Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/KhmVgayahuq_FWEItXRbri4yLjQ.roa
File: KhmVgayahuq_FWEItXRbri4yLjQ.roa (raw, json)
Hash identifier: 28u9HZ9E3lxZpHt40G8WE88+hWCSc1oI4DUi9z94/vQ=
Subject key identifier: 2A:19:95:81:AC:9A:86:EA:BF:15:61:08:B5:74:5B:AE:2E:32:2E:34
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 019428233041A619CF62095F02FA9EDEF0DD
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/KhmVgayahuq_FWEItXRbri4yLjQ.roa
Signing time: Thu 02 Jan 2025 17:49:42 +0000
ROA not before: Thu 02 Jan 2025 17:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60139
IP address blocks: 212.113.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:30:41:a6:19:cf:62:09:5f:02:fa:9e:de:f0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 2 17:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a199581ac9a86eabf156108b5745bae2e322e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:5f:7e:f1:03:24:b5:03:4e:ec:2c:bb:04:
ac:fc:6b:ee:0d:32:f2:ba:e0:1d:2c:cf:ba:0a:95:
a8:9f:3b:1c:35:83:49:cd:57:4c:26:42:5e:19:70:
55:d9:ec:45:f5:e3:24:4b:c9:f9:ed:64:72:07:6b:
13:23:40:cc:6a:95:fc:2a:84:84:01:97:e5:ab:4f:
d4:ff:e4:78:e2:26:7f:d6:ff:db:10:72:87:af:c8:
8c:57:58:8d:fb:3a:fa:2f:06:ca:ce:01:c6:83:b3:
66:f1:80:7f:1a:f1:b5:94:f0:c8:24:1a:01:c3:0f:
44:0f:6d:bb:21:ec:a7:c6:9a:50:ba:8a:cc:23:a6:
d2:b8:0c:51:4c:13:ae:9f:54:77:88:85:82:85:73:
46:65:07:72:a1:1a:5c:63:8a:2a:2a:8b:21:af:81:
bf:8d:5a:12:be:48:f3:02:b7:69:3d:b6:10:cc:68:
4d:2d:f5:dd:ab:4a:b4:f9:e6:91:10:2c:6d:d3:38:
9a:f1:7c:49:8a:a9:97:0e:24:40:b0:20:19:26:a4:
ee:4f:26:ff:0d:f4:45:5a:bf:61:73:08:5a:6c:af:
5d:06:fb:04:aa:7f:38:2c:32:47:99:92:94:b1:21:
1d:c8:5e:1e:f8:3d:3b:d3:d6:07:29:52:83:08:9f:
73:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:19:95:81:AC:9A:86:EA:BF:15:61:08:B5:74:5B:AE:2E:32:2E:34
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/KhmVgayahuq_FWEItXRbri4yLjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.113.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:5b:2b:1c:e1:9e:82:5f:4f:79:ef:97:d8:ba:ac:e0:7c:db:
ee:a9:fa:2b:7e:0b:04:10:20:2c:b9:3f:b8:83:05:fa:b2:ee:
fa:34:50:7f:81:ce:45:13:0a:cc:3b:a0:91:50:08:10:df:01:
c3:a7:22:4e:7c:c0:4e:bf:25:58:a6:d4:b6:28:f7:a3:f3:39:
05:f2:fb:f4:c2:9b:71:c1:23:8d:30:32:ac:31:8f:0c:44:12:
20:9f:21:b1:90:3d:a8:48:9b:fe:31:09:94:d3:8a:d7:a9:72:
e1:92:39:4f:f9:fc:2f:ff:e8:53:0c:e8:b9:9e:11:0a:6a:75:
83:c2:16:82:c2:7b:51:60:f7:7e:6f:48:07:dd:d8:e6:a5:5c:
7b:99:90:12:d4:ae:e6:a6:6d:a6:c4:98:2e:55:39:8d:d3:01:
f6:57:b0:05:8e:bd:80:b7:32:bc:3d:3f:91:d9:c4:db:80:0b:
7a:5b:4c:5d:87:67:87:c2:18:2e:c3:d7:27:56:93:a1:01:ca:
09:df:bd:a3:9b:07:4c:66:ef:d9:d2:19:06:8b:a3:7c:b4:92:
43:3c:a9:40:4b:23:7d:90:e2:b4:87:6e:e5:2f:0e:2c:65:46:
60:f0:77:01:58:5b:23:d9:fa:ed:a4:94:6c:08:3c:74:b1:c0:
9c:bd:2e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:11 2025 by rpki-client