Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/kFARCoMgCMuyc0Id-ilQ8NRgEfU.roa
File: kFARCoMgCMuyc0Id-ilQ8NRgEfU.roa (raw, json)
Hash identifier: RNNZrUNA+CZKPf9RkgYbSIfAuTpPWf45VRn5TZAQ/g0=
Subject key identifier: 90:50:11:0A:83:20:08:CB:B2:73:42:1D:FA:29:50:F0:D4:60:11:F5
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01941FFA792EEFB5362618B002DFB65D1E26
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/kFARCoMgCMuyc0Id-ilQ8NRgEfU.roa
Signing time: Wed 01 Jan 2025 03:48:16 +0000
ROA not before: Wed 01 Jan 2025 03:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201695
IP address blocks: 82.160.134.0/24 maxlen: 24
94.40.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:79:2e:ef:b5:36:26:18:b0:02:df:b6:5d:1e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9050110a832008cbb273421dfa2950f0d46011f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:49:87:50:bc:c7:b8:68:46:c7:14:ad:97:
83:10:42:ae:a0:cd:55:7b:76:29:58:6e:c1:ce:7b:
d0:4d:3f:e2:34:76:5d:dd:6b:24:23:24:93:2a:e5:
86:a9:50:0f:75:2d:c3:74:4c:97:a5:c7:74:b3:ff:
9f:ab:05:ee:31:0e:e9:f8:40:fb:08:8a:0e:d3:4a:
cf:f8:4e:08:0b:24:53:e1:06:f8:bc:a5:19:dd:5e:
07:db:01:fc:65:2c:ac:d9:ba:36:bc:9b:76:50:83:
9f:c2:2d:a1:4d:0a:d8:86:c4:95:f9:ec:ca:14:b3:
bf:ee:b5:be:89:8a:23:11:1d:f4:0c:4c:4e:b1:e9:
38:85:e6:94:65:f5:94:43:7e:ac:d7:f7:ce:a3:bf:
ff:6b:5e:90:ad:34:8c:08:21:46:80:c8:03:11:c2:
2d:9b:bb:d7:a9:24:42:0b:c7:f4:ce:14:f7:1a:51:
d8:7b:bd:b9:0f:dd:1a:93:48:1e:a6:0d:32:7a:54:
f4:e2:6b:e8:d8:df:da:b8:d5:db:fe:01:10:02:56:
22:41:3a:a4:6a:3e:c2:5e:f6:98:c8:81:e1:64:04:
aa:13:75:d6:71:23:ee:e8:0f:4b:77:76:3e:48:8b:
15:77:d6:6e:6c:95:c2:21:e5:f6:66:b0:d7:84:31:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:50:11:0A:83:20:08:CB:B2:73:42:1D:FA:29:50:F0:D4:60:11:F5
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/kFARCoMgCMuyc0Id-ilQ8NRgEfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.134.0/24
94.40.87.0/24
Signature Algorithm: sha256WithRSAEncryption
75:3b:f5:ce:1a:83:1f:dd:ea:85:c5:f7:30:ca:a4:14:5f:9d:
b2:cc:81:16:1c:aa:98:01:91:7e:ff:ad:85:21:60:9c:69:3c:
59:3f:de:1a:aa:fd:6f:0c:d3:58:50:6b:6e:a0:01:76:19:2e:
76:e3:27:3e:16:89:68:06:cd:69:a8:62:27:80:28:5a:a2:52:
e9:89:b6:ce:bd:d4:ad:d6:72:09:89:c0:a8:5b:ae:61:ef:c0:
82:07:50:bf:f9:6b:e0:1b:98:84:fb:52:28:5c:0d:98:34:c5:
15:41:a3:18:7f:fd:f5:8f:55:89:15:69:1e:46:11:97:9b:23:
84:f0:1e:20:39:83:11:89:54:21:01:2d:66:31:92:cc:a2:03:
e0:38:48:b1:6b:39:cc:e8:9b:c9:ca:24:40:af:4d:7b:41:9e:
5d:c7:13:86:cb:73:5d:af:b6:2b:5d:53:cd:90:a8:0f:a2:52:
d2:7e:d6:fe:05:72:81:a5:03:a8:ab:da:f6:d6:fb:31:3f:73:
82:d4:4d:b8:db:09:65:68:5b:8f:3b:9b:98:e0:84:ad:04:5e:
be:7f:ad:30:5f:8f:65:3d:89:3d:fc:0e:a2:a1:62:a3:12:98:
40:c8:f5:ef:89:94:5a:1f:1c:c2:9b:dc:62:cf:53:27:9f:10:
d1:06:81:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:54:53 2025 by rpki-client