Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/kRTK8deNmwdVUHDay7LLnI-Srew.roa
File: kRTK8deNmwdVUHDay7LLnI-Srew.roa (raw, json)
Hash identifier: OivrfB23rD0qMRXfARzBjENtqmmocXUha7CncOlWhdY=
Subject key identifier: 91:14:CA:F1:D7:8D:9B:07:55:50:70:DA:CB:B2:CB:9C:8F:92:AD:EC
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 019423D70949D66ABB9D7D23E47ACA9483F1
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/kRTK8deNmwdVUHDay7LLnI-Srew.roa
Signing time: Wed 01 Jan 2025 21:48:02 +0000
ROA not before: Wed 01 Jan 2025 21:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215984
IP address blocks: 89.150.43.0/24 maxlen: 24
89.150.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:09:49:d6:6a:bb:9d:7d:23:e4:7a:ca:94:83:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Jan 1 21:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9114caf1d78d9b07555070dacbb2cb9c8f92adec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:69:0d:8d:01:14:a3:42:fb:63:d7:bc:8b:4d:
40:5d:d4:7c:91:3f:cf:85:0e:91:03:fd:9e:a8:1b:
3b:fe:f1:20:cc:26:39:ad:31:95:28:f4:96:2f:09:
6b:96:6f:5c:9b:b7:44:ce:e9:b3:1a:8f:42:cb:07:
7e:98:ae:75:20:32:01:89:85:d3:11:0d:73:6a:01:
3a:8c:25:5c:93:88:f5:ce:8d:ea:38:7a:91:c3:b2:
44:82:fa:16:94:24:92:be:04:ad:33:3a:9a:69:b8:
02:ac:36:65:db:1b:e8:af:39:fe:b5:09:93:0a:25:
31:ae:6b:80:01:ef:23:48:ad:5b:ed:88:80:37:84:
67:39:83:15:48:6f:dd:76:a3:f8:90:c2:b6:9e:41:
33:b7:d5:84:32:eb:0e:ef:19:18:ed:2d:9e:e4:f1:
3a:05:b4:f0:51:4f:6a:e6:2d:7b:37:ad:df:2a:d5:
37:48:c6:89:5e:25:6c:b4:2c:4a:f1:e1:be:76:3b:
3e:92:a4:41:3a:ae:43:44:9c:53:cf:b4:51:c9:41:
c1:27:b0:4a:09:2e:15:96:af:65:b2:f5:0f:8f:8b:
cb:42:f4:16:9f:d2:2c:26:91:72:86:75:91:2f:c1:
17:ba:78:b5:34:8c:42:18:80:92:6a:3f:31:c3:86:
0c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:14:CA:F1:D7:8D:9B:07:55:50:70:DA:CB:B2:CB:9C:8F:92:AD:EC
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/kRTK8deNmwdVUHDay7LLnI-Srew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.43.0/24
89.150.56.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ac:2a:3e:89:35:7e:ea:c7:a0:95:c8:dd:82:69:76:0d:ae:
0d:04:bd:dc:c6:1a:a7:11:68:69:b7:41:b3:c2:97:e3:41:56:
25:db:19:ac:bd:7c:27:17:d9:0f:df:3c:f6:8d:70:51:8f:18:
f7:3b:67:48:85:d5:a5:8b:85:d0:f8:f5:17:00:56:62:77:2e:
05:9c:d6:4a:80:e6:f9:05:be:ba:5c:6b:29:06:af:30:a6:4b:
4d:8b:04:c5:24:13:83:2c:55:c4:20:37:d7:3a:7a:27:0c:26:
82:1c:5b:92:6c:68:55:27:e0:0b:36:fa:4a:59:42:63:07:75:
68:e2:ba:fa:bb:71:93:be:c1:84:5f:83:ac:3b:5c:ad:36:40:
d1:56:c8:2b:79:a5:8c:b9:74:49:60:9e:07:ab:b0:c7:58:85:
07:dd:fc:a2:99:3a:65:01:0a:a6:94:6e:9a:93:5b:44:5f:12:
0d:3f:c5:05:e6:a8:18:d7:b2:94:8c:ae:bb:fb:35:05:88:0d:
e3:08:e3:32:38:48:02:54:e9:ce:1c:2b:75:d0:cd:bb:c1:f8:
9e:c4:50:c7:20:bb:f6:02:12:ba:23:9f:f4:92:dd:48:6d:88:
a0:a1:fd:35:f9:42:d0:4b:19:03:1a:b3:b4:e7:c7:01:45:eb:
13:1e:a8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:02 2025 by rpki-client