Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/kIyvr2dCrL1Lhq1OpmJM_tA-O9A.roa
File: kIyvr2dCrL1Lhq1OpmJM_tA-O9A.roa (raw, json)
Hash identifier: ZbzSM0uFkPduXfw6dGmuL2iFxgukpkp+E6XskFGzTX4=
Subject key identifier: 90:8C:AF:AF:67:42:AC:BD:4B:86:AD:4E:A6:62:4C:FE:D0:3E:3B:D0
Certificate issuer: /CN=cd73f238d96cf67a5efc0c37476fd306029af552
Certificate serial: 019424B3ECB867F4EE4C9C1252E45A89ED2E
Authority key identifier: CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/kIyvr2dCrL1Lhq1OpmJM_tA-O9A.roa
Signing time: Thu 02 Jan 2025 01:49:18 +0000
ROA not before: Thu 02 Jan 2025 01:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12390
IP address blocks: 185.91.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ec:b8:67:f4:ee:4c:9c:12:52:e4:5a:89:ed:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd73f238d96cf67a5efc0c37476fd306029af552
Validity
Not Before: Jan 2 01:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=908cafaf6742acbd4b86ad4ea6624cfed03e3bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:cd:3c:1c:02:04:55:cb:fb:8d:6a:0d:2b:
3d:e2:86:6b:14:4e:ae:cd:c5:40:5b:20:21:31:ce:
58:8e:af:a0:20:56:be:ba:6f:4a:fa:52:93:b5:ee:
f0:7c:2c:c6:d0:fb:77:98:23:fc:6d:59:25:04:57:
a9:05:ab:e7:bc:66:a6:40:66:cd:d1:8a:9c:e2:73:
d8:f4:d0:be:84:a7:74:d3:25:44:2f:b9:89:6e:2b:
85:39:fc:5c:d1:69:43:64:33:01:aa:29:19:06:28:
c5:ad:cf:20:29:c5:c5:ef:9d:bb:e8:d9:3c:0f:bf:
6c:e0:2d:32:4a:bf:0e:01:27:ed:8b:ea:50:a7:07:
b1:a3:c2:69:9b:03:ea:e2:bd:f7:c8:73:b9:24:e8:
60:12:1c:e5:9b:2e:96:3a:00:42:e3:d7:6b:8f:bb:
f0:c7:8c:4f:db:9c:c1:88:77:07:e7:cf:e1:8a:2a:
e5:bd:e2:b2:ef:05:6a:2b:1f:fe:39:dd:85:e6:e3:
29:da:6d:fb:61:24:01:9f:e5:02:8b:a9:dd:ec:3f:
12:8d:c5:f7:60:66:22:30:67:a0:59:81:46:f1:e0:
02:72:91:f7:9e:ab:18:36:08:68:92:eb:ef:b5:8b:
ba:6e:55:e7:ef:6f:74:05:ea:35:1c:11:0e:48:c2:
f7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8C:AF:AF:67:42:AC:BD:4B:86:AD:4E:A6:62:4C:FE:D0:3E:3B:D0
X509v3 Authority Key Identifier:
keyid:CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/kIyvr2dCrL1Lhq1OpmJM_tA-O9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.114.0/24
Signature Algorithm: sha256WithRSAEncryption
96:7d:4a:d0:68:c5:9f:6f:4e:ff:04:5f:32:24:16:67:88:cb:
2f:9c:0a:76:16:05:b9:4b:9d:e6:7f:a6:fb:2c:be:93:93:4a:
f3:61:7d:ca:ef:da:07:51:02:e5:56:0a:e7:26:1d:d6:32:37:
86:d3:7d:e5:6d:c1:e4:f9:e9:8a:77:ff:b9:62:46:4f:1c:60:
70:ba:b0:38:5f:60:fc:0e:91:a8:23:da:02:b5:57:61:9e:37:
d1:b4:eb:76:4a:42:17:25:2f:6f:65:d9:b6:d3:e0:e6:5a:61:
0c:97:6b:d8:c4:73:a4:96:61:4a:ad:d8:6e:93:5c:5c:5a:27:
55:8a:8b:9e:6c:8d:f8:71:68:27:ac:a1:aa:b4:f3:6b:df:56:
3d:c9:ac:93:23:01:5e:03:df:17:35:e9:1b:d6:77:1f:60:70:
27:37:e6:a6:21:73:8a:72:e0:15:de:da:ba:c1:53:b8:a6:11:
35:57:62:58:b0:6c:ba:0f:54:d0:a8:98:9d:41:f2:18:d3:03:
64:85:4b:26:ce:63:95:d5:37:6b:3b:03:af:34:dd:03:3e:4c:
6b:9a:74:58:c5:2e:0e:fa:ff:ef:da:1e:0d:07:be:17:6e:72:
c6:c8:13:d2:9e:f6:3f:d6:bb:c0:4f:47:c8:f6:2b:b1:3d:a6:
8d:af:00:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:20 2025 by rpki-client