Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/KfCvMigrEbxD64-Qz3DHEgil5iE.roa
File: KfCvMigrEbxD64-Qz3DHEgil5iE.roa (raw, json)
Hash identifier: ktCv93PTBPP9rqpE8WUFRMLdnSG878YbS7s8ku8OuAY=
Subject key identifier: 29:F0:AF:32:28:2B:11:BC:43:EB:8F:90:CF:70:C7:12:08:A5:E6:21
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01942747F130725D18D51E8066C86377956E
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/KfCvMigrEbxD64-Qz3DHEgil5iE.roa
Signing time: Thu 02 Jan 2025 13:50:13 +0000
ROA not before: Thu 02 Jan 2025 13:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 86.110.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f1:30:72:5d:18:d5:1e:80:66:c8:63:77:95:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Jan 2 13:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29f0af32282b11bc43eb8f90cf70c71208a5e621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:30:69:f4:37:8f:e2:d2:2b:a0:c6:2e:80:
0d:e5:57:b7:0b:8a:f8:fc:85:d5:e9:e1:b7:99:48:
0b:5a:00:c7:f7:05:41:94:bc:4f:b2:b0:a6:31:03:
64:8a:c0:4a:06:3b:f7:68:2f:0a:23:9a:18:41:8c:
a5:f4:ad:82:93:34:fb:96:b4:1a:59:c6:7f:1c:63:
31:7e:9d:bc:dd:28:97:36:b8:35:ae:e8:1a:8a:65:
31:0c:48:04:fc:3f:3b:7c:94:af:a8:f0:46:c6:41:
e7:c0:51:1d:80:29:42:25:ef:ec:65:12:49:eb:2b:
74:96:ef:f8:80:a2:90:20:7f:90:4c:a4:30:c0:06:
d0:7b:6f:d2:1a:a0:53:c0:48:56:2d:d4:1f:e6:b6:
cc:d9:d9:52:03:cf:57:c5:1d:d3:53:18:a6:50:8c:
91:48:d7:eb:71:d1:ac:45:cc:dc:1f:6b:cb:1c:23:
63:37:f2:6e:79:65:1a:a7:75:db:a2:7e:e8:7b:8d:
27:35:4a:c0:0f:27:fa:9a:4d:42:ee:51:a5:ba:f5:
df:db:73:2c:7a:51:c4:69:6c:81:60:8c:0f:9b:54:
a5:66:2c:89:c5:3e:e4:0f:68:03:63:8a:b4:08:db:
be:8c:96:ca:43:b8:21:e3:84:61:fa:f5:24:ba:4e:
07:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F0:AF:32:28:2B:11:BC:43:EB:8F:90:CF:70:C7:12:08:A5:E6:21
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/KfCvMigrEbxD64-Qz3DHEgil5iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.57.0/24
Signature Algorithm: sha256WithRSAEncryption
06:df:81:3b:78:46:8c:2a:b1:c9:f6:43:37:33:8c:37:fd:40:
e5:e1:f1:3f:34:93:4c:d8:77:b7:23:14:70:f3:15:90:5a:a3:
05:4e:d8:d7:3c:8f:97:50:c7:2d:26:12:6e:c7:16:aa:70:71:
80:0e:fb:80:f4:70:fd:64:26:37:3f:1b:b2:2e:5c:d3:72:ce:
6d:3f:f8:1a:f2:da:60:ff:31:d4:1f:b7:f7:31:d0:2d:7d:ec:
68:09:72:bb:ce:37:1c:c9:86:fb:5c:8b:c1:08:79:74:3e:01:
34:06:2a:39:17:e3:61:8c:57:df:24:01:4e:3f:5e:43:92:65:
db:28:e8:97:d0:c5:bb:52:df:83:8a:92:00:b7:24:74:76:86:
a2:cc:a5:56:14:06:67:a9:e6:75:e3:60:e1:e6:47:df:d5:0a:
af:3d:54:f8:50:4f:9f:18:07:6d:9f:7a:91:ae:d5:62:80:10:
0f:2c:e7:17:ef:3b:86:da:ac:ab:c5:0f:4e:7e:c6:5d:65:c2:
0e:77:02:ba:a1:68:dd:48:96:ff:93:b3:a9:e9:25:1d:3b:75:
45:7e:dc:15:ca:58:75:e5:8f:ef:0c:81:64:2c:60:0f:35:5c:
47:50:8f:e4:a3:d7:da:54:a7:a5:3d:5e:48:7b:90:f6:ad:eb:
5b:6d:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:59:20 2025 by rpki-client