Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/KPfcL3irOKeFnGKTIjqaXWtdJTU.roa
File: KPfcL3irOKeFnGKTIjqaXWtdJTU.roa (raw, json)
Hash identifier: 7sW3Ga16GFJniEHMt07dxCSlWmJVaB2HF6PzWi2CMu4=
Subject key identifier: 28:F7:DC:2F:78:AB:38:A7:85:9C:62:93:22:3A:9A:5D:6B:5D:25:35
Certificate issuer: /CN=1a14445259732aa6736c248234465947fc2374d0
Certificate serial: 019421B1C54336ABB46740ED4C66153629AD
Authority key identifier: 1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/KPfcL3irOKeFnGKTIjqaXWtdJTU.roa
Signing time: Wed 01 Jan 2025 11:48:06 +0000
ROA not before: Wed 01 Jan 2025 11:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134176
IP address blocks: 91.236.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c5:43:36:ab:b4:67:40:ed:4c:66:15:36:29:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14445259732aa6736c248234465947fc2374d0
Validity
Not Before: Jan 1 11:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28f7dc2f78ab38a7859c6293223a9a5d6b5d2535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:03:7c:cd:cf:6b:61:f6:7e:22:b9:2d:5e:
ec:98:6d:3e:b4:99:41:56:6e:f1:92:a2:a1:98:75:
ca:5b:69:e5:3d:47:37:bf:31:35:c9:88:2c:c4:65:
6f:e6:46:fa:c4:b5:17:3b:7c:9a:20:1e:95:69:08:
ad:62:f9:8a:a1:48:92:da:07:51:78:5c:e9:56:40:
f3:dd:73:8e:14:cf:d1:51:e1:ef:fb:25:0e:a5:7d:
6d:4b:5d:b4:02:c8:40:dc:ab:b3:a3:ca:88:93:17:
ea:8c:5b:6e:27:84:e4:65:6d:0f:3c:21:4f:0d:9c:
91:e0:c3:cb:8f:90:5a:c4:25:8e:07:d0:36:98:09:
3c:9b:0a:4f:03:ff:56:99:87:3a:85:03:f3:bb:d5:
ec:df:55:9b:80:bf:0e:a3:16:42:25:c7:68:88:c5:
dd:a1:22:35:64:06:fd:31:5f:72:64:46:91:36:d6:
fe:85:9d:ba:b0:72:27:27:e0:9e:38:b1:6c:d0:87:
5c:0a:e4:f5:04:bb:3f:b7:dd:ad:52:0f:83:4e:a6:
1d:8f:e8:9b:6e:8e:40:f8:4c:d9:88:f0:d3:b6:2b:
ee:b3:6f:7b:35:2f:90:f9:ed:53:66:7e:f3:16:da:
cf:c1:3d:1c:89:e6:56:d1:c9:ae:4f:c4:b1:23:48:
29:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F7:DC:2F:78:AB:38:A7:85:9C:62:93:22:3A:9A:5D:6B:5D:25:35
X509v3 Authority Key Identifier:
keyid:1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/KPfcL3irOKeFnGKTIjqaXWtdJTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.118.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:b5:69:ed:40:06:91:44:07:c1:40:20:3c:0f:b7:34:dd:6f:
2b:5e:61:62:2e:c2:be:82:da:87:10:84:c7:29:4f:c9:07:00:
7c:e2:3f:18:9e:83:b7:96:6c:4f:68:7b:d2:6c:e0:f4:34:87:
09:30:6f:ee:4d:d6:65:48:32:48:a9:eb:3f:d0:0e:88:b7:8d:
78:e5:c6:0e:28:60:81:6b:43:a5:b9:09:98:e5:4f:03:35:6c:
2e:42:1a:04:1f:75:01:fa:21:a2:c7:5a:45:b9:7f:dd:e9:20:
e6:ba:70:e1:af:eb:d3:79:e3:92:41:79:d3:d8:d0:68:9a:ae:
28:64:02:75:2f:72:91:de:0b:85:48:36:0a:48:a7:08:99:75:
22:69:e0:53:64:81:57:37:d5:ca:1e:63:35:47:e4:91:82:e0:
cc:6f:c3:77:67:83:ef:a2:b3:17:1e:78:d5:3a:60:75:9d:06:
16:bd:bc:32:52:73:dd:86:80:81:f2:99:1e:80:02:68:5b:6f:
fd:ae:f3:ff:0b:5b:a8:1b:a9:1a:c4:bd:c6:b4:c4:fb:f4:7f:
c5:7a:60:0b:0e:d6:be:9c:75:de:4a:bb:79:a8:41:79:b3:f8:
d6:f1:9e:5e:d5:b2:07:e1:c0:94:d5:9e:9a:13:31:5b:bb:ad:
ff:ab:6d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:57:50 2025 by rpki-client