Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/KAKz0xo2XXEBIDI7U4s2tUakP98.roa
File: KAKz0xo2XXEBIDI7U4s2tUakP98.roa (raw, json)
Hash identifier: nzwZHLIuL4E1A+Jcxn7qeWA8mqGxoFVori2v9JbkLPE=
Subject key identifier: 28:02:B3:D3:1A:36:5D:71:01:20:32:3B:53:8B:36:B5:46:A4:3F:DF
Certificate issuer: /CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Certificate serial: 0194258E4D08769D5DB25335383ADCBB41DE
Authority key identifier: A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/KAKz0xo2XXEBIDI7U4s2tUakP98.roa
Signing time: Thu 02 Jan 2025 05:47:50 +0000
ROA not before: Thu 02 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50636
IP address blocks: 91.194.184.0/24 maxlen: 24
91.194.185.0/24 maxlen: 24
2001:67c:2940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:4d:08:76:9d:5d:b2:53:35:38:3a:dc:bb:41:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Validity
Not Before: Jan 2 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2802b3d31a365d710120323b538b36b546a43fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:06:f1:a5:5c:d0:cf:74:e1:2b:63:03:a2:75:
35:a5:50:33:cd:57:00:65:40:86:64:b8:2b:75:e3:
84:a7:41:b8:5d:10:1f:84:ba:de:81:63:51:97:a5:
0f:2b:ef:43:48:53:17:96:53:86:0c:df:c1:43:52:
1d:90:24:23:a5:69:f2:7c:3a:5f:a8:9a:75:47:49:
47:b2:03:9d:cd:58:79:ac:50:15:a1:01:85:9b:42:
2e:12:07:1a:08:1e:29:cf:52:5a:d1:4a:c7:0a:71:
a9:66:b8:6f:88:1f:1e:f9:e4:c1:5f:ae:be:63:35:
55:1a:f4:09:2b:9c:1a:ea:31:59:9b:a8:fa:cf:5e:
8f:ca:cd:7a:2a:c8:52:73:bb:8b:52:5b:e1:fa:bf:
7a:db:42:ac:0c:4d:54:6c:80:96:27:2b:75:6b:0c:
1e:5f:27:67:48:bf:fe:59:09:f6:0c:bf:4f:c6:16:
9d:bc:5d:4e:3a:21:1f:e1:5b:1b:5a:80:27:65:6e:
77:b9:b7:ce:7b:2f:ff:09:d9:29:ca:9f:44:02:75:
d6:25:27:f6:6f:d3:ef:7c:58:ea:ec:dd:ef:ea:26:
0f:d5:41:4e:39:33:6a:58:ab:ab:3d:63:93:d2:82:
1d:a3:06:d3:c2:01:6c:a6:5e:27:be:cb:29:51:24:
99:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:02:B3:D3:1A:36:5D:71:01:20:32:3B:53:8B:36:B5:46:A4:3F:DF
X509v3 Authority Key Identifier:
keyid:A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/KAKz0xo2XXEBIDI7U4s2tUakP98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.184.0/23
IPv6:
2001:67c:2940::/48
Signature Algorithm: sha256WithRSAEncryption
50:5f:b9:26:c0:c4:23:a5:88:9f:71:6e:b7:06:8d:ca:60:b9:
af:c4:06:ab:d1:f3:1c:e7:67:79:ca:84:72:6b:91:65:da:74:
8e:c6:e4:01:d6:27:ba:e8:93:92:ed:86:36:0b:9b:16:76:e8:
e1:b5:2e:ec:f7:fc:03:7a:4f:d1:9b:61:46:49:00:c0:99:0d:
d4:15:f0:e8:66:73:ec:35:50:5b:8f:4a:9e:c9:e5:b5:70:31:
c6:16:e6:1f:9b:a3:68:9e:8d:5f:ed:69:2c:fa:0f:6d:f8:23:
75:5b:99:fc:16:a2:67:80:f1:b8:fa:6d:5a:a6:48:5e:43:76:
f9:e1:17:05:c6:b8:8c:22:6d:12:6f:d1:e2:07:ee:da:eb:d9:
26:54:0d:a1:c0:1c:2f:b8:31:49:a1:e8:7f:14:1b:e8:c4:9d:
b5:e3:a6:90:9b:a5:bf:3b:06:b1:ce:ab:a9:39:92:3a:f1:00:
cf:64:1b:01:e1:09:28:21:83:0a:41:e0:2d:08:2f:f5:65:56:
2d:ec:14:12:f3:3a:ab:37:d6:18:52:64:36:48:36:80:01:d7:
41:cd:fe:47:6d:ae:9e:45:33:7c:ce:a2:8e:67:ba:e3:91:98:
a8:3f:3a:44:da:6d:e3:cb:9c:c2:d0:0e:13:c5:01:e9:66:1d:
fc:d0:14:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:06 2025 by rpki-client