Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/kwdJRuJyM2sxA3nVQ3hN_-t4yAw.roa
File: kwdJRuJyM2sxA3nVQ3hN_-t4yAw.roa (raw, json)
Hash identifier: t72IL0Bu4xhSTiCzxaWI7CqqsPyLBuuMnaHiD42pbD4=
Subject key identifier: 93:07:49:46:E2:72:33:6B:31:03:79:D5:43:78:4D:FF:EB:78:C8:0C
Certificate issuer: /CN=c87fefb4db5746680ad6036934662e236ca77772
Certificate serial: 019421B182A76D84FC32C4837BA439EA179E
Authority key identifier: C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/kwdJRuJyM2sxA3nVQ3hN_-t4yAw.roa
Signing time: Wed 01 Jan 2025 11:47:48 +0000
ROA not before: Wed 01 Jan 2025 11:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20516
IP address blocks: 83.142.232.0/21 maxlen: 21
83.142.232.0/24 maxlen: 24
83.142.233.0/24 maxlen: 24
83.142.234.0/24 maxlen: 24
83.142.235.0/24 maxlen: 24
83.142.236.0/24 maxlen: 24
83.142.237.0/24 maxlen: 24
83.142.238.0/24 maxlen: 24
83.142.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:82:a7:6d:84:fc:32:c4:83:7b:a4:39:ea:17:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87fefb4db5746680ad6036934662e236ca77772
Validity
Not Before: Jan 1 11:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93074946e272336b310379d543784dffeb78c80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3a:91:1a:d9:41:80:54:94:33:1b:fd:e5:0f:
ae:52:d3:d3:e5:8e:b6:4e:fb:cf:3b:d2:76:52:98:
8a:34:02:5f:42:34:62:ed:5e:df:78:24:ec:be:1e:
bc:fc:52:f2:e6:23:a0:2e:3e:6a:76:f3:b4:c8:79:
f6:ca:f3:84:5e:b0:d0:4f:fa:4f:9b:d6:d4:be:57:
3e:ee:22:21:53:da:4d:2f:1e:5e:04:1c:f2:96:c9:
8d:7c:b3:be:c7:35:d2:50:4b:53:f4:78:b3:e7:b6:
59:66:b9:ad:95:c8:40:8e:fa:28:cc:d1:ae:d6:00:
b3:e1:75:8a:3a:54:eb:ae:59:95:5c:c3:39:77:62:
6f:5b:27:2e:9f:bb:55:de:7d:0a:75:d1:1b:8a:ff:
eb:97:db:70:23:22:a4:35:87:6d:ea:bd:e8:54:db:
19:36:e8:83:bb:6a:3c:81:4c:6a:e0:6d:60:5e:a5:
ed:fd:cb:2f:56:1e:5b:e9:e8:87:87:7c:98:ae:7c:
6e:a7:7c:7b:92:f0:d2:29:4e:ad:42:71:f7:d5:c8:
9a:2f:25:60:cf:43:2a:61:83:65:93:72:fc:8d:06:
ed:f3:42:05:1d:f6:14:24:cf:bb:fb:f0:e6:25:55:
49:4e:71:24:90:f1:eb:17:79:d8:fc:9b:81:66:53:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:07:49:46:E2:72:33:6B:31:03:79:D5:43:78:4D:FF:EB:78:C8:0C
X509v3 Authority Key Identifier:
keyid:C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/kwdJRuJyM2sxA3nVQ3hN_-t4yAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.232.0/21
Signature Algorithm: sha256WithRSAEncryption
35:80:a7:7f:cf:4a:27:7a:ac:30:11:fd:a2:43:2b:70:74:b3:
e3:f9:ba:7d:26:c8:a1:af:fb:86:cc:16:a6:4b:d7:d8:fa:ed:
a2:85:70:0d:6c:bf:d5:be:4d:72:59:f9:07:26:0e:81:07:14:
fa:c5:e8:f4:20:c0:c0:a2:dd:bb:bc:61:67:69:93:9a:a7:6c:
59:b1:da:a1:03:b8:2c:b1:e4:a7:df:7a:ff:bf:55:9a:4e:64:
50:5d:dc:22:53:45:29:c4:f9:86:c2:d5:d8:e8:5e:3b:b5:81:
e5:c6:4b:6f:21:0f:6d:58:91:c3:f3:98:af:96:4c:bc:d6:7b:
20:34:f8:c4:5a:a4:20:75:24:09:2e:ee:36:34:11:71:3a:81:
59:6c:20:f8:1d:89:07:34:b7:5a:08:a6:a9:54:e9:95:1d:5c:
bb:5a:53:03:ca:82:64:9c:90:ca:13:ae:3f:d3:18:0c:f9:62:
c0:c3:e7:5a:9e:64:81:9d:b9:76:95:13:0f:e7:0d:8f:93:e7:
c7:57:a5:6a:f6:06:0f:21:b0:6e:ba:14:50:d4:25:78:18:6f:
29:77:de:25:62:18:83:7a:50:13:07:30:a3:17:a9:c3:c6:5b:
ac:31:12:26:12:8f:2a:45:c4:7a:66:3a:23:08:c2:fb:59:22:
15:9b:d6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:44:25 2025 by rpki-client