Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/K3ID6v4S-g-aqqTChjl4UqqN8Cg.roa
File: K3ID6v4S-g-aqqTChjl4UqqN8Cg.roa (raw, json)
Hash identifier: 1/x8LLYWdXDZx2tlUCr2LHpT6CBXciyKAWLTEJ73pGk=
Subject key identifier: 2B:72:03:EA:FE:12:FA:0F:9A:AA:A4:C2:86:39:78:52:AA:8D:F0:28
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2F672D60C8AC8530DEB4BAF00F4AC
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/K3ID6v4S-g-aqqTChjl4UqqN8Cg.roa
Signing time: Thu 02 Jan 2025 01:48:15 +0000
ROA not before: Thu 02 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60324
IP address blocks: 159.148.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:f6:72:d6:0c:8a:c8:53:0d:eb:4b:af:00:f4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b7203eafe12fa0f9aaaa4c286397852aa8df028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:54:16:18:36:53:66:ab:b9:31:b0:2d:1f:
b0:72:30:b3:84:90:e2:e7:b4:4b:6d:20:fd:84:1b:
43:65:02:8a:0a:85:37:94:5a:22:48:f0:a2:f8:b3:
c3:f3:ba:c4:94:12:4c:9e:5c:28:11:f1:e8:0a:71:
ee:bd:4c:b5:b6:3b:bc:e3:76:4e:da:3a:a2:19:dc:
b1:07:2c:0d:ae:de:2d:d0:f5:ff:3d:c3:aa:00:77:
84:82:69:fd:e6:c2:b1:47:8e:36:22:da:5e:9f:47:
aa:c1:fc:c4:62:f0:35:63:4f:d7:ea:3f:fe:96:d4:
69:c4:96:c0:67:ee:ea:35:4f:dd:a9:3c:c9:0c:fa:
17:c6:0d:1f:c9:80:50:1d:b8:8f:01:43:f5:be:08:
9a:ba:27:f5:fe:93:9f:10:e3:40:de:96:06:1e:3a:
29:8b:91:31:57:67:98:82:67:91:95:33:8c:d6:67:
85:12:8d:4d:a1:4b:c7:4d:76:48:ce:40:6d:01:ee:
fb:31:78:6c:25:e7:41:40:d8:72:33:cf:16:6d:d2:
1a:50:2d:7d:2e:cc:6f:a8:5c:12:e6:24:3d:18:99:
ae:7f:83:f0:9e:60:bc:cd:3e:11:b9:ea:b6:17:78:
23:aa:3b:3f:74:64:e1:96:15:3d:f1:61:44:b0:86:
76:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:72:03:EA:FE:12:FA:0F:9A:AA:A4:C2:86:39:78:52:AA:8D:F0:28
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/K3ID6v4S-g-aqqTChjl4UqqN8Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.191.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8b:92:38:95:f1:64:c8:d3:70:56:fb:cf:b0:a1:bc:a3:6b:
65:48:c3:22:82:74:e5:91:e2:d1:82:21:e9:6f:e4:4f:e4:7a:
18:67:40:86:55:bc:a1:7c:c8:1d:d5:42:f0:c3:26:51:d8:64:
f5:9e:c9:ae:47:e6:2a:f0:3a:d7:88:29:2a:14:b2:02:7e:e0:
73:d9:1f:28:84:18:86:30:f0:57:11:60:55:11:86:02:db:90:
6c:2b:14:e6:06:ff:b7:d8:f7:1d:f3:d1:75:03:a4:41:ee:6d:
6e:ff:84:68:2a:91:09:da:ef:07:6e:a9:c4:b6:c1:ed:a1:78:
11:a9:5f:f7:cb:61:0c:14:f0:44:03:81:fa:f6:0c:03:53:a3:
5b:7d:fa:2a:a6:74:9c:b9:ba:ee:c8:c9:f1:9f:11:81:53:34:
94:7f:f9:dc:bf:a2:dd:d0:c7:a1:7d:7f:2e:3b:f0:74:96:d7:
9a:83:cb:48:b1:c8:c5:eb:a3:84:46:f1:d7:6c:f9:59:e1:01:
6d:8f:f5:0d:b0:29:44:05:fa:d6:26:b7:1c:89:29:d9:04:ac:
93:a5:e5:58:06:67:62:7d:5b:e7:b7:35:08:33:21:c3:a2:ce:
41:8a:0b:9b:26:3e:e4:00:75:57:98:c0:1f:d0:ad:3a:d9:7c:
79:05:51:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:39 2025 by rpki-client