Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/kVipI_xyp0_kuJlOJOnoAHsePks.roa
File: kVipI_xyp0_kuJlOJOnoAHsePks.roa (raw, json)
Hash identifier: 1FUuhHfAvSDiWJAZOii+4sL3nFhAdH6ZW0fC89DJLKA=
Subject key identifier: 91:58:A9:23:FC:72:A7:4F:E4:B8:99:4E:24:E9:E8:00:7B:1E:3E:4B
Certificate issuer: /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Certificate serial: 019420681C0A083DBE44AA828586FCA01F41
Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/kVipI_xyp0_kuJlOJOnoAHsePks.roa
Signing time: Wed 01 Jan 2025 05:48:01 +0000
ROA not before: Wed 01 Jan 2025 05:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60164
IP address blocks: 185.54.148.0/22 maxlen: 24
2a04:d280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:1c:0a:08:3d:be:44:aa:82:85:86:fc:a0:1f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Validity
Not Before: Jan 1 05:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9158a923fc72a74fe4b8994e24e9e8007b1e3e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:36:a7:38:04:32:ae:4e:a6:60:18:e8:dd:2e:
93:64:91:f4:33:61:f0:8f:2a:06:dc:70:00:e5:04:
40:e5:d3:d0:34:b0:83:9b:c8:9c:f4:ed:b3:04:b9:
c2:cd:d0:6c:d6:5d:36:2e:39:bd:6a:d9:b7:d7:d9:
38:48:64:e2:50:9e:b8:6c:25:a4:d2:d2:41:1b:53:
36:24:3b:68:1c:65:4d:5c:32:e9:d6:c0:03:ce:9b:
e0:c9:4c:0d:af:70:02:ab:92:40:c4:7c:c5:23:07:
84:c2:f2:2c:e8:aa:c5:02:0b:2b:41:88:7f:fb:4a:
93:fa:69:0d:b4:56:f8:fb:2f:31:ef:98:83:ea:05:
eb:0d:1f:71:37:33:88:29:8c:36:e8:22:2e:9e:85:
63:2f:9c:85:f7:02:f1:ed:44:74:88:86:47:03:6a:
f9:2b:38:f1:8a:2f:0f:f9:5a:45:ae:a7:ba:d9:a1:
b5:a0:6c:49:c7:55:d9:4b:b3:1a:95:7f:38:50:65:
ed:40:01:93:db:ae:f7:06:70:7a:0b:c6:c2:a8:23:
b5:1d:c5:2c:ef:19:31:77:f2:98:74:bc:51:97:4a:
c3:85:40:7d:03:d5:23:4a:03:84:70:02:cb:06:39:
8a:61:a5:de:b7:45:d8:1e:7f:97:e1:3d:65:f6:b4:
fb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:58:A9:23:FC:72:A7:4F:E4:B8:99:4E:24:E9:E8:00:7B:1E:3E:4B
X509v3 Authority Key Identifier:
keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/kVipI_xyp0_kuJlOJOnoAHsePks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.148.0/22
IPv6:
2a04:d280::/29
Signature Algorithm: sha256WithRSAEncryption
68:d3:cd:e5:02:92:ce:7b:71:a9:be:b9:72:73:02:67:96:41:
79:68:f2:e0:11:33:ba:f5:1f:82:c1:7d:54:2a:b6:25:7b:90:
d1:0d:10:18:bd:86:6d:46:dd:4f:46:17:05:a1:49:1d:85:2c:
53:4d:a2:ad:7f:ae:32:f2:83:0a:7f:c0:35:d4:1a:6f:0f:72:
14:80:f7:41:51:6a:65:03:67:2f:b5:eb:ce:e4:6f:ac:08:81:
34:0e:d5:4c:d1:ac:e1:52:a5:34:9e:a7:e0:ce:b6:d7:93:f2:
04:e3:e6:46:51:5a:09:a9:36:26:dd:e6:ff:cb:a3:97:03:cc:
1b:c5:c4:c8:03:78:ed:7d:1e:ca:8b:df:74:16:e8:4b:a9:82:
d5:9b:c5:be:21:36:f0:03:76:97:c8:83:43:ca:30:c0:af:63:
4a:24:48:4b:a0:6f:19:ab:2c:7a:b7:f3:6c:52:82:35:e7:8f:
b4:5f:a3:47:60:8d:85:17:26:77:dc:73:c1:86:85:f0:c0:c7:
f6:5e:af:36:e2:31:89:f4:97:eb:e0:03:be:7a:a2:34:59:84:
94:cc:31:72:38:a8:b8:d2:bd:fb:27:83:55:08:d4:24:b0:87:
28:48:df:95:05:48:13:3e:db:c3:84:bf:0c:2b:94:55:ab:60:
61:bf:5d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:06:01 2025 by rpki-client