Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/kNtUtF5NM36Cbe-6BUvvWVk5ND4.roa
File: kNtUtF5NM36Cbe-6BUvvWVk5ND4.roa (raw, json)
Hash identifier: eW1HiHgHjju0NsKcsTSvzT72THKILOyyGeew75G0SSo=
Subject key identifier: 90:DB:54:B4:5E:4D:33:7E:82:6D:EF:BA:05:4B:EF:59:59:39:34:3E
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 01941FFA36BCB7462B85ABB4989BD9340845
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/kNtUtF5NM36Cbe-6BUvvWVk5ND4.roa
Signing time: Wed 01 Jan 2025 03:47:59 +0000
ROA not before: Wed 01 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 185.226.160.0/24 maxlen: 24
185.226.161.0/24 maxlen: 24
185.226.162.0/24 maxlen: 24
185.226.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:36:bc:b7:46:2b:85:ab:b4:98:9b:d9:34:08:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90db54b45e4d337e826defba054bef595939343e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:ad:b1:85:61:8e:ab:21:3a:ab:5d:14:fc:
26:45:77:65:5d:11:71:7d:7e:c4:15:01:a4:3f:ea:
10:e2:f2:c0:25:52:25:2f:74:53:b5:79:13:82:12:
ad:a0:95:f5:04:23:1f:a9:f6:2c:d1:2a:86:c9:fa:
4e:98:0a:4a:64:19:60:c0:e6:b8:32:b7:3b:af:24:
95:09:2e:64:c2:f1:8a:7d:25:2a:14:3c:d8:f5:8c:
05:a0:2b:cc:ce:39:5e:e0:2d:81:c2:92:a4:a2:55:
92:80:ba:a2:82:22:87:96:f6:7b:04:06:02:55:b3:
70:5a:00:39:21:5e:81:69:85:f4:e1:d9:48:ce:46:
19:41:bf:40:2f:9f:65:71:02:73:77:e1:64:57:d6:
cb:69:93:c4:91:3c:0a:67:32:d8:88:1c:5c:fa:cd:
a1:63:7c:5f:21:c7:ed:59:45:f0:95:b8:1d:30:c7:
93:d6:b1:9c:29:1f:91:5a:1d:7f:82:1c:8d:4e:9d:
d4:d7:bd:51:52:bd:54:9e:55:5c:3d:9c:b0:00:68:
cf:0b:5c:70:56:09:7c:63:69:05:f1:b9:6b:14:5c:
3b:bf:5d:4f:ff:59:01:96:92:b6:d6:2b:b2:c4:ea:
2b:05:ae:62:8a:9b:d5:87:eb:5b:87:45:78:fb:9f:
0d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DB:54:B4:5E:4D:33:7E:82:6D:EF:BA:05:4B:EF:59:59:39:34:3E
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/kNtUtF5NM36Cbe-6BUvvWVk5ND4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.160.0/22
Signature Algorithm: sha256WithRSAEncryption
16:9d:57:12:2d:9b:b9:23:45:87:10:e8:b8:66:c8:d6:c2:c3:
e0:fb:e3:2b:96:26:77:83:e4:5c:42:4b:0c:ba:e4:17:90:f0:
c0:4c:7c:b5:eb:ab:7f:a8:df:43:51:aa:4a:24:d1:5a:e8:86:
8b:d4:df:a3:e6:5e:be:90:c2:8b:91:bc:cc:25:c2:22:a0:29:
11:ae:de:19:f1:37:27:93:be:f4:d9:cf:f8:f5:94:d8:05:7e:
8f:17:b8:b0:a0:81:99:46:a9:d3:de:6d:b3:80:08:21:51:32:
d3:57:5a:29:8c:96:dc:dc:de:21:f6:08:8a:2f:81:c7:e0:9b:
51:84:09:1d:d8:cf:57:7e:3e:5c:64:19:e5:c3:ba:12:31:e6:
2d:f7:ae:aa:fd:c5:5c:e9:8f:a8:8a:b0:3c:63:01:51:22:64:
fa:5e:30:24:bf:9c:0d:d2:4c:a7:c0:0d:8f:bf:f6:36:ba:cc:
04:cc:6d:1d:f9:53:9d:33:3e:73:24:20:10:d4:04:fa:76:19:
0c:13:b4:12:21:bc:47:d6:f3:df:44:82:35:06:7d:dc:55:20:
99:b8:c9:55:cf:11:de:fd:fa:0f:bc:75:8b:a2:7e:c9:e1:c8:
17:00:d5:26:f1:99:cd:7d:10:b9:2b:b7:7e:0c:16:3e:8d:35:
72:82:0e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:46:39 2025 by rpki-client