Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KXEVHXFrsQuoZwWZoQ_5CsukzbE.roa
File: KXEVHXFrsQuoZwWZoQ_5CsukzbE.roa (raw, json)
Hash identifier: WQaj6B4MtVJbqIF+4N8wDgRanBz7mPdZREYwApvm6qY=
Subject key identifier: 29:71:15:1D:71:6B:B1:0B:A8:67:05:99:A1:0F:F9:0A:CB:A4:CD:B1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194282768FE7F189D41005B1A98360149F3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KXEVHXFrsQuoZwWZoQ_5CsukzbE.roa
Signing time: Thu 02 Jan 2025 17:54:18 +0000
ROA not before: Thu 02 Jan 2025 17:54:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209604
IP address blocks: 89.45.45.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:68:fe:7f:18:9d:41:00:5b:1a:98:36:01:49:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2971151d716bb10ba8670599a10ff90acba4cdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:3d:6a:08:bf:9a:d1:66:b8:3a:f0:07:32:
62:28:89:53:d9:ae:07:d6:7c:6e:e0:90:cf:e3:e8:
5d:4f:df:6e:c6:8b:ed:31:b9:14:97:58:7b:99:44:
03:01:fa:9f:ca:73:07:bf:c4:d4:a2:b8:39:df:23:
1f:90:9f:c3:83:14:b2:0b:36:54:cd:13:65:71:77:
d6:76:87:7d:84:73:bb:e7:59:99:60:2c:2c:aa:61:
96:70:9f:be:44:99:49:ae:24:38:70:22:9b:d9:5c:
68:9f:41:21:bc:de:ae:b5:5d:0a:3a:f6:e3:3c:d7:
63:03:a5:d3:f1:90:bb:2a:f5:b4:50:ca:de:d8:da:
ca:6d:19:ad:fa:98:06:a1:3f:9d:0a:c3:e4:16:14:
b3:c5:de:4f:ad:bf:b8:59:ca:be:c8:72:2f:23:1c:
b8:5e:01:da:89:ab:9b:6f:e5:e4:48:51:9a:8b:bd:
c5:f9:e2:f6:d2:54:5b:94:f0:8f:75:2a:f7:59:ec:
d7:ce:9d:c7:e9:03:37:29:43:15:f9:80:40:f6:60:
7b:70:f8:9f:45:7d:d3:8f:2b:2d:45:2d:66:29:ee:
fd:95:ac:bb:8b:9f:05:65:e1:37:0c:d8:71:7d:8c:
0e:d1:fa:21:9b:32:15:eb:91:19:c3:95:62:7d:cf:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:71:15:1D:71:6B:B1:0B:A8:67:05:99:A1:0F:F9:0A:CB:A4:CD:B1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KXEVHXFrsQuoZwWZoQ_5CsukzbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.45.0/24
93.114.183.0/24
Signature Algorithm: sha256WithRSAEncryption
71:9f:2d:2a:f5:2c:0a:56:ee:59:2a:a3:a3:16:7d:bf:0b:3c:
5b:30:52:8a:45:6f:0d:80:60:a5:60:21:76:1e:fe:d3:48:2d:
83:9c:d4:33:41:d4:3f:97:46:34:1e:8c:45:f4:f3:c2:f4:e5:
0b:f1:11:90:4c:38:57:4e:9c:70:2e:fd:59:27:da:bf:88:0a:
94:6f:d5:50:cf:14:c1:f9:f6:96:4d:c9:42:4b:b2:e0:37:0b:
2e:9d:08:c6:1c:13:f5:71:5b:e2:6d:0e:13:ab:0f:a8:1d:93:
03:36:e9:7f:27:e1:de:60:38:55:a2:7e:a6:46:6f:05:9f:44:
0f:c9:3d:0c:75:ad:d0:b3:9c:99:d7:47:7f:f7:41:f6:71:d9:
ab:3e:4c:91:85:f1:d7:ab:63:21:40:5e:d2:fd:d8:a3:81:1a:
99:d1:0f:fc:b2:a9:68:1a:91:46:21:6f:f0:78:a5:0b:e0:93:
c4:9b:f7:56:80:ed:bb:b4:23:0d:8e:3d:89:ef:b7:39:59:65:
2c:21:a2:da:c7:44:13:b2:d9:e1:e7:6a:b9:92:93:c7:12:87:
de:c1:7c:5f:97:e1:66:61:5e:f3:a0:76:2f:09:04:20:29:80:
ce:d9:ad:7b:15:22:81:46:c0:c5:64:b4:fb:f2:28:ca:46:19:
60:84:67:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:02:21 2025 by rpki-client