Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KaGiY4M-3fbZneExudT-nK8nb70.roa
File: KaGiY4M-3fbZneExudT-nK8nb70.roa (raw, json)
Hash identifier: FmArTMFTJMs3wYo4ShRwamPTBijR/pxik94OYfn/wOs=
Subject key identifier: 29:A1:A2:63:83:3E:DD:F6:D9:9D:E1:31:B9:D4:FE:9C:AF:27:6F:BD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824CCCBEEFB78D7601A679F502D4137
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KaGiY4M-3fbZneExudT-nK8nb70.roa
Signing time: Thu 02 Jan 2025 17:51:27 +0000
ROA not before: Thu 02 Jan 2025 17:51:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215343
IP address blocks: 2.59.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:cc:cb:ee:fb:78:d7:60:1a:67:9f:50:2d:41:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29a1a263833eddf6d99de131b9d4fe9caf276fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:56:bf:a2:12:13:66:9f:a1:0c:2f:18:50:
8f:ab:62:cd:da:6f:4e:4f:8b:2e:75:c4:3c:54:7b:
7c:03:3d:03:4c:ee:0f:3a:25:9f:a9:f9:2c:0a:5c:
68:90:09:55:c3:76:01:7e:2e:b9:2e:4b:5e:33:dd:
66:11:04:d9:3f:a3:a6:49:61:7c:0e:0b:1b:87:44:
bc:36:48:a2:74:7a:fe:41:2c:1e:6e:2b:2f:c6:6d:
6a:95:d8:b7:5a:b5:e7:53:8a:20:5b:34:42:07:48:
fd:2c:c7:d0:99:8f:59:4b:df:0d:58:35:fd:8e:3e:
69:35:4a:c3:fe:6c:d6:85:24:c5:33:c4:5b:94:ae:
ed:02:f3:5c:8f:82:f1:74:00:bf:23:0d:71:72:a0:
c9:75:57:29:d9:39:f5:e4:94:a4:4d:08:b5:b0:f0:
b1:9c:6e:6e:c2:f3:01:e3:c2:28:c1:1f:da:33:0e:
54:5e:f2:0f:1f:41:31:07:a0:3a:00:08:00:24:2c:
6f:36:23:20:1e:8c:49:5e:ee:e6:10:e1:58:5c:3c:
ca:ae:21:6b:f6:91:96:ad:5a:79:6f:33:d4:34:10:
8f:f8:63:18:c6:ec:94:11:8c:d5:84:ac:aa:cc:1f:
75:3a:aa:a5:e4:16:d5:5c:a8:5d:c6:a4:47:77:c2:
30:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A1:A2:63:83:3E:DD:F6:D9:9D:E1:31:B9:D4:FE:9C:AF:27:6F:BD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KaGiY4M-3fbZneExudT-nK8nb70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.252.0/24
Signature Algorithm: sha256WithRSAEncryption
31:4a:2c:c4:e8:9b:bf:db:e4:3f:d8:8a:12:59:69:0f:3f:22:
71:32:4a:95:5b:d9:32:cd:a1:81:40:a0:77:dc:2f:20:f2:42:
73:4e:9a:74:8d:5f:62:7f:22:8c:7e:5f:73:8a:1b:86:26:02:
34:fb:84:f3:b7:5a:5b:e6:5a:29:d8:96:90:08:46:a2:0a:dc:
c6:fa:95:3b:aa:34:e9:27:46:91:59:f8:8a:54:c4:ba:e6:53:
96:69:46:79:1c:6b:31:a7:a9:b2:ea:26:e2:73:ed:93:0f:85:
5f:7c:29:de:21:98:6d:eb:93:3e:84:10:20:64:e2:98:12:a8:
e2:d6:01:49:7a:6a:3f:be:fd:8d:47:fd:2b:c0:d0:ed:2d:2b:
f0:a5:ba:e4:b9:87:ee:68:c3:ea:c0:2b:c1:41:7e:6e:85:26:
97:9e:e3:c4:66:a2:1a:bd:70:44:8c:61:bc:d3:92:51:c8:e5:
ff:d1:41:e2:16:1c:be:6a:7b:1b:33:3f:0c:15:b5:34:53:96:
d6:d9:89:a2:bb:b0:4e:1c:e7:9c:6e:48:0f:26:77:c5:94:99:
2f:1a:c0:54:02:6a:d7:a1:e3:3c:ff:a9:36:22:11:33:07:9f:
a7:c6:91:b6:8f:b6:3d:8b:d7:e1:bb:1e:50:36:89:2f:13:8d:
1e:2a:66:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:40 2025 by rpki-client