Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/ktw-FkrMXPNswM8IraWY-5p7J3I.roa
File: ktw-FkrMXPNswM8IraWY-5p7J3I.roa (raw, json)
Hash identifier: jzXeR9Bv5fkU8m0kPMqZ57dXqdxvNx+7MlrJIZfIQC4=
Subject key identifier: 92:DC:3E:16:4A:CC:5C:F3:6C:C0:CF:08:AD:A5:98:FB:9A:7B:27:72
Certificate issuer: /CN=d90a8131029257bff7614448e6f6b503c12bb29d
Certificate serial: 019424449B3F8E88EDB96DA89DC9BD638810
Authority key identifier: D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/ktw-FkrMXPNswM8IraWY-5p7J3I.roa
Signing time: Wed 01 Jan 2025 23:47:43 +0000
ROA not before: Wed 01 Jan 2025 23:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35585
IP address blocks: 193.43.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9b:3f:8e:88:ed:b9:6d:a8:9d:c9:bd:63:88:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90a8131029257bff7614448e6f6b503c12bb29d
Validity
Not Before: Jan 1 23:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92dc3e164acc5cf36cc0cf08ada598fb9a7b2772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:e5:10:06:83:28:1f:c2:a0:a3:c0:30:2f:
db:7b:b4:dd:5a:f8:a3:45:85:d4:10:98:7e:ce:93:
00:46:27:42:b1:f9:85:9c:f5:c7:f8:30:a3:ed:f0:
4a:d4:24:c4:ce:a5:ae:8a:a2:1d:ac:bd:8b:69:19:
8b:94:f0:54:42:98:fe:17:10:c3:83:c8:32:54:a8:
42:1f:6f:38:53:08:13:8a:94:1c:fd:cd:b4:a3:34:
85:34:de:a0:3c:ca:8c:2f:5a:b6:c6:d3:d5:c5:f2:
b9:02:5d:c1:6c:40:d6:9b:f0:11:12:d0:73:f5:ed:
36:ec:ed:91:a7:88:4e:37:36:2c:9f:9d:5f:fc:c2:
4a:4e:55:06:3b:45:8b:f6:25:e2:9d:b6:82:43:e3:
90:db:59:3d:88:8c:24:a3:f5:26:82:ed:66:c9:d9:
24:ed:4b:91:d3:ed:32:94:24:4d:01:17:98:58:c4:
a4:11:87:af:c1:08:f3:75:ef:8e:fe:95:a9:42:b9:
35:61:4c:2d:c9:fe:8b:1d:1a:2b:d6:c2:33:95:31:
83:7f:50:54:6b:a4:3e:ba:8a:fa:3c:ca:cf:0c:03:
d1:a9:0b:96:33:6f:7c:7e:17:e0:5e:64:9f:02:73:
5f:6c:07:5f:a5:dc:f6:5f:cb:0a:35:6f:bf:13:9d:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DC:3E:16:4A:CC:5C:F3:6C:C0:CF:08:AD:A5:98:FB:9A:7B:27:72
X509v3 Authority Key Identifier:
keyid:D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/ktw-FkrMXPNswM8IraWY-5p7J3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.228.0/22
Signature Algorithm: sha256WithRSAEncryption
57:09:ba:e3:4b:a0:dc:83:c7:0f:67:6e:26:b3:c0:89:6f:fa:
fd:82:7f:e9:97:7c:f5:e8:5b:e5:f4:00:d9:cd:e0:e1:0f:84:
a6:b9:af:58:33:98:b4:c1:03:4c:04:4e:dd:1d:34:6a:d7:10:
8d:52:07:94:b2:c9:a1:5f:97:81:89:ad:31:30:77:7b:5d:78:
9a:f7:2f:56:d8:b3:93:a8:93:74:8a:3d:09:62:95:22:9a:1d:
58:98:7a:0b:c9:90:e2:2b:14:0b:01:bc:a1:ad:8d:b4:5a:9b:
a6:ad:13:1f:c0:94:45:5f:f3:ac:63:0c:95:90:32:5f:9e:65:
f3:1d:a6:66:ce:bf:90:ad:84:c0:8f:93:09:a6:b3:eb:e8:34:
77:af:16:da:0b:22:5b:47:1b:18:de:3f:ba:d8:8e:eb:68:4d:
6d:b3:c2:d2:ef:b2:6a:42:9c:59:bd:eb:02:eb:44:1a:7c:5a:
ec:66:58:03:98:5a:fa:50:a3:4c:27:08:d5:db:6b:28:f9:88:
02:4a:38:74:19:fc:08:6d:ea:e9:bb:c8:d5:ef:7d:56:6b:3d:
5b:bb:46:42:84:43:57:1d:aa:98:58:d9:5e:28:f3:2a:08:cd:
a3:e2:89:75:2b:20:43:10:7f:84:64:94:7f:14:ce:49:0e:70:
e7:d8:18:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:48:44 2025 by rpki-client