Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/KMmlO43Rv96kDX6Ab5HcGfGeOR8.roa
File: KMmlO43Rv96kDX6Ab5HcGfGeOR8.roa (raw, json)
Hash identifier: L3170dNBeVym1LetllR1OhZGD4w6jRu4zfzxNZlF3qg=
Subject key identifier: 28:C9:A5:3B:8D:D1:BF:DE:A4:0D:7E:80:6F:91:DC:19:F1:9E:39:1F
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B2160317533E531008F9BBB31479C9
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/KMmlO43Rv96kDX6Ab5HcGfGeOR8.roa
Signing time: Wed 01 Jan 2025 11:48:26 +0000
ROA not before: Wed 01 Jan 2025 11:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39112
IP address blocks: 82.177.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:16:03:17:53:3e:53:10:08:f9:bb:b3:14:79:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28c9a53b8dd1bfdea40d7e806f91dc19f19e391f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:04:eb:5b:7c:79:d3:ba:c1:62:77:8f:1b:
c8:ad:ed:5a:33:01:65:85:7c:9f:9c:ee:7e:95:c0:
f4:5c:8b:04:aa:8d:f8:97:f3:2e:87:97:22:95:63:
15:3f:d6:3e:e4:dd:d6:3e:13:d5:a8:35:92:7a:b4:
f4:8b:5b:47:89:16:64:82:25:81:47:e6:4b:b2:72:
a3:45:19:f1:49:c0:5e:0b:da:b6:06:b4:1b:45:73:
4f:61:f2:df:6c:a7:de:21:26:c9:38:61:a2:9f:42:
b9:4b:b7:6b:65:da:a1:20:e3:b5:27:f1:3b:a0:6c:
bc:21:bb:f9:ff:6a:51:3b:3d:9b:b0:76:bd:51:05:
01:ae:16:57:2a:79:1f:b3:c3:21:30:8a:84:f0:a1:
22:0e:f1:34:23:ac:0a:68:c4:21:ef:a7:65:4b:1c:
f2:38:0b:c6:12:d3:79:4a:c9:fb:0f:0d:59:67:39:
77:65:8b:41:47:15:e4:ca:aa:25:42:a9:80:a0:69:
61:ec:ba:c3:22:51:77:ff:58:c8:9a:19:21:de:82:
bd:8f:e5:8d:bb:23:5c:b3:ca:0e:80:fb:eb:fc:3c:
df:b2:48:90:56:ff:fd:2d:7a:5f:a9:f8:40:c8:c2:
0a:7a:6d:86:b0:a1:6f:ba:6b:0c:53:1c:84:13:b3:
9c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C9:A5:3B:8D:D1:BF:DE:A4:0D:7E:80:6F:91:DC:19:F1:9E:39:1F
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/KMmlO43Rv96kDX6Ab5HcGfGeOR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.253.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:d1:e1:9b:2b:ae:e9:b9:f3:70:75:cd:21:12:61:ba:c1:cd:
ea:00:3c:6c:6d:b6:dd:bb:4a:3a:7a:95:29:23:b5:05:b3:c7:
ea:00:72:7e:2a:94:46:24:c5:9f:4f:d2:48:11:13:02:79:b5:
33:84:f7:17:db:54:6a:25:a4:74:8c:32:2a:95:8f:02:67:1e:
d8:34:fd:b8:e7:28:26:5f:a0:5c:f6:02:93:81:b6:16:6f:7a:
6a:82:31:65:bd:40:43:d3:96:24:fe:c4:f2:0e:42:b1:0d:ee:
77:3a:a0:69:6b:e5:31:2a:2e:70:c7:53:4f:ef:b7:a7:48:d5:
c8:52:91:b4:10:c8:17:7f:11:c0:33:ff:c8:25:61:22:6d:96:
6f:8d:73:76:db:eb:21:22:59:02:a8:5e:e6:63:26:2a:d6:4f:
8b:c1:7a:5c:a7:f0:32:9b:c2:1f:4a:98:c5:3d:7c:c4:82:f3:
24:30:3c:11:81:9b:a0:89:94:74:29:9b:42:cf:0e:71:cf:03:
be:7e:b1:bb:3a:48:36:92:19:5a:ab:ae:69:86:e3:86:be:61:
da:7d:96:af:ab:d2:79:8a:8a:8f:8c:ce:59:e7:90:0e:0a:20:
dd:ce:9d:66:ee:b8:21:e9:23:61:ce:45:42:17:1e:75:bd:79:
52:0a:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:43 2025 by rpki-client