Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/ktAAidM8yuGSNSk_nWhJUqA9KEs.roa
File: ktAAidM8yuGSNSk_nWhJUqA9KEs.roa (raw, json)
Hash identifier: PukwcAGvFtblvafh80ccf3hyXxWAP6VQ8wyQlvDsA6s=
Subject key identifier: 92:D0:00:89:D3:3C:CA:E1:92:35:29:3F:9D:68:49:52:A0:3D:28:4B
Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Certificate serial: 019425FC3B5C813CCFB777E22EF6BAABAF2C
Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/ktAAidM8yuGSNSk_nWhJUqA9KEs.roa
Signing time: Thu 02 Jan 2025 07:47:54 +0000
ROA not before: Thu 02 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 176.100.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3b:5c:81:3c:cf:b7:77:e2:2e:f6:ba:ab:af:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Validity
Not Before: Jan 2 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92d00089d33ccae19235293f9d684952a03d284b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:43:e6:d1:26:e6:e3:2c:0c:3d:45:a0:6e:90:
dd:1a:43:5d:68:45:8b:bc:de:1e:ed:36:46:6f:d4:
63:f8:0b:d4:19:42:cc:37:0f:35:5c:cf:87:95:43:
d3:48:9a:40:50:e9:9e:a3:cc:31:42:b2:1d:10:c6:
61:05:06:7d:32:e2:ff:a1:24:3f:b3:3c:1b:f8:d7:
36:6c:0b:24:b6:e5:e7:55:06:99:7a:82:42:49:f1:
2e:c5:d8:cd:bf:ff:6e:d1:ef:91:3e:d9:6c:ec:0b:
cc:ff:0e:4c:63:38:ed:81:ac:9e:af:ad:c1:55:62:
d8:0b:e7:20:64:7b:34:51:22:ab:ea:29:9d:4f:4b:
85:ec:31:ec:08:0d:5d:cc:37:89:6a:2d:9b:ad:40:
67:6e:51:b7:94:32:9c:fe:14:48:41:0e:b9:31:1b:
72:5d:44:67:9f:34:4e:ef:86:a2:26:ac:60:7b:51:
54:e3:0b:b9:bf:5d:3d:93:76:f1:9b:8c:b6:c8:bf:
ed:75:c1:fd:ad:98:2c:70:37:98:df:65:af:54:9e:
6f:ab:da:aa:00:eb:6f:50:a9:ac:09:1f:94:e1:3d:
f6:f9:c6:6b:5e:3f:2b:3a:6d:95:94:26:79:30:8d:
19:3b:f8:dd:90:ab:12:c4:5b:47:02:24:76:49:1b:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D0:00:89:D3:3C:CA:E1:92:35:29:3F:9D:68:49:52:A0:3D:28:4B
X509v3 Authority Key Identifier:
keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/ktAAidM8yuGSNSk_nWhJUqA9KEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.147.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:89:e5:3d:54:c4:a2:c7:33:7b:99:dc:07:96:3c:40:d5:aa:
50:3d:70:4e:11:4c:3a:f9:39:df:7b:ac:f6:ff:d7:d3:93:46:
d0:07:aa:1f:d0:f5:c6:a9:57:aa:6b:15:ea:4a:82:ce:3e:29:
1e:1b:6e:80:30:bb:0f:bd:cb:e7:6c:53:62:75:e3:38:eb:20:
b3:4b:06:84:8a:b1:ec:7a:22:ea:c0:e2:b8:8e:d9:db:dd:20:
6b:84:e3:83:db:39:8b:af:e2:7f:c4:95:2d:b6:34:6f:4b:dd:
3e:68:54:59:7c:4b:20:6a:a0:5c:6c:80:ac:b4:16:fb:fe:c0:
1d:8e:69:8c:df:19:15:53:54:65:b6:e5:9e:75:63:c1:68:ed:
a6:84:b9:08:ed:a8:87:0a:b7:d6:ab:be:2d:10:74:35:86:0a:
5b:08:53:62:69:fb:23:a6:bf:12:e0:a2:8b:83:f8:7f:fd:4e:
2c:eb:ff:a6:b8:9c:2b:e6:a8:6b:98:a1:87:86:19:53:66:0d:
fd:0a:7d:1e:9e:21:28:99:2a:a4:59:18:e6:24:64:ee:15:1a:
b6:ff:ad:b2:78:3d:e6:07:ec:60:b1:e6:b7:bf:bc:0b:4f:1f:
19:b2:2e:29:7e:10:22:1f:dc:b4:76:d0:f0:65:11:36:03:10:
f8:8d:17:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:18 2025 by rpki-client