Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/kyUP_zUxJzKqp_WSRe64xjQTn88.roa
File: kyUP_zUxJzKqp_WSRe64xjQTn88.roa (raw, json)
Hash identifier: IIbLVXzFiGKxHkStsyV2IH0lCTK/4GbGDWn4D7OnNxI=
Subject key identifier: 93:25:0F:FF:35:31:27:32:AA:A7:F5:92:45:EE:B8:C6:34:13:9F:CF
Certificate issuer: /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Certificate serial: 0194258FAABF71E753F27ECD32F0B8D214A9
Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/kyUP_zUxJzKqp_WSRe64xjQTn88.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39453
IP address blocks: 193.16.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:aa:bf:71:e7:53:f2:7e:cd:32:f0:b8:d2:14:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93250fff35312732aaa7f59245eeb8c634139fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:de:5e:70:17:87:15:23:8c:36:21:7b:d7:
74:46:66:1c:0d:8a:f7:b4:12:50:c8:dc:6e:e5:1e:
9f:d9:a6:eb:d6:0c:53:2c:93:ad:a4:d0:07:9a:8f:
be:16:cc:47:0d:48:70:c5:03:ae:de:9b:7e:ee:05:
34:0c:b9:e2:72:f8:d0:10:07:70:92:d0:d6:17:2d:
24:95:0d:c8:de:60:41:d1:5d:b4:a5:a4:41:99:12:
a1:3b:51:c7:84:2f:63:f9:71:15:28:72:ae:b5:ef:
6a:3a:06:6b:a8:1a:00:3d:71:46:c9:6e:7a:06:af:
24:33:83:5f:2a:26:98:da:c1:37:24:8d:d6:57:10:
25:1e:8d:46:6d:31:7b:81:0a:2a:03:62:87:d4:47:
ea:d3:b5:19:03:a7:20:a5:62:a3:5e:b1:22:26:1e:
f7:aa:f1:5f:0c:f4:df:26:7c:34:e5:9e:16:8d:7d:
b0:ff:fe:28:92:b3:ae:b4:d2:7a:1c:c4:7b:3a:e4:
af:5d:14:05:f6:dd:f7:ba:39:cf:7b:8d:1d:22:55:
f3:e7:7e:80:44:3e:87:1d:41:25:34:88:1a:9f:8f:
f6:04:99:ad:54:10:f6:24:0e:e3:5f:cb:39:7a:fc:
aa:24:a5:86:7a:44:9c:f0:ff:08:58:9d:35:5c:75:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:25:0F:FF:35:31:27:32:AA:A7:F5:92:45:EE:B8:C6:34:13:9F:CF
X509v3 Authority Key Identifier:
keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/kyUP_zUxJzKqp_WSRe64xjQTn88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.104.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e8:2a:c5:d2:34:00:e7:80:0c:16:bd:6e:f6:ae:71:9d:a2:
86:71:ca:46:79:59:fa:e7:55:53:8a:50:2c:8a:40:fc:0f:fa:
28:c3:23:e1:24:21:5e:c1:71:98:92:22:01:c8:8e:8d:f0:f9:
5d:29:65:c9:9f:0e:11:59:f3:b5:ff:4a:4c:be:9f:c4:02:ff:
6a:ef:7d:3f:74:82:51:98:19:aa:be:e1:19:27:7d:5d:72:1e:
b5:60:91:48:9d:cf:36:1c:49:bc:9b:d1:d8:68:1b:19:d4:d2:
33:3f:27:d2:6e:4c:61:77:03:4e:cf:cd:a8:3e:7e:4b:13:a4:
f5:74:70:57:8d:2a:96:89:6a:50:bb:c1:eb:e2:b0:d5:7d:5d:
df:35:60:92:15:5d:27:94:75:3c:53:42:99:28:0d:15:eb:5d:
ae:0c:6a:b2:8e:f5:b4:52:68:1b:6a:61:fa:ec:c0:ba:80:75:
df:42:32:13:f7:2b:2a:35:12:24:18:a7:b5:cc:47:22:7d:e1:
8a:fc:41:ee:b0:63:6a:51:b9:c6:b2:a4:6c:da:3c:06:81:30:
b7:2b:77:6f:6c:f9:da:9a:00:e9:c2:10:26:42:3d:09:67:0a:
81:32:e6:44:4d:73:47:3f:54:75:f6:97:f4:e5:d1:18:c3:58:
21:7c:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:38 2025 by rpki-client