Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/kzy2fS8wPguMf8v9iXU1Xd6RCJE.roa
File: kzy2fS8wPguMf8v9iXU1Xd6RCJE.roa (raw, json)
Hash identifier: T6hfblwKGrCK3Ap3pOGRw0serguSainDEw/sPRZW+uI=
Subject key identifier: 93:3C:B6:7D:2F:30:3E:0B:8C:7F:CB:FD:89:75:35:5D:DE:91:08:91
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 0194258FA22DE89B681CB4D1A88C65CEAC13
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/kzy2fS8wPguMf8v9iXU1Xd6RCJE.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203433
IP address blocks: 185.22.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 11:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a2:2d:e8:9b:68:1c:b4:d1:a8:8c:65:ce:ac:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=933cb67d2f303e0b8c7fcbfd8975355dde910891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6e:a0:fb:5e:a7:6b:09:c4:f4:45:e1:35:70:
90:e6:5c:47:f2:d0:2d:06:c2:34:ec:69:92:b3:e1:
c4:a6:e2:28:aa:77:04:c5:f2:c5:5d:13:ce:13:f6:
de:44:ac:85:aa:87:5c:34:6b:0f:5d:f8:46:f7:15:
25:86:2e:c9:62:61:a7:1d:0d:2d:3d:78:7b:d9:de:
93:a4:f1:02:aa:ba:42:e0:0e:06:06:9c:d6:ab:e7:
35:d9:b1:66:02:58:65:ca:eb:7b:d6:2b:b2:eb:39:
f8:21:33:7e:a3:dd:d8:bd:00:d9:ac:e1:7c:d3:5c:
22:c9:3b:1d:06:ab:ec:b1:6f:ff:3c:01:cb:f0:34:
e0:27:1b:c5:2b:64:14:29:4f:10:82:4d:37:45:ed:
42:4e:bc:15:3a:f9:76:08:bd:9b:8a:44:ec:cf:3c:
f7:29:6d:04:bc:04:ca:0d:29:ed:c6:9c:cd:05:07:
4d:c1:a6:73:c2:d5:0a:3c:f1:93:63:2d:db:a0:14:
3c:fa:48:87:0b:c4:69:5f:a4:b2:6d:c6:51:23:e3:
f4:d5:6d:74:26:f8:e3:46:b3:16:16:ad:f2:37:c6:
74:2f:41:65:be:71:2b:c8:d8:19:11:3c:72:78:70:
06:56:a4:93:92:b6:79:90:5c:e2:e2:2e:ba:11:87:
d6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3C:B6:7D:2F:30:3E:0B:8C:7F:CB:FD:89:75:35:5D:DE:91:08:91
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/kzy2fS8wPguMf8v9iXU1Xd6RCJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.131.0/24
Signature Algorithm: sha256WithRSAEncryption
64:50:9d:f2:20:f5:b0:69:bf:2e:e0:7e:83:f6:9f:2c:04:4a:
5b:9c:e9:f0:88:aa:66:13:18:61:b3:68:81:15:7e:d1:32:ec:
3b:1d:23:39:d7:c5:6d:8c:71:32:dd:1c:c1:83:1e:9a:ad:92:
b3:99:8e:f9:8a:38:b3:fb:df:6b:2e:e0:19:2c:f0:26:77:bc:
9d:d2:aa:02:b2:b5:f5:7b:c6:94:c7:65:8c:cb:ca:e1:e4:1f:
4a:b3:e1:87:43:a3:57:79:26:2f:28:ae:1a:38:96:0c:f3:af:
10:0b:1d:a1:3d:8a:27:96:46:18:13:f6:e7:1f:36:fd:78:85:
03:08:d4:4a:60:aa:ff:91:10:55:d8:6d:03:34:1b:db:f8:f8:
0a:29:8f:ed:ff:1f:30:34:e0:4a:48:df:e6:28:7a:57:0d:9c:
48:66:f3:f9:45:52:a3:4d:02:91:35:da:40:f7:ef:e0:a0:b5:
27:f5:88:59:8a:df:a0:30:7b:24:00:33:a5:4e:7a:de:29:f9:
35:c3:e2:38:42:d3:95:b7:65:72:de:eb:e9:60:88:29:cf:db:
78:5e:5e:d1:c0:23:42:2d:85:1b:4c:04:3c:20:6c:a4:b1:4e:
0a:10:99:33:db:3c:1f:4b:bf:ec:2b:f8:3b:6b:9f:09:33:92:
c8:97:1e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:45:00 2025 by rpki-client