Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/kbxJnqijaOy7FuKAYLHavQdJJcs.roa
File: kbxJnqijaOy7FuKAYLHavQdJJcs.roa (raw, json)
Hash identifier: JNNNAaJaDeEdeWtRuLl+SjAkhOWe/RwS2J6ViMyH0XE=
Subject key identifier: 91:BC:49:9E:A8:A3:68:EC:BB:16:E2:80:60:B1:DA:BD:07:49:25:CB
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 018CC5012364DA04DA2AF59AFFCBAE9E7F26
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/kbxJnqijaOy7FuKAYLHavQdJJcs.roa
Signing time: Mon 01 Jan 2024 12:30:35 +0000
ROA not before: Mon 01 Jan 2024 12:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48095
IP address blocks: 193.228.12.0/22 maxlen: 22
91.132.248.0/23 maxlen: 23
194.76.32.0/22 maxlen: 22
91.132.250.0/23 maxlen: 23
109.196.170.0/23 maxlen: 23
109.196.168.0/23 maxlen: 23
185.245.245.0/24 maxlen: 24
192.144.24.0/23 maxlen: 23
91.197.36.0/22 maxlen: 22
192.144.26.0/23 maxlen: 23
185.249.0.0/22 maxlen: 22
193.39.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:23:64:da:04:da:2a:f5:9a:ff:cb:ae:9e:7f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91bc499ea8a368ecbb16e28060b1dabd074925cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:e0:1b:39:5b:bd:c1:fd:9a:dd:1d:ff:11:
bd:eb:7e:7d:4b:59:b7:75:f2:13:7e:bb:3d:6c:ab:
2a:51:3a:8d:d4:df:a5:c2:0d:aa:bd:d3:f4:f4:02:
5c:c3:19:2c:c4:cb:d7:f1:db:a5:9b:ff:00:bd:d0:
2d:71:65:19:47:e2:9b:a0:c4:ab:16:4f:2f:c3:c9:
2c:2e:78:23:42:1d:ef:b8:9f:70:87:cc:cc:8c:45:
a9:c4:04:2c:87:88:7a:50:f6:2f:73:53:e2:27:a2:
b3:46:74:ea:d0:1c:3e:ad:39:0e:ca:ff:b8:4c:8d:
8e:0f:51:ab:0f:24:69:49:5d:28:e4:d4:11:24:25:
4a:e6:b9:58:8e:20:32:56:13:6a:32:6d:fe:22:b7:
d3:30:15:0b:e0:f9:10:c5:01:c2:3c:20:41:8b:c9:
69:ab:b5:03:04:c4:28:0a:f9:d7:36:99:bd:ab:94:
b1:30:4c:d8:c1:12:cf:04:81:2c:30:82:bf:c3:67:
da:41:4e:88:fa:fd:7f:83:37:26:29:ff:60:a4:d4:
fb:9d:a5:ab:1e:91:9e:44:02:e4:f1:06:c0:13:eb:
da:18:68:45:0e:bf:91:5b:a4:06:5b:40:07:58:f6:
27:04:3e:09:08:ea:cf:9d:b5:6a:44:cd:23:2b:d2:
85:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BC:49:9E:A8:A3:68:EC:BB:16:E2:80:60:B1:DA:BD:07:49:25:CB
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/kbxJnqijaOy7FuKAYLHavQdJJcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.248.0/22
91.197.36.0/22
109.196.168.0/22
185.245.245.0/24
185.249.0.0/22
192.144.24.0/22
193.39.88.0/22
193.228.12.0/22
194.76.32.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:55:25:6e:96:15:8e:3e:5c:7b:e1:98:e6:b4:0d:8b:b0:d5:
b2:7b:c3:4a:0c:c3:43:9d:5a:95:df:10:73:a4:47:68:11:98:
1b:93:5c:eb:7d:99:37:68:f4:95:3d:fe:1f:2c:9a:9b:d5:ec:
6b:5f:6e:6c:91:5d:c5:77:71:80:12:9f:79:46:fc:35:7c:59:
5d:82:bf:00:b0:66:78:d4:6c:97:ba:62:9b:f2:46:79:af:06:
99:da:27:95:cf:18:19:5f:c0:aa:00:06:97:a9:ef:b6:f9:76:
39:df:d0:25:d5:16:d8:e0:1b:af:ae:23:d5:53:00:ae:6a:ea:
57:96:be:74:74:cb:0b:0d:c9:40:50:ea:66:f5:f5:07:c8:93:
54:86:ed:85:c3:b0:a2:41:6a:f7:3a:a7:4d:2e:36:b3:82:9d:
b5:a3:89:ce:2b:76:59:2d:e6:4d:32:78:9a:80:51:12:44:eb:
e4:e0:2c:50:42:2f:62:92:e0:01:69:90:3a:9e:67:3b:8a:0f:
7c:d3:82:d6:87:73:d6:09:1d:6d:50:b7:bb:10:e3:d9:c8:e2:
cf:c8:03:22:9a:1f:57:0a:7a:db:64:3e:2d:9d:8b:15:0f:d1:
0c:17:a1:a3:98:ea:8e:db:33:af:eb:13:3d:d5:33:cb:c8:05:
77:88:34:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:40:25 2024 by rpki-client on console-ams.rpki-client.org