Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kRmhLdJFBt73WzUKvH3tG9ojDrY.roa
File: kRmhLdJFBt73WzUKvH3tG9ojDrY.roa (raw, json)
Hash identifier: hAHuvZHRMZcQoxZE8ydM5EqiwL0CjIyQL4kcK39IQV8=
Subject key identifier: 91:19:A1:2D:D2:45:06:DE:F7:5B:35:0A:BC:7D:ED:1B:DA:23:0E:B6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824B8CC1DFE1AE66B1033C7E8C37A46
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kRmhLdJFBt73WzUKvH3tG9ojDrY.roa
Signing time: Thu 02 Jan 2025 17:51:22 +0000
ROA not before: Thu 02 Jan 2025 17:51:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209524
IP address blocks: 87.120.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:b8:cc:1d:fe:1a:e6:6b:10:33:c7:e8:c3:7a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9119a12dd24506def75b350abc7ded1bda230eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:23:d6:bb:fe:5b:eb:c5:e9:6c:29:67:e2:
c0:a7:06:b9:33:80:50:2e:be:03:30:80:0f:82:b5:
61:78:90:2d:de:5e:d1:6d:d4:72:a8:0d:35:31:a7:
74:83:78:7b:13:62:01:76:02:46:73:64:3b:d7:80:
66:02:14:11:2c:8b:bc:81:88:8b:68:ce:fd:05:ec:
cc:d1:bb:b7:55:ac:57:7f:f7:e1:e2:23:c2:f3:a9:
96:7b:1f:1d:41:c1:32:a3:16:5e:3d:7a:ce:3a:c2:
31:a1:c6:d6:d8:69:7b:cc:eb:79:0a:c6:6f:8a:de:
a0:6a:1f:c1:13:4e:0c:13:2c:b2:0a:62:ec:31:2f:
5d:8e:6b:7c:42:38:1b:52:da:0b:31:90:8f:d6:9c:
f6:1c:6d:95:e6:24:e7:e0:e8:3e:56:73:c9:77:9e:
5a:d2:c1:57:77:74:b2:b7:22:d6:6c:30:b4:f6:f7:
66:af:16:71:bb:87:67:1f:c3:d5:a1:24:eb:0e:d3:
b0:86:75:d6:42:1c:df:ed:7f:78:83:b4:3e:14:28:
73:d7:32:40:78:6e:a6:1a:2c:c3:db:99:0a:70:05:
18:a5:2e:59:ee:ed:66:6d:d5:82:ea:a7:49:ac:3b:
01:94:2d:a6:8a:d3:d8:54:bd:dc:7d:0f:4a:77:b1:
14:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:19:A1:2D:D2:45:06:DE:F7:5B:35:0A:BC:7D:ED:1B:DA:23:0E:B6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kRmhLdJFBt73WzUKvH3tG9ojDrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:c7:9f:6a:f1:7a:d8:f4:83:b8:b9:4e:0e:19:7b:16:0f:be:
9b:35:95:46:f1:d2:a9:69:0b:05:98:45:57:90:af:91:8d:93:
dc:bb:db:87:0e:a0:c1:ec:d0:94:30:0e:9d:07:28:68:87:d9:
7f:65:10:4d:af:4d:50:4f:a9:37:fd:15:a8:2b:c6:23:86:fc:
e2:45:ea:69:8c:da:67:22:82:85:c5:3b:c0:d0:e5:d8:1c:fa:
fc:f9:99:e7:34:b4:89:32:26:a1:9f:81:50:6c:f2:81:bc:f8:
1a:e6:2d:5e:75:22:a4:bb:84:5d:80:73:c1:11:73:b0:54:ab:
82:6a:82:a0:8a:b2:c2:ee:cb:29:87:e2:c7:73:1f:a4:bc:c1:
48:e9:1c:e4:13:6f:15:34:f2:83:f1:ac:45:49:1f:78:f5:a5:
84:17:6f:7c:c6:cc:8a:b1:60:a4:fa:27:fe:8d:0a:6f:99:33:
60:91:20:bc:35:64:cf:16:d6:ff:b0:71:ae:b4:cb:42:05:bd:
b4:a1:fc:ca:a7:41:1b:93:19:82:de:38:be:75:bf:1d:be:9a:
8f:a5:49:84:b9:1d:4e:53:03:0e:57:c1:3b:f5:20:83:bf:aa:
a4:74:a4:7b:27:35:6b:f4:f4:1e:12:56:5c:7b:10:11:c3:d3:
7b:77:ba:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:37 2025 by rpki-client