Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/KNlHZhzvj3c5evx_WYZ3PPymDMg.roa
File: KNlHZhzvj3c5evx_WYZ3PPymDMg.roa (raw, json)
Hash identifier: VIooQbblCXzCvlc89EdzqvODc1G/is8eypm36M8wtX0=
Subject key identifier: 28:D9:47:66:1C:EF:8F:77:39:7A:FC:7F:59:86:77:3C:FC:A6:0C:C8
Certificate issuer: /CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Certificate serial: 01941F8C3D16B63460060259B4D303F0DD34
Authority key identifier: 6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/KNlHZhzvj3c5evx_WYZ3PPymDMg.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 46.245.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3d:16:b6:34:60:06:02:59:b4:d3:03:f0:dd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28d947661cef8f77397afc7f5986773cfca60cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:28:f0:53:a9:be:15:08:53:bf:05:04:ed:db:
41:d8:06:09:62:76:37:48:8e:7c:81:0b:d7:35:b0:
9e:18:ae:87:f6:4e:97:db:60:3c:40:0c:16:cc:79:
c2:0b:5d:09:0c:95:44:90:25:3b:88:0e:35:e9:74:
4c:db:e4:cd:e2:ce:f9:46:4a:73:d1:9c:f9:aa:f6:
af:8c:7c:14:83:27:fa:03:1b:91:8a:b5:93:db:9e:
d8:23:fc:a1:54:84:cc:a8:82:8b:c4:c8:b7:b2:03:
74:97:85:90:9d:4e:05:83:7e:62:66:92:80:a0:90:
b4:f1:57:7d:9a:2f:0b:c6:76:8a:ab:75:4e:bb:09:
17:37:73:0a:22:de:fa:a1:93:9b:9e:e7:d5:0e:64:
b4:66:cf:33:ab:1c:51:48:02:e2:83:eb:5f:ed:a3:
ca:11:f8:3d:e1:29:e8:07:7a:3b:b6:ef:4e:a7:ea:
fd:d7:df:65:f0:57:1c:b0:bc:81:f7:9c:c4:bc:20:
f9:71:f3:7c:2a:72:f1:26:91:7e:13:f1:b1:14:f4:
c7:a6:99:1a:61:33:85:6e:7f:e2:6e:e0:27:a1:3a:
9f:0e:fe:3a:75:22:f5:bf:33:4a:0b:74:e3:f9:8f:
20:58:72:7b:0d:1a:09:52:b9:a7:83:77:4c:f0:33:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D9:47:66:1C:EF:8F:77:39:7A:FC:7F:59:86:77:3C:FC:A6:0C:C8
X509v3 Authority Key Identifier:
keyid:6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/KNlHZhzvj3c5evx_WYZ3PPymDMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.239.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:91:ad:c3:02:45:1b:73:39:b4:7b:cd:88:81:62:92:d5:4c:
c0:8c:dc:5a:a0:37:2a:33:0d:67:81:5c:01:76:40:24:cd:5e:
f1:1a:3b:2f:e1:cc:82:33:82:99:1c:27:0c:b9:c2:dd:5d:b3:
fa:61:92:e8:3d:d2:22:dd:8e:90:48:56:b7:41:5e:08:b3:1f:
0e:3a:df:d8:72:d9:d5:b7:00:09:cb:a2:1d:6d:74:90:c0:17:
77:a3:a0:6c:7e:d9:02:5f:80:e5:a0:df:d6:8e:bc:09:db:d1:
64:72:7a:8a:de:25:da:ca:4c:c5:a7:7e:63:65:4f:a5:9f:d0:
86:6e:59:55:b2:97:cc:ea:94:2b:59:de:c3:03:22:2f:b9:11:
a3:4f:23:c3:0d:64:cf:54:fe:5e:94:dd:53:09:14:6d:3c:63:
ab:b4:11:3d:e7:31:ce:22:69:93:50:ad:15:e6:e9:05:49:a4:
fd:a7:3f:dc:2f:16:d1:40:28:5d:7f:a9:98:79:b0:21:a8:2a:
18:be:63:9f:26:a9:08:62:ab:75:1a:c5:5c:79:61:d4:6a:ea:
e9:1b:62:b5:1c:c5:13:b8:09:0e:74:9b:28:8d:95:f4:ef:12:
df:e0:98:f4:53:2a:b5:4b:b6:f2:bf:b2:46:7f:9a:91:05:a4:
59:53:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:40:45 2025 by rpki-client