Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/krCEM0FVbnHk4CEuGTFxU6dyL44.roa
File: krCEM0FVbnHk4CEuGTFxU6dyL44.roa (raw, json)
Hash identifier: 8qA+Jv+esY5FZRfyraH8rrB4yu19N9dE5QCLxV3wJsU=
Subject key identifier: 92:B0:84:33:41:55:6E:71:E4:E0:21:2E:19:31:71:53:A7:72:2F:8E
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 0194221FF9824542C96119A4D5ADCA8A21AA
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/krCEM0FVbnHk4CEuGTFxU6dyL44.roa
Signing time: Wed 01 Jan 2025 13:48:28 +0000
ROA not before: Wed 01 Jan 2025 13:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41872
IP address blocks: 91.207.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f9:82:45:42:c9:61:19:a4:d5:ad:ca:8a:21:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Jan 1 13:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92b0843341556e71e4e0212e19317153a7722f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:35:41:e1:0c:f5:c3:32:d7:0c:f7:75:44:
dd:83:e8:15:3c:78:fd:1a:27:84:da:f8:b4:2f:9f:
6c:cf:52:29:3a:dd:63:77:6b:01:cf:58:c6:20:24:
10:8b:e7:c2:86:a0:e6:06:35:a6:69:ca:7d:84:38:
44:ed:32:e7:ca:d1:c9:74:d8:ac:cb:35:a4:be:46:
12:39:73:91:b9:ff:cd:06:b4:6a:95:4f:86:5a:98:
57:57:56:2d:83:0e:70:ac:c5:8e:8d:34:c8:2a:8f:
14:30:8d:55:b7:33:2b:9c:7a:9c:c3:6d:7c:4f:03:
d6:7b:2e:bd:81:a8:93:e4:8e:37:86:cc:40:27:f5:
75:fb:4a:c3:b1:38:37:cd:1f:1c:e4:42:7e:71:e4:
d4:17:12:d0:5f:47:7c:ad:4d:a0:90:64:66:d5:bc:
f0:be:fe:6b:a2:55:b6:b6:cc:b7:7b:01:50:03:dc:
62:d6:1a:50:8f:21:3b:cf:9c:15:4b:46:fd:73:d1:
02:2d:a2:4a:1e:37:44:b6:a3:24:72:20:f8:c8:3e:
54:bc:26:79:75:0e:65:3b:53:5a:8f:17:37:7b:d1:
ed:31:d8:08:c3:23:7e:a4:1a:d3:b2:d9:cc:19:e6:
bb:21:39:ba:df:be:a6:5b:94:1e:21:0d:ec:7f:0e:
9b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B0:84:33:41:55:6E:71:E4:E0:21:2E:19:31:71:53:A7:72:2F:8E
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/krCEM0FVbnHk4CEuGTFxU6dyL44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.164.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:1f:90:4e:28:4b:e4:12:e5:46:eb:00:f9:8b:4a:e0:42:23:
fc:3a:5b:ea:4d:db:19:25:2f:5c:bf:7e:76:a7:d9:31:67:29:
27:50:24:a4:c0:67:a9:98:77:03:bc:bc:36:22:91:e6:a1:dc:
7a:16:4f:da:c3:7f:37:ea:08:f1:f1:e3:3d:0a:87:0d:1e:fb:
61:29:70:a7:7d:a3:20:dd:89:c7:7a:8c:24:6f:88:8d:a4:87:
0e:9a:1f:dd:94:88:b6:d6:b4:b2:f6:31:db:3c:ad:85:cf:7d:
df:52:f6:d5:e6:d8:d0:67:8b:18:27:2e:76:3f:19:d7:89:26:
47:f2:3d:00:21:95:d7:1c:9d:43:f3:67:8e:49:db:6e:0a:2c:
9f:97:54:9b:cc:da:a7:e4:41:47:74:24:da:1b:f9:cb:bc:0d:
a7:60:b2:58:3b:66:3a:c2:05:63:51:b4:88:37:ce:ce:4a:b6:
7c:50:67:f2:92:d6:9e:77:0a:25:c5:d5:4d:38:a5:12:5f:48:
2c:4b:9f:25:e2:de:69:5a:6e:c4:99:db:50:d5:91:78:18:cb:
2c:80:8a:5d:90:05:a5:4c:0c:68:32:63:ec:28:0d:f5:d7:10:
11:69:ca:7d:24:d7:84:d1:9b:2c:81:30:40:9c:36:f3:3d:ad:
ef:6e:07:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:22 2025 by rpki-client