Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/KBQsiLG0J99vmWibFu-ZXsmVONQ.roa
File: KBQsiLG0J99vmWibFu-ZXsmVONQ.roa (raw, json)
Hash identifier: GmSorM8AjM4k4rnWj2qc4AK7pjLYydm7YOj4wJ6UTsM=
Subject key identifier: 28:14:2C:88:B1:B4:27:DF:6F:99:68:9B:16:EF:99:5E:C9:95:38:D4
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 018CC7956BABB82182CE62C6345F91FA8321
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/KBQsiLG0J99vmWibFu-ZXsmVONQ.roa
Signing time: Tue 02 Jan 2024 00:31:47 +0000
ROA not before: Tue 02 Jan 2024 00:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 109.234.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:6b:ab:b8:21:82:ce:62:c6:34:5f:91:fa:83:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jan 2 00:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28142c88b1b427df6f99689b16ef995ec99538d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:bb:dd:0e:40:81:c5:cc:6c:5d:ee:2d:7d:
5b:f5:ec:4b:39:36:d0:ff:8e:58:21:98:84:3d:d5:
67:87:a0:7a:de:98:f3:29:1e:6b:78:4f:8c:cd:48:
c8:ef:3e:a8:50:67:9c:7a:45:19:c1:3e:9c:a2:df:
46:bf:da:3b:81:b9:ae:19:3d:d8:d0:81:a8:44:ee:
51:76:65:b3:17:7d:be:96:95:3f:47:da:bc:67:cc:
5f:c7:c9:65:ac:90:19:c4:cc:72:ed:60:0c:1e:88:
38:18:9d:46:27:6b:98:8b:dc:ce:51:55:fa:10:ce:
e1:03:c3:af:54:5c:4e:b0:27:34:3a:7d:02:bb:3a:
67:99:d6:f1:25:ca:3a:86:a5:41:29:25:47:4b:98:
28:6d:14:30:64:4e:4c:63:bb:c0:26:44:af:5b:63:
82:55:45:73:c4:1e:c3:34:eb:a1:37:44:b2:43:9b:
34:d6:ec:29:d1:a3:76:43:c7:c2:f1:56:3e:82:c7:
fc:42:e9:23:a7:8b:75:b8:24:77:4d:2c:bb:7d:7f:
85:74:d8:0d:27:81:b5:42:e8:5e:a8:3d:68:37:4c:
3d:62:1e:9c:32:71:6e:1d:43:7e:aa:ac:6b:1a:bc:
8f:88:76:e5:2e:a7:34:d3:a7:bb:b7:2c:0d:3c:2e:
4f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:14:2C:88:B1:B4:27:DF:6F:99:68:9B:16:EF:99:5E:C9:95:38:D4
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/KBQsiLG0J99vmWibFu-ZXsmVONQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.75.0/24
Signature Algorithm: sha256WithRSAEncryption
06:bc:9f:75:cb:9c:ea:98:0d:fa:06:77:fa:9f:ba:e3:07:35:
e0:fb:b3:ef:b2:e6:56:88:15:fd:3a:03:25:3c:bf:35:45:da:
8a:6c:07:46:70:ad:67:cf:02:82:4a:9b:b7:01:a4:49:9b:8e:
7e:f6:10:aa:12:fa:cf:52:a2:e3:3f:84:a4:c1:1c:b9:41:df:
05:e7:b6:00:20:25:5c:23:27:bf:5a:95:41:2f:ea:cd:22:8f:
71:8c:87:4d:03:55:29:bd:66:96:cb:95:d7:fc:f6:82:21:b5:
a8:cc:98:8a:f0:b5:7b:5a:9f:94:c5:5c:db:e1:80:ea:95:f6:
ba:e2:c7:ae:04:77:e3:4d:1e:4e:1c:8c:49:d6:42:b0:f8:f8:
5f:cc:cb:d7:a4:b5:17:63:4f:5a:7c:ca:fa:90:17:39:dc:77:
d4:bd:a3:dc:60:b6:75:c2:d1:02:ec:60:70:8c:7a:99:18:48:
69:ed:93:b8:e1:00:4a:bb:4f:4b:11:cf:de:9d:ca:47:83:64:
ee:a6:b9:08:87:7e:b7:51:de:ce:61:39:96:19:9d:d5:5c:bf:
e6:03:0a:2b:c2:f1:0a:01:7c:f6:ad:ac:04:06:4f:d2:78:ef:
da:34:91:d7:d9:57:ea:58:cc:da:af:91:d8:8f:73:28:f5:00:
8c:91:db:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlWuruCGCzmLGNF+R+oMhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2
OTQ1NDEwHhcNMjQwMTAyMDAzMTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODE0MmM4OGIxYjQyN2RmNmY5OTY4OWIxNmVmOTk1ZWM5OTUzOGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf673Q5AgcXMbF3uLX1b9exLOTbQ
/45YIZiEPdVnh6B63pjzKR5reE+MzUjI7z6oUGecekUZwT6cot9Gv9o7gbmuGT3Y
0IGoRO5RdmWzF32+lpU/R9q8Z8xfx8llrJAZxMxy7WAMHog4GJ1GJ2uYi9zOUVX6
EM7hA8OvVFxOsCc0On0CuzpnmdbxJco6hqVBKSVHS5gobRQwZE5MY7vAJkSvW2OC
VUVzxB7DNOuhN0SyQ5s01uwp0aN2Q8fC8VY+gsf8Qukjp4t1uCR3TSy7fX+FdNgN
J4G1QuheqD1oN0w9Yh6cMnFuHUN+qqxrGryPiHblLqc006e7tywNPC5PhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCgULIixtCffb5lomxbvmV7JlTjUMB8GA1UdIwQY
MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt
MTkyY2JkMDhkYjUxLzEvS0JRc2lMRzBKOTl2bVdpYkZ1LVpYc21WT05RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx
LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbepLMA0G
CSqGSIb3DQEBCwUAA4IBAQAGvJ91y5zqmA36Bnf6n7rjBzXg+7PvsuZWiBX9OgMl
PL81RdqKbAdGcK1nzwKCSpu3AaRJm45+9hCqEvrPUqLjP4SkwRy5Qd8F57YAICVc
Iye/WpVBL+rNIo9xjIdNA1UpvWaWy5XX/PaCIbWozJiK8LV7Wp+UxVzb4YDqlfa6
4seuBHfjTR5OHIxJ1kKw+PhfzMvXpLUXY09afMr6kBc53HfUvaPcYLZ1wtEC7GBw
jHqZGEhp7ZO44QBKu09LEc/encpHg2TuprkIh363Ud7OYTmWGZ3VXL/mAworwvEK
AXz2rawEBk/SeO/aNJHX2VfqWMzar5HYj3Mo9QCMkdvB
-----END CERTIFICATE-----
Generated at Wed May 8 18:56:59 2024 by rpki-client on console-ams.rpki-client.org