Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f559a7-442a-4e4e-99e5-7638f09a9364/1/kckB_sG5QMni2PqyuWk4-X5iUgw.roa
File: kckB_sG5QMni2PqyuWk4-X5iUgw.roa (raw, json)
Hash identifier: +QCGx3fUun2bt3pzmzvpO0ifarhjOe+lJUGnTnOEFO0=
Subject key identifier: 91:C9:01:FE:C1:B9:40:C9:E2:D8:FA:B2:B9:69:38:F9:7E:62:52:0C
Certificate issuer: /CN=c03f604e98f465872795f2aa4804d7a2f80ab4fd
Certificate serial: 018D15ABC130E22C0F1C0FECCCAA8992F4F9
Authority key identifier: C0:3F:60:4E:98:F4:65:87:27:95:F2:AA:48:04:D7:A2:F8:0A:B4:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wD9gTpj0ZYcnlfKqSATXovgKtP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f559a7-442a-4e4e-99e5-7638f09a9364/1/kckB_sG5QMni2PqyuWk4-X5iUgw.roa
Signing time: Wed 17 Jan 2024 04:26:34 +0000
ROA not before: Wed 17 Jan 2024 04:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202766
IP address blocks: 185.198.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f559a7-442a-4e4e-99e5-7638f09a9364/1/wD9gTpj0ZYcnlfKqSATXovgKtP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/f559a7-442a-4e4e-99e5-7638f09a9364/1/wD9gTpj0ZYcnlfKqSATXovgKtP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wD9gTpj0ZYcnlfKqSATXovgKtP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:15:ab:c1:30:e2:2c:0f:1c:0f:ec:cc:aa:89:92:f4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03f604e98f465872795f2aa4804d7a2f80ab4fd
Validity
Not Before: Jan 17 04:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91c901fec1b940c9e2d8fab2b96938f97e62520c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:44:a3:81:ab:14:9f:7b:ee:60:96:a5:53:
80:a6:62:9c:a1:e7:6c:37:ff:b3:d5:8d:01:45:ea:
38:4a:ac:93:b5:91:a8:b4:fc:b9:a7:43:22:6f:73:
1a:1b:0c:e6:4d:59:87:77:5b:62:18:34:ec:3d:37:
1c:12:9b:72:76:d2:88:4b:46:49:29:8d:3a:7a:70:
cb:d6:b1:2f:b8:d6:cd:7d:d1:ce:79:c2:56:52:57:
52:09:86:51:92:af:dc:55:6e:5e:1a:50:29:9b:ca:
e7:63:9c:e1:81:67:bd:96:72:e3:cc:5a:91:ad:a2:
12:c6:b9:14:f9:2e:97:62:b0:97:08:4e:f1:8c:ff:
27:d1:43:38:6e:37:76:ef:70:87:d8:26:0f:9a:df:
e3:c9:71:54:23:27:fc:8c:d8:30:29:45:b7:d6:43:
8d:3e:c8:75:ec:db:9f:c5:69:fa:b5:e7:24:f9:17:
4c:9e:b3:83:60:93:96:a3:bc:b5:6e:51:f8:66:f3:
da:58:ca:37:ca:25:fd:6d:02:88:56:05:f7:77:c5:
82:ce:6d:1d:bf:9d:c6:af:47:7f:38:36:d0:1f:d9:
bb:2f:4b:53:45:28:77:4c:f5:aa:2b:87:f0:1d:d7:
a3:e2:3a:43:7d:9d:32:cd:3d:c0:c0:ef:ce:21:cd:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C9:01:FE:C1:B9:40:C9:E2:D8:FA:B2:B9:69:38:F9:7E:62:52:0C
X509v3 Authority Key Identifier:
keyid:C0:3F:60:4E:98:F4:65:87:27:95:F2:AA:48:04:D7:A2:F8:0A:B4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wD9gTpj0ZYcnlfKqSATXovgKtP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f559a7-442a-4e4e-99e5-7638f09a9364/1/kckB_sG5QMni2PqyuWk4-X5iUgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f559a7-442a-4e4e-99e5-7638f09a9364/1/wD9gTpj0ZYcnlfKqSATXovgKtP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.180.0/22
Signature Algorithm: sha256WithRSAEncryption
60:21:61:da:9e:3a:4c:a2:2c:20:6b:d8:9a:9e:fb:42:d0:e8:
67:ff:0e:9f:c0:cf:00:e6:1a:38:4e:9f:36:b6:f9:0e:6a:84:
73:a1:98:03:1b:12:00:79:14:1d:d0:df:a5:ae:61:97:40:76:
6c:52:db:6c:32:d9:1a:ce:3e:c1:de:94:fc:02:5b:10:a6:0e:
08:e3:05:26:57:4b:bd:ac:5a:e4:59:df:81:d2:45:50:d9:fd:
ea:88:96:4f:06:7e:9a:0e:4e:3e:55:f2:ac:3d:3a:07:a3:fa:
d1:b4:99:3e:ef:52:88:78:89:4e:a2:c9:2a:a1:6f:95:90:85:
ca:64:49:c8:33:3b:81:17:71:e4:a6:f2:7d:c3:22:df:2a:74:
49:fc:b2:5c:dd:bb:05:91:9c:36:90:6f:9e:29:9f:c9:bb:6f:
cd:f5:0c:bf:13:b7:da:80:15:38:2e:9a:29:4d:33:ea:85:d5:
dd:63:7f:bb:78:86:31:07:ce:e3:66:8d:60:64:f9:55:ac:6a:
7d:7b:90:ea:b2:48:d9:b9:76:d8:86:c9:f7:e3:69:2b:3c:5d:
4a:7c:43:9e:75:5d:0a:ef:68:22:b1:e9:eb:9f:1d:b1:b4:9c:
bd:fc:f7:87:17:32:06:a5:c5:2b:69:57:ae:26:9c:f5:44:a1:
9c:32:35:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:22:19 2024 by rpki-client on console-fra.rpki-client.org