Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/KVofMQ5Iytj3taZ4zNX-3NiQ9A0.roa
File: KVofMQ5Iytj3taZ4zNX-3NiQ9A0.roa (raw, json)
Hash identifier: SkunsiqfbTLPDmA+1dTSXrSg8HMaos1bWjK4FJzMt/g=
Subject key identifier: 29:5A:1F:31:0E:48:CA:D8:F7:B5:A6:78:CC:D5:FE:DC:D8:90:F4:0D
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019420D651EC30C1AD62706663CE148B5B4D
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/KVofMQ5Iytj3taZ4zNX-3NiQ9A0.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48458
IP address blocks: 94.155.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:51:ec:30:c1:ad:62:70:66:63:ce:14:8b:5b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=295a1f310e48cad8f7b5a678ccd5fedcd890f40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:ac:66:de:c6:88:86:07:64:36:6c:a3:e3:
06:19:2a:a6:3a:34:63:b2:73:07:5c:93:76:7e:e0:
bf:41:06:b5:61:4b:70:b3:dd:ff:8d:22:3f:3e:cd:
95:dd:d9:8f:10:fc:4e:d7:b5:a8:e0:4a:b0:77:ed:
8f:7d:71:a8:91:27:bd:58:82:6a:fb:0e:12:dd:2f:
04:cb:f3:01:ad:ca:97:24:a8:be:e5:5e:3b:89:14:
f1:e4:bb:15:94:29:2e:3f:dd:19:8a:b9:03:fe:c5:
67:e7:00:6b:bf:5f:f2:ef:db:4f:a5:86:d3:2b:b3:
d0:fa:bb:44:32:13:a3:c6:86:9f:e1:a1:99:b8:64:
21:5f:83:9f:0b:97:f8:d6:d6:7b:84:c1:86:a9:3a:
c5:e4:0d:67:cc:78:72:96:6c:6e:78:f3:48:be:7f:
81:ca:e0:a4:ed:a7:af:e4:34:c6:5b:36:0d:79:9d:
ab:29:cb:65:f0:5e:7d:24:fa:e7:0e:8e:ff:a4:51:
15:b0:bf:36:06:f7:2f:4d:c2:bf:9a:21:94:2d:1d:
e2:ac:99:67:bf:14:aa:ee:ac:a0:6b:85:04:35:31:
04:ec:36:d2:0f:19:9c:8f:5b:8b:a8:e1:ae:4b:ca:
e5:3a:37:33:5c:09:1e:51:d8:37:ed:69:21:8a:5a:
ab:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5A:1F:31:0E:48:CA:D8:F7:B5:A6:78:CC:D5:FE:DC:D8:90:F4:0D
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/KVofMQ5Iytj3taZ4zNX-3NiQ9A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.155.11.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:61:2c:da:8a:87:e3:f5:a5:4d:eb:0c:2e:e4:34:3c:6a:58:
a3:a6:bb:80:66:b5:e8:96:f5:5b:9e:aa:b9:78:76:53:2f:eb:
21:9f:52:ec:d0:fa:7e:cc:31:19:f8:20:5b:de:0f:0d:11:92:
26:d1:bd:f8:ab:a9:f7:69:4f:e8:8c:62:de:4b:1c:83:36:74:
b7:02:e3:aa:a1:d9:3a:84:57:08:ca:66:81:da:82:a3:1b:04:
e0:cf:e1:d1:d3:1d:6b:27:a0:4e:d8:58:f6:26:d0:17:40:ac:
15:97:92:64:ca:8e:6f:92:57:e5:3c:8b:1d:16:d4:44:9b:0d:
4e:35:86:77:b3:53:ff:04:40:b4:5f:d2:b5:bd:66:b9:e5:f8:
30:f4:81:ff:a5:64:f4:3f:41:4c:db:01:39:6d:11:b5:0d:97:
62:84:1f:cd:33:44:1a:b2:b5:0b:ec:05:f9:d3:11:5b:1e:ed:
1c:cc:4a:20:86:74:35:48:ee:ee:ae:3b:72:76:85:95:a7:f0:
e5:d9:06:4b:45:8e:2e:89:6e:a9:86:85:3c:6c:53:ec:25:48:
7c:75:10:a8:d8:52:27:70:5f:a3:bc:8e:c4:bd:83:46:39:21:
3a:42:e0:a6:e5:ca:ac:ad:67:fb:90:00:d0:bf:5f:7d:4b:07:
39:3c:dd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:59:11 2025 by rpki-client