Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/kcHQAFAlDX-U1q4xAZ0d-FeXki0.roa
File: kcHQAFAlDX-U1q4xAZ0d-FeXki0.roa (raw, json)
Hash identifier: hTxgHKQAQxkzbWjycdBZEPbVU4VleLxQNGak2+9CSzQ=
Subject key identifier: 91:C1:D0:00:50:25:0D:7F:94:D6:AE:31:01:9D:1D:F8:57:97:92:2D
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DE59EE37A47204A8E0DAC63DF83AA
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/kcHQAFAlDX-U1q4xAZ0d-FeXki0.roa
Signing time: Mon 01 Jan 2024 14:29:22 +0000
ROA not before: Mon 01 Jan 2024 14:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34552
IP address blocks: 80.75.80.0/20 maxlen: 20
78.109.112.0/20 maxlen: 20
78.109.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e5:9e:e3:7a:47:20:4a:8e:0d:ac:63:df:83:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91c1d00050250d7f94d6ae31019d1df85797922d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:66:d7:90:2f:f0:17:a1:90:c9:0a:cf:be:
12:34:2a:1b:b4:4f:2b:ad:86:b0:ea:43:70:27:99:
5f:2c:16:35:7c:b4:05:fa:0f:92:12:81:8c:c7:41:
14:5f:9a:ca:8a:a1:5a:c5:f4:93:61:ba:1f:bc:59:
e8:ff:b5:c8:19:87:b1:5a:e0:6b:5b:ae:b3:e2:94:
71:1b:37:7e:43:cf:c3:78:29:0f:69:80:f5:f5:8d:
d1:21:41:d2:0d:b8:c2:cb:4c:15:8b:43:3a:a8:d9:
80:dd:b1:90:6b:ef:a4:a5:8a:a0:d3:13:c3:27:19:
f8:95:68:49:14:b7:4e:0f:75:be:a1:b4:a2:15:0f:
6c:66:77:95:4b:94:8c:87:d6:a7:7b:3e:b2:e4:d6:
b0:32:a6:b7:72:98:6e:79:5d:f9:86:89:83:dc:0e:
5b:2e:3c:bc:1f:b1:9c:5b:0b:e8:7d:3b:3b:e4:8b:
5c:57:ea:1e:44:75:95:0a:50:6d:bd:3d:1f:53:a6:
d0:17:77:0d:54:6b:a4:f0:cd:84:25:a4:12:5c:c2:
95:b4:78:78:c8:9c:4b:a7:c0:aa:d3:46:1e:68:18:
2e:8c:c0:0d:54:5b:86:1d:05:6d:a8:b4:20:61:67:
5d:46:d9:8d:29:e6:eb:6c:a8:27:24:e8:3b:1e:b4:
f3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C1:D0:00:50:25:0D:7F:94:D6:AE:31:01:9D:1D:F8:57:97:92:2D
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/kcHQAFAlDX-U1q4xAZ0d-FeXki0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.112.0/20
80.75.80.0/20
Signature Algorithm: sha256WithRSAEncryption
85:97:8f:c1:e1:35:e5:87:7b:24:31:d3:18:a2:eb:f7:0f:d0:
ba:17:bd:ec:fa:b3:f8:87:4d:b3:1b:04:97:c0:ba:fa:44:5a:
5c:f5:97:e1:63:00:80:e1:4a:0a:47:ac:94:ec:81:1f:c3:98:
9a:2b:82:3b:2d:2f:fa:b4:1f:a0:97:e3:1a:21:6d:23:68:1d:
6e:27:2f:ba:c0:09:13:54:dd:9b:90:dc:f3:e7:a3:6f:e9:f1:
c0:ae:d5:4a:00:32:b3:2a:ea:1b:a8:a1:ed:c5:5d:d7:cc:4e:
7e:7f:45:35:73:6f:0a:99:80:0b:5c:ab:cc:3a:39:da:02:02:
4d:f4:88:e9:80:af:d0:ce:b9:2e:c0:c5:63:e4:73:e9:85:49:
c4:77:54:13:3b:42:a4:e1:81:c6:d6:6d:9e:3d:ad:4a:a2:6c:
cf:56:83:10:15:15:e2:68:8d:a1:27:f0:54:34:64:e1:25:49:
11:0b:bd:ee:05:4d:09:2f:d3:44:c2:7b:b8:c7:40:cf:68:ae:
f3:12:9a:1d:cd:b3:90:97:b7:5f:7d:05:95:51:7f:c6:bf:71:
69:51:5f:e5:b0:dd:cb:0e:24:3b:7f:41:ab:19:c4:f1:2b:a9:
ce:17:34:7b:94:a6:2c:16:a6:96:29:db:d4:96:5e:47:63:ab:
a3:09:42:53
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzFbeWe43pHIEqODaxj34OqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjQwMTAxMTQyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWMxZDAwMDUwMjUwZDdmOTRkNmFlMzEwMTlkMWRmODU3OTc5MjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdRm15Av8BehkMkKz74SNCobtE8r
rYaw6kNwJ5lfLBY1fLQF+g+SEoGMx0EUX5rKiqFaxfSTYbofvFno/7XIGYexWuBr
W66z4pRxGzd+Q8/DeCkPaYD19Y3RIUHSDbjCy0wVi0M6qNmA3bGQa++kpYqg0xPD
Jxn4lWhJFLdOD3W+obSiFQ9sZneVS5SMh9anez6y5NawMqa3cphueV35homD3A5b
Ljy8H7GcWwvofTs75ItcV+oeRHWVClBtvT0fU6bQF3cNVGuk8M2EJaQSXMKVtHh4
yJxLp8Cq00YeaBgujMANVFuGHQVtqLQgYWddRtmNKebrbKgnJOg7HrTz6wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJHB0ABQJQ1/lNauMQGdHfhXl5ItMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEva2NIUUFGQWxEWC1VMXE0eEFaMGQtRmVYa2kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQETm1wAwQE
UEtQMA0GCSqGSIb3DQEBCwUAA4IBAQCFl4/B4TXlh3skMdMYouv3D9C6F73s+rP4
h02zGwSXwLr6RFpc9ZfhYwCA4UoKR6yU7IEfw5iaK4I7LS/6tB+gl+MaIW0jaB1u
Jy+6wAkTVN2bkNzz56Nv6fHArtVKADKzKuobqKHtxV3XzE5+f0U1c28KmYALXKvM
OjnaAgJN9IjpgK/QzrkuwMVj5HPphUnEd1QTO0Kk4YHG1m2ePa1KomzPVoMQFRXi
aI2hJ/BUNGThJUkRC73uBU0JL9NEwnu4x0DPaK7zEpodzbOQl7dffQWVUX/Gv3Fp
UV/lsN3LDiQ7f0GrGcTxK6nOFzR7lKYsFqaWKdvUll5HY6ujCUJT
-----END CERTIFICATE-----
Generated at Sat Jun 8 10:13:49 2024 by rpki-client on console-fra.rpki-client.org