Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/KGkcM2tjN5n9yajYvMHUBbWVUxM.roa
File: KGkcM2tjN5n9yajYvMHUBbWVUxM.roa (raw, json)
Hash identifier: vPgDlJRQD/W2eb2p4TFgfUsBYbbAN+9G2UDhuWR5ghE=
Subject key identifier: 28:69:1C:33:6B:63:37:99:FD:C9:A8:D8:BC:C1:D4:05:B5:95:53:13
Certificate issuer: /CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b
Certificate serial: 018F15CAF3911F12454F6C1F0A6CF9BBA7AA
Authority key identifier: CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/KGkcM2tjN5n9yajYvMHUBbWVUxM.roa
Signing time: Thu 25 Apr 2024 15:06:13 +0000
ROA not before: Thu 25 Apr 2024 15:06:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 91.197.164.0/22 maxlen: 24
94.247.232.0/21 maxlen: 24
185.215.136.0/22 maxlen: 24
185.241.96.0/22 maxlen: 24
213.205.96.0/19 maxlen: 24
217.71.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:15:ca:f3:91:1f:12:45:4f:6c:1f:0a:6c:f9:bb:a7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b
Validity
Not Before: Apr 25 15:06:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28691c336b633799fdc9a8d8bcc1d405b5955313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f3:12:72:e8:18:b6:b9:2e:e8:94:fc:46:79:
cd:4a:74:90:1a:6e:19:0b:f9:03:44:86:2d:94:cf:
1b:1f:d6:a7:4f:48:56:8b:1e:b5:8e:f6:36:e5:9f:
18:63:15:cb:31:63:3c:97:4c:66:1b:b1:c1:bf:be:
a1:b6:8f:74:d3:06:5c:b6:9c:48:d1:29:7a:f5:b1:
6a:97:b8:27:88:a4:b4:a3:03:d3:3c:fa:9c:dc:cb:
98:0b:ab:29:5c:57:ae:38:bb:b0:cc:63:36:ae:6d:
f0:b7:ae:35:be:39:48:a0:77:c4:46:c7:86:22:c1:
86:f6:a7:b8:27:84:ac:a8:6b:f1:54:0b:9c:51:22:
fb:74:e1:b2:c7:d3:66:51:b5:75:37:f0:50:51:2b:
d4:24:9b:95:c7:b1:cd:0d:ea:fe:ee:98:ac:8b:23:
ae:1a:3d:56:ce:0b:a7:23:96:6d:1f:c9:b0:87:96:
e5:cf:ac:d9:26:97:1d:60:d1:82:72:7c:28:4d:0a:
77:f8:5f:bb:f5:f8:9a:76:52:b2:68:23:32:53:1e:
47:26:bc:12:ba:5e:53:9f:e5:b2:dd:94:46:00:f2:
c8:37:73:54:1a:77:fa:b5:56:e5:4a:91:74:6b:3d:
ce:c1:3e:82:a6:c4:86:c9:1e:b2:b8:1d:38:50:1c:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:69:1C:33:6B:63:37:99:FD:C9:A8:D8:BC:C1:D4:05:B5:95:53:13
X509v3 Authority Key Identifier:
keyid:CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/KGkcM2tjN5n9yajYvMHUBbWVUxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.164.0/22
94.247.232.0/21
185.215.136.0/22
185.241.96.0/22
213.205.96.0/19
217.71.208.0/21
Signature Algorithm: sha256WithRSAEncryption
00:a6:c3:7e:a1:12:73:79:fe:e7:48:d0:9c:0b:9e:90:14:0c:
91:f0:f2:64:e1:cd:74:b2:4b:8f:b0:c3:c1:88:9f:41:55:c0:
32:dc:58:70:d4:38:98:b6:cd:26:3a:d9:74:12:73:01:6b:80:
d0:ac:b5:5e:27:23:74:1c:c7:2f:8b:af:2f:0e:e2:6e:9a:ec:
16:56:71:27:1f:a3:c5:67:04:b9:06:e5:87:2e:07:83:03:f8:
92:9c:2d:df:70:50:d5:46:92:f3:e0:f7:4f:77:43:07:1b:9b:
a1:2b:ce:71:d8:96:04:15:6d:83:01:38:0a:d2:22:f1:1e:81:
22:0c:1c:ea:c6:dd:8c:3d:15:2f:3c:04:e0:a7:b6:57:25:a1:
bc:77:39:f9:a9:0f:dd:73:88:1c:ea:37:95:33:b4:fc:52:43:
fe:18:a6:b6:46:63:45:66:b4:32:ca:2b:14:69:ab:2c:96:ac:
5e:02:b3:11:b5:1e:9b:b8:7b:43:49:fc:8b:a5:36:5f:40:89:
5f:ab:c3:32:2e:92:79:04:39:41:db:21:ef:10:b1:b6:45:b7:
d9:e4:a0:3f:fa:49:1f:42:37:dc:30:74:56:83:4f:5c:71:2f:
b9:c2:c0:61:d6:39:49:d2:af:66:ff:0f:f7:8d:72:dd:59:2a:
40:60:6e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:18:43 2024 by rpki-client on console-fra.rpki-client.org