Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/KXYMW1XYlc4MHcqpwlP3pL9MhSk.roa
File: KXYMW1XYlc4MHcqpwlP3pL9MhSk.roa (raw, json)
Hash identifier: PPeGx8cRht2mJF8A6RQRcSyTUzT+L6w2TGVntVt0XLM=
Subject key identifier: 29:76:0C:5B:55:D8:95:CE:0C:1D:CA:A9:C2:53:F7:A4:BF:4C:85:29
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 018E08001A649F7E8A593C30869EF51ADC69
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/KXYMW1XYlc4MHcqpwlP3pL9MhSk.roa
Signing time: Mon 04 Mar 2024 05:46:48 +0000
ROA not before: Mon 04 Mar 2024 05:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21500
IP address blocks: 62.106.68.0/24 maxlen: 24
81.17.129.0/24 maxlen: 24
81.17.130.0/24 maxlen: 24
81.17.130.194/32 maxlen: 32
81.17.130.198/32 maxlen: 32
81.17.133.0/24 maxlen: 24
81.17.134.0/24 maxlen: 24
81.17.135.0/24 maxlen: 24
81.17.136.0/24 maxlen: 24
81.17.140.0/24 maxlen: 24
81.17.142.0/24 maxlen: 24
85.90.200.0/22 maxlen: 22
92.118.136.0/22 maxlen: 22
92.118.224.0/24 maxlen: 24
92.118.225.0/24 maxlen: 24
92.118.226.0/24 maxlen: 24
195.69.184.0/22 maxlen: 24
195.234.220.0/22 maxlen: 22
2a06:6200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:08:00:1a:64:9f:7e:8a:59:3c:30:86:9e:f5:1a:dc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Mar 4 05:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29760c5b55d895ce0c1dcaa9c253f7a4bf4c8529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:a3:d0:8b:20:90:70:f4:47:b4:16:8a:59:
de:c2:74:a5:85:f8:d2:d2:04:f4:18:a8:9a:48:ae:
ac:75:02:88:0c:d9:b3:8a:ac:5a:4e:9d:60:6d:61:
ac:e2:02:2e:64:fe:c0:7d:e7:fc:84:d7:01:79:de:
73:fc:b8:ff:9a:e6:92:9d:41:1e:3a:f5:b1:4e:dc:
87:c9:3e:a5:f8:4b:77:42:af:30:a2:50:72:9e:77:
53:23:d7:bf:47:4c:bf:a7:04:31:c4:ef:0b:e1:cd:
af:4e:1d:f7:dc:e2:24:53:dc:46:59:15:97:62:91:
42:08:54:58:fb:f8:71:b2:96:de:68:6c:c9:d3:32:
f5:67:37:39:3e:ae:9e:08:36:7a:02:67:63:f3:8b:
3a:ea:fa:28:5a:b2:e1:7a:a3:ce:54:9c:2b:1d:50:
23:05:45:fe:c9:62:0a:c0:a2:a1:cc:ab:ac:bf:0c:
90:80:e7:af:8d:aa:4a:95:e0:a4:75:d3:93:2b:9d:
a9:a7:1f:32:d0:7a:00:02:7d:61:34:1d:c8:72:53:
35:22:13:24:93:f7:e9:8e:e8:cf:a1:6e:c2:ed:3c:
b9:d9:2a:b6:1f:34:aa:40:4d:f9:91:7b:d3:4a:10:
de:9b:1a:fa:e5:e3:e2:6d:b0:4a:30:7e:a6:10:01:
8d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:76:0C:5B:55:D8:95:CE:0C:1D:CA:A9:C2:53:F7:A4:BF:4C:85:29
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/KXYMW1XYlc4MHcqpwlP3pL9MhSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.68.0/24
81.17.129.0-81.17.130.255
81.17.133.0-81.17.136.255
81.17.140.0/24
81.17.142.0/24
85.90.200.0/22
92.118.136.0/22
92.118.224.0-92.118.226.255
195.69.184.0/22
195.234.220.0/22
IPv6:
2a06:6200::/29
Signature Algorithm: sha256WithRSAEncryption
42:f7:51:3d:0b:55:99:bb:f2:d3:7a:ff:73:d5:73:79:07:ad:
fa:d2:5b:59:c6:e3:0d:7f:a3:d8:f3:7c:ca:56:7e:f1:7e:a0:
ef:48:d9:d7:ca:e2:fc:5d:7a:3f:25:a9:f9:f9:59:70:a8:c3:
00:28:8d:1c:e2:4a:51:7a:85:1e:86:63:13:50:3e:c6:02:16:
15:9c:92:be:4a:3b:60:29:4c:13:94:78:89:2a:a9:e5:4b:25:
80:3f:ae:6e:fe:c2:d1:97:89:43:19:a2:7f:fe:bd:40:33:7e:
91:e7:10:ca:39:c8:61:35:db:4c:ae:a5:8d:71:8f:94:5f:c1:
6d:b1:09:b9:de:97:30:39:8f:d9:c5:19:2b:bc:a0:86:6d:3a:
9e:44:ed:2c:d1:2e:14:ea:03:27:da:5f:6a:6f:ad:a5:2f:f4:
d1:b3:3e:3f:df:e3:2b:81:93:54:37:1a:ef:b8:e5:ec:b3:3c:
27:8e:ba:8a:65:0c:5e:ad:4e:05:c3:93:5f:24:eb:2e:5c:7e:
b2:6e:a2:2b:ef:0d:76:9d:b4:91:44:f8:b0:ee:7c:a1:19:10:
a3:39:0f:fb:4b:52:1e:18:06:de:a0:ea:50:1e:03:0d:ec:68:
aa:29:20:e4:a2:27:25:a3:85:6d:4a:bd:1d:4b:d3:12:1e:4d:
af:34:e3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:14:52 2024 by rpki-client on console-ams.rpki-client.org