Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/KHXFUhtLUNdIN7BQ87ZdxRFQsMs.roa
File: KHXFUhtLUNdIN7BQ87ZdxRFQsMs.roa (raw, json)
Hash identifier: eRzdhOdKLkdtm2CVW7k6UYgM19KJIRooAIEs06nFHr0=
Subject key identifier: 28:75:C5:52:1B:4B:50:D7:48:37:B0:50:F3:B6:5D:C5:11:50:B0:CB
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067D4D18B8D9830FBE959806181095C
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/KHXFUhtLUNdIN7BQ87ZdxRFQsMs.roa
Signing time: Wed 01 Jan 2025 05:47:43 +0000
ROA not before: Wed 01 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204483
IP address blocks: 212.243.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d4:d1:8b:8d:98:30:fb:e9:59:80:61:81:09:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2875c5521b4b50d74837b050f3b65dc51150b0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:bc:79:12:f9:33:53:04:89:a9:ba:0d:f7:
d8:19:c6:55:16:6c:bc:93:90:f1:62:4e:25:db:20:
5b:95:b8:0f:03:d7:45:a9:1b:3a:3f:fe:89:4f:26:
5c:89:ba:28:4c:a6:99:81:90:d0:a8:cd:bb:97:9f:
f0:1d:8b:e9:08:26:87:7c:b0:30:fa:89:4c:b4:3d:
9f:c3:af:18:26:8f:1e:b5:6c:af:67:07:e1:e9:f9:
ad:7a:42:d5:35:7f:88:09:62:58:ca:94:f3:f1:dd:
81:14:9d:20:2e:23:8d:1d:0a:34:d4:35:0b:d8:27:
c5:f5:22:a8:5d:83:c1:e9:89:72:a0:73:28:aa:1b:
a8:d3:97:ca:27:7b:a0:e1:22:d6:8d:55:4a:4f:06:
df:48:a7:da:ec:f6:0a:dc:f0:34:d8:ed:a3:aa:eb:
4d:2d:44:79:45:c9:b8:b4:f2:78:78:e0:b6:ec:42:
94:ff:ba:c3:51:21:25:d6:1c:38:70:41:4d:1d:da:
c4:99:cb:a0:9b:65:46:82:8b:a7:9b:44:b8:42:62:
1f:45:cc:4e:56:4a:cf:b3:03:09:8c:6f:ce:b9:d4:
bb:aa:9e:5f:1c:c7:5b:80:10:d0:79:77:01:37:bc:
ec:b6:39:17:bd:d7:fe:a5:e2:5e:fa:36:f4:b6:6c:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:75:C5:52:1B:4B:50:D7:48:37:B0:50:F3:B6:5D:C5:11:50:B0:CB
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/KHXFUhtLUNdIN7BQ87ZdxRFQsMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.124.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:f5:6a:80:4d:29:d5:85:e7:a5:84:d6:e2:5a:33:52:07:67:
67:39:b6:90:d7:9c:41:7c:f0:28:ed:41:6f:75:04:96:a3:2f:
d7:0c:88:85:fd:79:0d:95:1f:0c:b6:61:c2:ab:fc:9f:c1:1d:
d9:9b:d4:a9:f8:63:ce:4c:69:f2:10:2a:84:b4:9d:eb:3a:19:
9b:04:2c:8d:d5:38:e5:b5:74:e9:d3:51:9e:45:61:7f:9d:09:
83:5d:da:cb:53:88:86:66:2e:d4:f2:d6:67:ea:b2:cf:49:00:
ec:1a:01:ad:7b:fa:7b:ae:4f:6f:f6:93:8c:fa:df:f9:ee:c5:
c1:47:5d:ca:ad:09:05:36:89:38:07:56:28:b3:89:6d:7a:b8:
23:3e:6a:4f:bd:a9:ac:06:1e:6a:26:02:82:52:c5:c7:78:a7:
df:c3:1c:78:ea:98:f2:40:70:e1:2b:16:b5:c3:60:a2:9e:33:
e2:2b:ff:88:fd:96:20:a0:63:6a:d9:ed:73:bf:94:50:60:86:
42:9e:e9:b1:b2:7e:ad:0f:c5:c5:69:2e:8d:22:5a:c4:7a:24:
1d:fc:30:57:8d:72:6b:09:d0:7e:57:ba:41:dc:66:71:36:53:
a8:72:14:ab:4c:02:2c:91:68:ad:56:0b:6d:ee:19:2d:51:b2:
10:61:fc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:26:46 2025 by rpki-client