Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/KfRroo9-BNURF9yUWR1WlHgU1ig.roa
File: KfRroo9-BNURF9yUWR1WlHgU1ig.roa (raw, json)
Hash identifier: d0EUN/5YCOmmW4SmyztOjubnx+pkCFBWNsBncoAozSc=
Subject key identifier: 29:F4:6B:A2:8F:7E:04:D5:11:17:DC:94:59:1D:56:94:78:14:D6:28
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01942747ADFD37FC92C29BCF6115D77FC23A
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/KfRroo9-BNURF9yUWR1WlHgU1ig.roa
Signing time: Thu 02 Jan 2025 13:49:56 +0000
ROA not before: Thu 02 Jan 2025 13:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136744
IP address blocks: 213.209.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ad:fd:37:fc:92:c2:9b:cf:61:15:d7:7f:c2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 13:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29f46ba28f7e04d51117dc94591d56947814d628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:71:b8:c5:7a:71:88:0a:dc:b5:58:99:9b:
89:b7:62:55:36:7e:36:11:8f:2e:97:87:f6:ff:dd:
08:0a:79:49:84:b5:d3:bd:7f:82:a5:c7:c0:0e:6c:
95:f1:f6:a6:b9:24:45:d4:27:a9:b7:d7:cf:56:6d:
a1:88:07:ec:92:02:07:90:f1:9e:f6:e1:f8:23:27:
c8:f7:83:b2:c2:1c:4e:7f:f0:76:7e:e2:69:07:4f:
8e:05:61:2b:f4:f8:8e:02:36:8d:e4:34:f5:14:a1:
9f:8a:fd:3c:93:de:44:e5:58:80:c7:68:fb:03:c6:
7b:80:fd:4c:18:15:ce:e7:af:2e:3e:a3:80:70:6e:
03:a2:e2:f0:d7:0a:6d:14:9c:da:89:41:1d:73:8d:
10:ee:a6:e8:6f:f8:f9:a7:9a:c8:f6:14:5c:17:ca:
6b:d7:ce:02:fb:4e:5f:a6:24:5d:fc:46:c7:05:fb:
d4:7f:c4:3e:98:6d:aa:c8:82:f0:a1:40:74:04:4b:
49:30:d7:f7:1d:c4:b4:52:0f:82:39:33:c2:a5:b7:
64:35:29:bf:bf:c4:b9:bc:37:60:2a:77:1f:08:8c:
ca:4c:81:6f:bd:56:b0:b3:d4:9b:30:d5:e3:a0:a8:
e4:e8:30:07:e8:ea:84:7f:38:c5:f5:cb:62:bd:ce:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F4:6B:A2:8F:7E:04:D5:11:17:DC:94:59:1D:56:94:78:14:D6:28
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/KfRroo9-BNURF9yUWR1WlHgU1ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.151.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:99:7c:9c:3a:3d:8e:11:d9:3d:42:22:ca:be:b7:cc:d8:e2:
13:08:74:b5:af:4c:c9:1f:41:77:18:24:51:c0:cf:7d:a4:73:
c2:0f:3a:94:b4:ef:3a:8c:8a:76:2f:0d:c2:d4:92:5d:00:1b:
7e:f0:90:c2:14:18:53:4b:71:33:6e:28:11:ee:f1:fb:9e:7e:
47:ee:48:25:41:32:d8:e4:90:7a:67:fd:43:42:3c:2c:78:d3:
49:fe:47:27:42:2f:5d:23:de:3d:06:d5:8f:9f:30:ff:cc:82:
86:f1:fe:3e:6d:7c:34:1c:3f:bd:8b:09:e4:1e:54:94:77:f9:
1e:25:2e:ad:61:33:22:b3:a9:09:f0:98:37:b5:c5:1d:c2:59:
73:a8:2e:2d:47:dd:9d:e0:00:38:ea:78:2a:06:ae:91:7e:44:
89:44:33:fa:c5:36:22:6b:40:58:37:ac:46:8b:4a:64:25:0f:
c2:6e:7d:27:09:77:4b:aa:93:1c:d1:9b:39:97:e8:5b:d0:fc:
4c:66:5a:fb:fb:d8:b4:f0:76:40:97:d3:78:23:16:a6:6f:f4:
53:a8:07:f6:e3:cd:be:27:fa:d0:21:e5:3f:5d:0a:7d:8d:9b:
ab:5b:8c:a9:bb:fa:c0:e4:b5:b1:33:a5:c3:39:85:14:63:79:
1a:fb:5f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:56 2025 by rpki-client