Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/kNm6ddrvxozowyByoQF78uhJgYE.roa
File: kNm6ddrvxozowyByoQF78uhJgYE.roa (raw, json)
Hash identifier: RwT/hXh1MfTD8gmNW+o+TVC0jUdT6l112GMG0VUSGVA=
Subject key identifier: 90:D9:BA:75:DA:EF:C6:8C:E8:C3:20:72:A1:01:7B:F2:E8:49:81:81
Certificate issuer: /CN=f7742725862b90bda4510a02e804fef3ad1142dc
Certificate serial: 01941F8C297595F63AD61E9B41C0BA74720E
Authority key identifier: F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/kNm6ddrvxozowyByoQF78uhJgYE.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207246
IP address blocks: 212.28.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:29:75:95:f6:3a:d6:1e:9b:41:c0:ba:74:72:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7742725862b90bda4510a02e804fef3ad1142dc
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90d9ba75daefc68ce8c32072a1017bf2e8498181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:45:14:ac:0a:22:53:8b:0a:94:7e:78:64:d6:
28:20:84:8a:55:a4:df:65:bb:3b:3f:54:ce:0b:c0:
17:b4:9b:d6:32:80:94:3b:b2:a6:d3:f8:36:39:2d:
89:a1:84:d4:e5:8e:a8:15:60:31:f4:e7:48:26:3f:
34:f8:fa:11:08:3f:7f:dc:ff:36:7e:d6:fb:0c:32:
72:8d:4a:26:10:0b:6f:6b:23:ba:e5:e2:fa:82:0e:
df:76:b1:85:df:e0:eb:78:22:d4:45:39:ad:61:42:
8c:36:6e:e2:06:6a:4e:37:19:6c:e0:c1:ee:73:8e:
b2:70:8e:9e:80:52:a8:ff:e8:9d:dd:32:13:81:ee:
24:10:45:b1:c0:d4:ce:85:b7:8b:95:a8:df:a0:e4:
3d:a0:16:34:d9:6b:e0:a9:fa:28:af:c4:18:6b:9b:
85:b7:8d:a3:28:24:7a:89:3c:d1:ec:e5:ed:20:77:
80:b4:17:c2:89:91:f9:34:4a:60:a5:c4:b2:6f:9b:
5b:ae:a0:d2:51:db:ed:16:6b:2e:c9:c7:6f:e2:33:
7e:c7:be:4c:d7:5c:ab:e2:ab:67:9e:7c:d7:ec:3f:
4b:21:7d:5e:bc:91:f7:83:14:9f:cb:58:18:e0:37:
39:93:87:99:2a:72:2f:8c:64:7b:d2:5f:37:ff:74:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D9:BA:75:DA:EF:C6:8C:E8:C3:20:72:A1:01:7B:F2:E8:49:81:81
X509v3 Authority Key Identifier:
keyid:F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/kNm6ddrvxozowyByoQF78uhJgYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.28.77.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:02:04:22:95:9e:9b:62:5d:f0:12:57:56:c0:02:25:4a:1e:
75:a4:a2:52:ad:65:b2:ee:90:63:40:3d:11:8f:e1:74:b1:70:
07:08:66:64:78:63:4e:75:ff:d9:3b:86:ec:07:7a:6a:cc:d5:
02:93:5a:6f:c9:6f:84:a6:fd:f5:9c:2e:ad:1e:49:f1:df:5b:
0d:78:9d:c6:a4:ed:57:27:bd:3c:72:9a:8a:31:cb:28:c8:64:
38:29:cb:55:ba:e6:59:a2:11:05:32:97:c1:dd:ab:ac:7d:af:
d0:06:8e:30:ec:48:e6:2b:b3:ae:e9:d8:04:40:e2:24:4b:73:
ce:2c:88:bf:f7:14:7a:f3:d6:00:8b:7c:44:ff:52:03:bc:89:
5e:ec:57:97:25:7e:e9:f5:ab:69:0e:51:3f:2e:0a:98:37:83:
9b:24:06:20:e4:39:e3:bc:ff:23:01:c1:f5:f8:a1:67:0a:96:
03:e5:81:f3:eb:1a:23:f2:70:b7:70:49:c8:9f:01:72:0d:8f:
ef:c6:4f:20:59:0f:09:0e:de:98:87:d1:30:be:eb:12:67:c7:
25:8f:7d:42:17:d0:40:48:9c:4d:c4:92:c0:f1:b3:6c:b7:7f:
d9:14:33:aa:a3:6f:12:b9:97:6a:f8:fe:b7:27:5a:8a:a9:b2:
35:30:f1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:44:13 2025 by rpki-client