Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/kitPrlRKaPvvRZMjj30sn5SBic8.roa
File: kitPrlRKaPvvRZMjj30sn5SBic8.roa (raw, json)
Hash identifier: fAdfxW88rLA4/vorwxlP/gvwEwkcGlSH5cxUXmS7nf0=
Subject key identifier: 92:2B:4F:AE:54:4A:68:FB:EF:45:93:23:8F:7D:2C:9F:94:81:89:CF
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 01941F8C13BE9B1CC34BAFBC90BF4288CCC7
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/kitPrlRKaPvvRZMjj30sn5SBic8.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13032
IP address blocks: 185.12.8.0/23 maxlen: 23
2a03:5dc0:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:13:be:9b:1c:c3:4b:af:bc:90:bf:42:88:cc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=922b4fae544a68fbef4593238f7d2c9f948189cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:9d:3c:25:2a:00:dd:a1:0c:b5:20:64:66:
82:ac:d2:53:d5:60:34:e4:03:d9:27:00:42:59:cd:
0e:f9:26:cb:b6:55:eb:08:15:28:d0:15:d6:09:ab:
19:e1:dd:77:05:77:ab:b2:38:d5:9c:21:44:9e:1e:
56:46:c6:f1:33:0a:48:08:fc:be:b2:95:fe:ec:bf:
3d:d2:cb:b2:eb:01:a9:60:85:73:c1:66:70:84:ee:
1e:ad:7e:65:35:01:01:66:37:3d:0b:b6:ad:26:dc:
9c:8f:9b:92:6d:a2:29:36:d5:79:1e:86:46:91:9f:
da:cb:34:eb:b8:b4:fc:56:e8:15:58:fa:69:86:4a:
1b:d4:07:37:dd:46:5a:10:97:af:7e:e2:17:ae:f2:
dd:69:46:8b:61:a9:e0:f5:9f:f7:6e:0d:03:60:2f:
37:53:2b:3e:e3:ed:a1:da:49:fb:b8:1f:3d:d0:0d:
a0:fa:3f:06:27:d9:0a:e8:7e:cb:37:e8:ae:2a:27:
80:ce:7d:4d:87:6e:0e:ce:6f:bd:91:0c:1d:df:64:
f0:9d:2b:7c:1b:af:e6:a4:cd:b9:b1:dd:23:c3:90:
2b:c2:6a:aa:ac:0e:66:ad:95:d1:84:8b:62:69:24:
85:e0:09:d7:c6:4c:ac:dd:5b:a4:65:27:87:a1:e6:
b8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2B:4F:AE:54:4A:68:FB:EF:45:93:23:8F:7D:2C:9F:94:81:89:CF
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/kitPrlRKaPvvRZMjj30sn5SBic8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.8.0/23
IPv6:
2a03:5dc0:6::/48
Signature Algorithm: sha256WithRSAEncryption
b1:67:14:c5:04:71:3c:e9:90:33:e1:c3:2a:62:f1:31:38:1d:
2e:ed:7b:30:de:2f:f9:c7:51:b3:70:9e:da:19:16:48:07:b3:
57:c2:d0:db:3e:43:ee:91:e8:0b:7a:1e:3a:8c:86:61:fd:9d:
38:cc:a4:6a:3e:1f:08:79:51:ba:a1:01:bd:11:6e:06:d7:ed:
b3:6e:f8:56:69:43:53:f5:2a:e2:f2:1d:15:4f:c1:63:ff:25:
9f:b7:ea:46:bf:97:45:ef:0f:40:47:b7:bd:f6:52:ff:d9:a3:
9e:ba:ef:3d:0d:e4:ec:bf:ab:11:b3:b7:a1:61:f8:e5:6f:d8:
ab:3c:1d:5d:2f:0b:6e:54:6d:be:01:ff:dd:3d:29:04:48:7a:
81:07:d7:06:96:51:48:ce:a2:53:c4:32:4b:b8:d2:eb:75:b2:
52:2c:00:75:b3:24:39:f7:89:6b:a1:f5:f9:95:fa:38:79:35:
cc:af:6a:b0:3b:f5:36:5b:06:67:d8:c9:9b:3a:ca:22:5c:96:
a6:51:9f:50:6c:4a:2b:c9:a4:91:af:78:6d:8a:77:a3:21:5e:
bb:e0:de:9d:39:60:42:4a:2d:9e:f6:60:ae:f8:dc:c3:54:63:
93:78:93:77:c8:c4:40:55:83:62:88:88:68:85:2e:10:0d:2a:
53:51:a1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:42 2025 by rpki-client