Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/KxrfeqpcRL18J221wmTKdBQisD8.roa
File: KxrfeqpcRL18J221wmTKdBQisD8.roa (raw, json)
Hash identifier: jgUXHh298rZSAu8MRkE4TQiJriRCi1dWel/BrugmFK4=
Subject key identifier: 2B:1A:DF:7A:AA:5C:44:BD:7C:27:6D:B5:C2:64:CA:74:14:22:B0:3F
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018ECC7C83304D67F610CB0C70AFFFACEB50
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/KxrfeqpcRL18J221wmTKdBQisD8.roa
Signing time: Thu 11 Apr 2024 09:28:15 +0000
ROA not before: Thu 11 Apr 2024 09:28:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 194.152.128.0/24 maxlen: 24
194.152.129.0/24 maxlen: 24
194.152.132.0/24 maxlen: 24
194.152.141.0/24 maxlen: 24
194.152.142.0/24 maxlen: 24
194.152.154.0/24 maxlen: 24
194.152.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:7c:83:30:4d:67:f6:10:cb:0c:70:af:ff:ac:eb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Apr 11 09:28:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b1adf7aaa5c44bd7c276db5c264ca741422b03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3c:43:1a:b2:f0:1b:c8:e0:e7:e6:f5:ae:6d:
45:cf:fd:1f:0b:64:82:98:eb:a0:b7:b1:5f:1b:fe:
e9:12:01:eb:67:ca:78:dc:03:47:6a:9e:9f:7e:15:
51:9f:6b:31:b0:b1:a5:2c:65:f9:34:31:34:15:48:
89:9e:43:2b:f6:40:b4:17:66:ef:d5:e0:93:2b:75:
87:21:1c:f6:a8:fe:a1:cf:82:75:4d:b8:4d:2c:d5:
81:a3:10:47:00:d9:35:eb:55:02:f1:88:58:02:fb:
46:d6:ca:50:6f:72:95:ce:49:c5:3b:43:3a:2c:d9:
b1:a4:b1:33:b3:4d:70:fb:44:22:ef:3f:e6:bc:f1:
09:1b:46:47:de:4e:6c:4b:89:aa:49:e4:83:f5:60:
8d:7f:a3:f0:2a:cb:16:42:99:e3:87:e5:38:03:ec:
25:35:2d:e2:e9:2b:aa:b8:87:7f:ce:06:a3:1a:ff:
38:94:21:13:8f:27:42:f5:11:cb:39:23:59:c4:be:
13:0c:95:7d:1a:60:da:8d:7f:89:50:7a:e9:aa:97:
91:6a:93:ae:cb:44:cc:08:4b:83:d3:22:90:5d:25:
63:ad:c6:41:32:eb:b6:ba:12:c8:b5:4a:7a:46:f4:
ab:23:d8:d5:4b:0f:03:c5:f6:0e:75:ad:29:1b:d0:
a1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1A:DF:7A:AA:5C:44:BD:7C:27:6D:B5:C2:64:CA:74:14:22:B0:3F
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/KxrfeqpcRL18J221wmTKdBQisD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.128.0/23
194.152.132.0/24
194.152.141.0-194.152.142.255
194.152.154.0/23
Signature Algorithm: sha256WithRSAEncryption
57:f0:01:ca:25:5e:ad:c7:b8:b3:4f:db:05:cb:22:0f:a8:d5:
0b:58:30:27:70:03:31:03:7f:ab:fc:f9:6a:0a:6d:be:1c:44:
76:2d:91:43:b2:86:f4:ff:7b:7a:a8:ae:0c:35:43:47:02:68:
97:da:cb:d8:70:07:a3:ae:a5:9d:c1:2f:be:50:e6:35:a7:f1:
b6:82:39:f6:b4:5e:5f:e3:89:eb:06:83:63:d0:04:16:e9:02:
04:0a:5d:7b:c5:47:89:5c:8c:95:54:07:f7:a7:18:a4:08:de:
e7:98:78:5c:0b:58:80:e5:f9:ad:e9:7f:11:69:6a:06:89:25:
bc:61:ef:dc:cd:01:4e:0c:ad:30:46:43:08:f1:35:ef:3d:45:
ef:2e:62:7d:8e:e5:74:a2:00:5b:6f:5d:f9:9c:bc:88:18:5b:
93:2c:60:48:fb:2b:cf:69:a2:7f:37:fe:1d:2c:8b:32:cd:72:
4e:b1:20:cc:03:a2:45:21:33:10:ad:b4:8f:64:9d:6d:aa:2d:
db:62:df:ea:7a:59:16:f8:2a:1e:38:21:2b:f1:3f:f2:27:c7:
1f:c9:58:87:86:3c:56:12:9c:72:89:ce:d0:1e:53:97:73:05:
a1:f6:59:66:90:22:7a:39:70:25:d9:9b:5a:3d:9e:67:2c:8c:
47:64:ec:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 14:31:04 2024 by rpki-client on console-fra.rpki-client.org