Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KrcLC024xAU4sb6TXXZFAw8pZSg.roa
File: KrcLC024xAU4sb6TXXZFAw8pZSg.roa (raw, json)
Hash identifier: g8TPtPgPnZUHXbVTaiuR29l4HLqHwRIMiorPpaM4X1A=
Subject key identifier: 2A:B7:0B:0B:4D:B8:C4:05:38:B1:BE:93:5D:76:45:03:0F:29:65:28
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019425900CE9D522CA31061E449669960902
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KrcLC024xAU4sb6TXXZFAw8pZSg.roa
Signing time: Thu 02 Jan 2025 05:49:44 +0000
ROA not before: Thu 02 Jan 2025 05:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212210
IP address blocks: 93.170.94.0/23 maxlen: 24
95.47.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:0c:e9:d5:22:ca:31:06:1e:44:96:69:96:09:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ab70b0b4db8c40538b1be935d7645030f296528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4b:c4:bb:0c:ee:73:17:1b:58:c6:41:ac:b7:
68:fc:47:29:f8:73:02:93:5c:52:c6:ee:37:c8:9a:
87:5d:21:de:50:d0:92:79:eb:92:9f:48:87:fa:df:
cd:e2:6e:2b:7a:10:f0:b4:d8:2c:8f:9e:3b:40:d8:
c8:bb:f7:34:29:01:77:cf:05:bb:b4:82:2a:a0:31:
a7:1b:76:81:69:06:d3:55:b8:b6:11:66:6b:a5:06:
0e:20:3e:4b:0a:ac:83:1c:32:0e:3c:a6:2b:05:fa:
4e:53:92:60:aa:f1:de:39:73:1d:a4:f7:e9:8d:e9:
56:dc:0b:e4:d0:86:65:24:f7:26:e7:61:20:45:3e:
85:7f:db:3c:be:44:65:6f:a5:6f:4b:70:2f:28:57:
95:31:66:91:09:d5:cd:7a:46:e0:0e:58:01:1f:bc:
b5:fe:f9:27:3b:49:bc:4d:71:96:24:93:c8:18:7b:
21:6f:44:8b:66:85:fd:ee:84:bf:9d:b3:a2:5b:67:
89:d9:5b:7d:fb:bb:1c:b0:96:ce:55:94:e3:d8:9a:
07:cd:a3:4e:39:f9:d0:63:2c:da:14:e9:3d:15:de:
ba:bd:6a:dc:67:95:d0:b1:6f:32:3e:14:69:90:5e:
1c:f9:77:db:7f:76:2b:2c:21:17:06:77:95:98:ce:
d0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B7:0B:0B:4D:B8:C4:05:38:B1:BE:93:5D:76:45:03:0F:29:65:28
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KrcLC024xAU4sb6TXXZFAw8pZSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.94.0/23
95.47.174.0/24
Signature Algorithm: sha256WithRSAEncryption
11:fc:3a:8b:f0:bd:f0:fc:60:a4:71:fa:b1:3d:c8:70:4f:a9:
89:a5:da:98:d9:11:e7:38:ed:35:5a:95:09:80:5c:b8:c7:45:
95:f5:fd:bc:47:7e:ae:54:a1:dd:38:fb:49:b8:24:9a:b7:43:
c2:2d:f8:a0:e2:9b:ce:43:06:20:6e:16:fb:6f:4c:56:9c:99:
c4:c7:e4:8b:60:13:51:5a:41:3b:61:dc:39:2e:9d:9c:61:30:
82:a5:a0:91:2e:e5:fb:92:a3:96:84:8c:d3:2f:b7:31:a3:07:
ca:53:7a:31:cf:fc:d2:47:8d:8a:16:66:40:f5:1d:84:37:37:
b8:91:5d:10:94:b2:a8:d5:6a:1d:18:6c:07:f7:86:c3:75:f0:
a1:54:41:6c:f5:ab:4f:17:65:2b:62:09:10:86:ab:11:a9:26:
51:61:1d:b7:03:11:3b:4b:94:3e:03:84:00:7d:ca:7c:1c:df:
fe:66:70:a6:12:e5:d3:10:4e:89:c1:f4:3e:52:9d:ce:21:35:
b7:b2:9a:41:92:cc:91:11:8d:e3:9f:f8:c4:05:98:cf:62:cf:
00:6e:54:de:d0:37:15:f7:27:5a:a5:c8:94:3a:a0:c3:7c:1f:
79:c4:d0:15:6e:2b:a0:fc:74:37:2b:99:31:82:0b:b0:a6:7e:
22:a9:7f:36
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlkAzp1SLKMQYeRJZplgkCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWI3MGIwYjRkYjhjNDA1MzhiMWJlOTM1ZDc2NDUwMzBmMjk2NTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kvEuwzucxcbWMZBrLdo/Ecp+HMC
k1xSxu43yJqHXSHeUNCSeeuSn0iH+t/N4m4rehDwtNgsj547QNjIu/c0KQF3zwW7
tIIqoDGnG3aBaQbTVbi2EWZrpQYOID5LCqyDHDIOPKYrBfpOU5JgqvHeOXMdpPfp
jelW3Avk0IZlJPcm52EgRT6Ff9s8vkRlb6VvS3AvKFeVMWaRCdXNekbgDlgBH7y1
/vknO0m8TXGWJJPIGHshb0SLZoX97oS/nbOiW2eJ2Vt9+7scsJbOVZTj2JoHzaNO
OfnQYyzaFOk9Fd66vWrcZ5XQsW8yPhRpkF4c+Xfbf3YrLCEXBneVmM7Q5wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCq3CwtNuMQFOLG+k112RQMPKWUoMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvS3JjTEMwMjR4QVU0c2I2VFhYWkZBdzhwWlNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXapeAwQA
Xy+uMA0GCSqGSIb3DQEBCwUAA4IBAQAR/DqL8L3w/GCkcfqxPchwT6mJpdqY2RHn
OO01WpUJgFy4x0WV9f28R36uVKHdOPtJuCSat0PCLfig4pvOQwYgbhb7b0xWnJnE
x+SLYBNRWkE7Ydw5Lp2cYTCCpaCRLuX7kqOWhIzTL7cxowfKU3oxz/zSR42KFmZA
9R2ENze4kV0QlLKo1WodGGwH94bDdfChVEFs9atPF2UrYgkQhqsRqSZRYR23AxE7
S5Q+A4QAfcp8HN/+ZnCmEuXTEE6JwfQ+Up3OITW3sppBksyREY3jn/jEBZjPYs8A
blTe0DcV9ydapciUOqDDfB95xNAVbiug/HQ3K5kxgguwpn4iqX82
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:07:09 2025 by rpki-client