Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Kdr1IpxFOfOedDgEd0rr_-GJc6w.roa
File: Kdr1IpxFOfOedDgEd0rr_-GJc6w.roa (raw, json)
Hash identifier: 4mvPk5YCIebKrrCqmTuHh7apgwePzT2ptGjzqSnMQ2k=
Subject key identifier: 29:DA:F5:22:9C:45:39:F3:9E:74:38:04:77:4A:EB:FF:E1:89:73:AC
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019422FC432F2ADAF169178120F632306F5F
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Kdr1IpxFOfOedDgEd0rr_-GJc6w.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48430
IP address blocks: 92.118.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 08:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:43:2f:2a:da:f1:69:17:81:20:f6:32:30:6f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29daf5229c4539f39e743804774aebffe18973ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:25:26:ed:77:f5:55:3c:fd:38:51:21:c3:07:
85:49:da:82:ff:1d:e6:08:c1:70:33:61:8f:5c:56:
0e:04:f5:e5:f2:a1:1a:9a:83:70:22:48:f9:31:1a:
59:98:88:2e:82:4b:6d:51:8b:ee:1b:fa:41:89:7d:
0f:a8:08:d2:c4:e6:35:83:82:c6:ef:a8:c7:cb:00:
e8:2a:16:ce:a9:2a:03:e8:8a:d9:cb:05:54:fb:b7:
ff:c1:76:e5:95:f1:93:32:c7:88:2a:46:5c:44:fa:
db:3e:e2:44:ad:3e:48:96:6a:ae:77:54:3f:16:fd:
75:36:60:05:04:ae:9c:2f:67:33:19:40:65:64:ca:
b5:cc:6d:85:74:e0:e7:9e:1b:64:05:fc:ae:b1:8d:
1e:e5:c9:40:ec:6e:b8:cd:c0:aa:59:f9:72:34:8e:
cd:51:42:b2:ff:83:c0:55:a5:bb:87:ad:c7:f5:18:
7a:b7:0d:99:cd:ae:fd:be:fe:aa:17:06:21:f0:2a:
06:ef:55:d6:f3:76:ff:a1:8a:be:10:6c:81:4f:24:
3d:cb:05:c5:a4:92:be:5a:7e:be:f8:26:73:9f:cb:
58:32:33:d9:80:50:cf:fc:ef:6d:a4:7a:7b:c2:53:
9c:89:8b:42:3e:62:d9:d0:32:02:11:6f:43:da:d1:
b3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DA:F5:22:9C:45:39:F3:9E:74:38:04:77:4A:EB:FF:E1:89:73:AC
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Kdr1IpxFOfOedDgEd0rr_-GJc6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.124.0/22
Signature Algorithm: sha256WithRSAEncryption
88:cf:07:16:69:04:6c:7a:c2:8d:20:1b:98:a4:e1:db:86:3f:
7e:a0:df:e6:22:2c:34:b7:93:83:66:a6:cd:e2:c9:0b:7d:08:
2c:59:67:0a:b5:e9:34:2c:1e:fd:4b:57:5c:67:28:25:17:22:
27:4d:d9:61:53:66:11:a5:b6:e5:42:23:ae:d5:37:7d:22:b7:
45:29:0e:e2:29:f2:69:4a:4d:05:f3:31:fd:d6:ac:86:9a:99:
26:37:f0:75:36:2d:8d:62:9f:42:61:25:da:d3:b1:7c:11:21:
f3:b3:cf:07:d2:90:1f:30:e3:ec:e5:f1:d4:99:a0:a6:81:43:
06:ea:70:7b:2f:9a:ab:a9:e7:e1:ef:41:38:38:da:94:33:e9:
81:71:9c:54:3d:d6:d4:45:a6:cb:bb:c3:aa:14:97:be:ab:7a:
03:ee:c8:a0:9b:9a:76:b0:30:77:98:60:60:bb:37:dd:00:0a:
dc:22:fe:e9:2f:42:cb:f4:47:e4:05:69:8e:82:9f:ff:95:7d:
85:af:ba:2b:0e:d0:23:e3:44:ba:d3:c6:68:2d:21:82:f2:87:
e7:ef:9b:ee:32:70:33:ae:a2:c4:c6:3a:0a:73:8b:e2:1f:fd:
60:58:47:7e:e6:55:19:b5:f7:0b:30:5e:88:02:9d:dc:6d:c9:
bc:fd:0b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:10 2025 by rpki-client