Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/kHwNi5M5fziQuO2NQj8a8SdX2b8.roa
File: kHwNi5M5fziQuO2NQj8a8SdX2b8.roa (raw, json)
Hash identifier: t04ey/3zL9Xv5MhhwpU+UES9fiT51N0WVV0hAQ5RlIo=
Subject key identifier: 90:7C:0D:8B:93:39:7F:38:90:B8:ED:8D:42:3F:1A:F1:27:57:D9:BF
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942143F567EFF250F13A9BFC81C4EE5816
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/kHwNi5M5fziQuO2NQj8a8SdX2b8.roa
Signing time: Wed 01 Jan 2025 09:48:09 +0000
ROA not before: Wed 01 Jan 2025 09:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15672
IP address blocks: 31.24.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f5:67:ef:f2:50:f1:3a:9b:fc:81:c4:ee:58:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=907c0d8b93397f3890b8ed8d423f1af12757d9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c5:cf:03:a0:ae:22:b2:a9:37:8d:be:d3:80:
fb:06:ae:16:db:7e:17:34:65:56:90:5a:5d:b0:1f:
1f:b6:6d:37:31:99:ce:34:1b:21:d7:50:2f:b0:6d:
93:e0:9d:d7:18:56:60:f4:ed:ec:db:a4:52:13:9d:
85:f2:17:9d:b4:c1:06:d6:04:aa:76:93:67:ab:e0:
9b:b7:36:b3:b3:dc:51:98:88:9e:22:aa:9c:d4:d9:
35:15:1a:57:e3:73:f1:b1:b3:e0:97:b9:2a:3e:35:
16:e7:24:98:3f:1b:63:e4:98:35:d4:6c:5b:50:35:
d0:55:e4:ff:61:a7:96:ac:3b:50:03:94:24:9e:8d:
47:e6:54:4c:85:1d:19:b7:a2:d0:8e:ba:9a:55:56:
e8:61:6a:02:df:28:93:5f:0e:ee:34:16:86:e5:64:
9c:cb:a9:ec:de:ed:d1:88:de:37:e5:2a:1b:63:b5:
1e:a5:38:82:37:68:85:02:5b:18:bc:ed:87:cd:8b:
56:e6:07:07:f1:0b:e2:6b:3c:a6:8b:33:3f:6f:31:
84:4d:7e:90:3f:bb:f7:65:5e:eb:ca:31:54:1d:7b:
8a:c0:9c:72:eb:48:b4:78:d9:6a:ab:ac:cd:eb:aa:
02:65:32:fb:19:df:ec:ca:0c:00:ab:f4:09:fc:a2:
df:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7C:0D:8B:93:39:7F:38:90:B8:ED:8D:42:3F:1A:F1:27:57:D9:BF
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/kHwNi5M5fziQuO2NQj8a8SdX2b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.255.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d3:b6:73:f0:09:86:0c:a1:38:6e:a8:dd:aa:48:ac:ba:2a:
49:44:c7:e6:58:7d:14:9c:6d:34:cc:10:c0:3c:42:20:fe:1e:
3a:26:3a:63:b4:43:0f:4f:7b:c1:8e:d3:86:fd:13:8c:12:65:
5a:53:1e:e2:93:63:56:4e:13:48:20:d1:ac:8d:d4:f6:79:a6:
4b:c2:b3:a5:2f:d5:2a:ba:94:c2:b2:4c:e7:36:70:b7:23:8e:
77:07:9a:71:b1:bc:aa:07:8b:21:d1:c6:e8:a1:52:6b:4c:f8:
73:83:bf:e5:42:4c:b8:c1:5c:fb:a3:5d:69:28:60:df:6c:8e:
02:3f:34:7e:86:60:7f:58:5a:ab:c3:f5:b2:e9:31:fc:73:93:
cb:69:d2:1d:e0:98:9a:dd:fa:20:77:dc:1b:da:6d:07:00:d6:
b7:a0:fb:72:b1:3c:11:b1:fd:1c:50:5f:34:cd:3c:9a:ac:cb:
70:72:9e:4e:6a:a3:89:19:77:0d:69:dd:b8:8e:71:64:b3:7d:
46:51:90:13:e4:53:43:10:61:13:ce:32:55:5a:4b:c3:ef:c8:
48:11:45:9f:60:cd:59:18:8a:be:f7:04:79:3c:54:6a:e1:51:
26:d3:2b:b7:b5:9c:66:73:b6:51:b2:3b:7b:fd:51:87:db:9c:
ca:33:36:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:05 2025 by rpki-client