e:d1:12:a0:84:4c:49:a8:96:00:
40:a7:03:57:14:c6:fc:07:75:cd:53:2d:00:3e:f2:
c1:c1:28:72:26:03:90:34:97:22:e7:1f:9f:39:db:
c2:ee:42:90:d4:b2:a9:da:ed:43:12:06:6f:94:b6:
51:75:39:19:0b:f7:f5:0a:76:2f:0a:55:7f:bf:16:
d6:e8:e8:8e:c1:ae:a5:aa:05:df:c9:75:29:06:f1:
a8:08:04:f0:94:83:80:08:73:62:b9:b4:b0:09:ad:
d4:5d:e3:85:a6:f4:8e:62:99:23:b2:e6:3c:03:c5:
79:e5:38:ff:7c:02:1d:16:67:ef:59:15:2c:66:92:
6c:89:1c:5a:d5:80:e7:87:05:db:25:96:1c:08:50:
6c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AF:CD:DA:C0:A4:B0:10:4F:30:DA:FE:A6:F6:E4:1D:56:B4:DB:3E
X509v3 Authority Key Identifier:
keyid:0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/KK_N2sCksBBPMNr-pvbkHVa02z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.102.0/24
Signature Algorithm: sha256WithRSAEncryption
40:25:e3:e1:60:a7:f3:2f:b9:be:8e:56:8a:67:66:d0:78:4a:
74:f0:67:ff:da:c6:d2:bb:f1:a6:7e:e1:67:32:08:18:74:eb:
4e:c9:5f:85:1f:d9:d1:84:e0:a7:e4:2e:29:c9:f1:88:84:14:
2f:11:0b:42:b5:6d:2c:aa:85:ad:72:c6:e2:be:f6:a7:1f:c4:
02:f8:b8:fd:5d:47:dd:e0:11:ed:be:ef:cf:fb:a4:5f:4a:e0:
1a:e6:a7:0f:db:de:3f:2e:d2:73:bc:c6:c0:3c:db:68:a9:c1:
74:5e:35:8d:b5:94:04:4b:76:f1:eb:bc:89:5b:76:b7:1c:05:
d6:4d:49:df:db:bd:74:58:c1:85:1a:67:97:ac:c2:b8:52:86:
80:d7:f5:ef:46:58:13:38:90:a1:29:90:05:45:df:dd:52:5f:
a4:31:15:9b:51:cb:b9:31:60:34:63:d8:98:d5:c1:bf:ac:9d:
3f:91:be:13:74:41:a2:76:47:fc:4a:08:19:37:cd:b9:16:d3:
f1:c6:2b:ef:35:c0:e6:95:ae:46:1f:a1:23:86:6a:2b:65:3a:
7f:11:ff:55:09:7b:60:08:f6:c4:4e:27:6a:c5:84:fe:46:0f:
0f:54:fb:e7:a6:f7:0b:69:42:d3:2a:1b:b2:e3:a1:03:2c:a0:
62:17:cc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:40:11 2024 by rpki-client on console-fra.rpki-client.org