Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kAKreKnlqtTrhbjezbu8dOomBh8.roa
File: kAKreKnlqtTrhbjezbu8dOomBh8.roa (raw, json)
Hash identifier: OnWbG0BeYDbTjPETaas+iT/GG5+uFJfXysXmxybJxTQ=
Subject key identifier: 90:02:AB:78:A9:E5:AA:D4:EB:85:B8:DE:CD:BB:BC:74:EA:26:06:1F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018F4DFD4E01F539273C7907BBDDAB273DF9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kAKreKnlqtTrhbjezbu8dOomBh8.roa
Signing time: Mon 06 May 2024 12:59:56 +0000
ROA not before: Mon 06 May 2024 12:59:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215015
IP address blocks: 185.223.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:fd:4e:01:f5:39:27:3c:79:07:bb:dd:ab:27:3d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 6 12:59:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9002ab78a9e5aad4eb85b8decdbbbc74ea26061f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8e:31:c6:fa:20:86:0f:86:a2:4b:bf:91:54:
39:db:1f:4c:2a:f9:b2:2c:20:7c:32:da:96:07:8e:
25:5e:a3:5a:91:93:46:d6:17:c2:d9:7a:f8:79:01:
bc:d6:3f:e4:08:f8:c3:5f:72:f5:5e:63:3a:78:82:
a0:a6:43:65:40:97:22:07:0d:3f:dd:13:3c:94:75:
bb:e5:fe:fa:76:52:a8:28:83:7a:5f:6c:45:27:22:
fe:fd:9a:24:58:2e:7f:8d:d8:db:a4:3b:dd:dd:12:
c8:25:de:78:90:2e:bb:24:fb:6a:c6:1d:06:70:a1:
d6:b7:a2:7c:3d:6b:47:55:3f:bb:b7:3b:21:0b:fd:
8a:fa:0d:64:1b:a3:3f:d9:d7:26:44:80:e0:aa:f0:
81:af:78:3d:f6:1b:92:48:71:c6:1e:94:60:03:27:
dd:c7:83:0e:97:e4:b3:e7:36:bd:76:37:22:54:a0:
38:76:2b:29:19:54:4a:39:ad:be:53:21:28:a4:1f:
f8:69:8f:50:23:08:1b:25:1e:f9:16:d0:97:95:b3:
5c:55:88:68:83:88:66:68:f5:bd:6c:10:5a:4f:ab:
b4:1c:5d:a8:f7:7f:1c:2f:5d:32:7e:b2:b3:7a:35:
07:e3:ec:2b:f3:88:00:13:63:fb:4a:e9:74:d6:81:
e4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:02:AB:78:A9:E5:AA:D4:EB:85:B8:DE:CD:BB:BC:74:EA:26:06:1F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kAKreKnlqtTrhbjezbu8dOomBh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.82.0/24
Signature Algorithm: sha256WithRSAEncryption
42:31:9d:94:b3:83:96:8b:49:d8:8d:69:6a:4c:ad:c6:6d:5d:
9c:9c:2e:c5:ec:aa:fd:4b:95:c9:fb:ae:b1:44:59:ac:fa:da:
55:88:b9:37:2d:8b:0d:4d:1b:6a:a3:44:c4:ca:97:95:f1:c6:
a2:f5:1e:ff:e0:60:1f:3d:20:49:90:1e:cb:66:23:38:cd:ad:
19:e4:65:a5:b6:14:cf:7c:2f:ec:d1:e8:62:2a:5c:2f:bd:22:
50:0b:46:a6:44:d7:5b:3a:aa:2e:2a:15:ee:72:c9:1e:f0:03:
ad:2b:dd:7b:2d:8b:40:a4:6b:38:6b:35:36:4c:ad:81:70:5a:
3e:ca:2d:36:40:23:20:58:44:64:8c:f6:db:3d:7f:cd:8d:8d:
74:92:3b:65:43:92:80:5f:4f:37:64:06:c3:c1:f1:8f:59:7b:
58:a9:c3:ae:a3:ec:31:85:70:50:15:75:63:98:53:a6:44:5c:
63:dc:5b:2d:d3:5b:9c:81:83:e1:a8:e8:98:16:8b:ca:bf:1e:
46:6a:f8:83:13:bd:07:af:1c:a6:40:b4:7c:0c:5a:24:62:b8:
f9:c2:33:07:22:3b:0b:15:bc:3f:fc:89:15:c1:44:05:32:90:
ed:3f:8c:58:7a:65:52:b1:02:ff:0a:2e:84:9b:41:a5:d0:ba:
96:21:a4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:27:31 2024 by rpki-client on console-ams.rpki-client.org