Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/K1hHLihKHxHk06eTdbGXntsm7n0.roa
File: K1hHLihKHxHk06eTdbGXntsm7n0.roa (raw, json)
Hash identifier: L22VRHHVigykudQA1GmcYoeypbh6Yu5VUYyqOcGQaXE=
Subject key identifier: 2B:58:47:2E:28:4A:1F:11:E4:D3:A7:93:75:B1:97:9E:DB:26:EE:7D
Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial: 019421B1DD0D9747BDBD45665FDB2A090072
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/K1hHLihKHxHk06eTdbGXntsm7n0.roa
Signing time: Wed 01 Jan 2025 11:48:12 +0000
ROA not before: Wed 01 Jan 2025 11:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34182
IP address blocks: 91.238.144.0/24 maxlen: 24
2001:67c:938::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:dd:0d:97:47:bd:bd:45:66:5f:db:2a:09:00:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
Validity
Not Before: Jan 1 11:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b58472e284a1f11e4d3a79375b1979edb26ee7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:72:45:d0:47:f0:f2:f4:27:94:81:37:08:
c1:bf:9e:91:36:27:39:42:12:87:b2:17:44:b3:c4:
ec:07:76:5f:d1:cc:f6:e4:ed:e9:de:c8:97:72:99:
35:05:54:06:f8:19:82:34:24:ff:3c:6a:ff:94:92:
c9:a4:6d:03:fb:ed:a3:07:50:e4:d4:21:43:9c:b5:
fa:91:06:05:2c:a1:e8:ac:81:ba:cf:a0:47:cf:11:
26:21:16:3d:41:5b:2a:cc:33:30:79:f2:0d:43:ba:
12:7b:2e:05:27:81:a1:3b:d4:20:33:a4:2b:aa:2f:
0b:38:ad:7d:2f:6a:d9:fa:e4:ed:e1:00:02:8e:f0:
e5:89:62:60:6d:f4:9e:53:93:a7:15:ee:6f:01:96:
e6:27:4a:1f:e6:88:ec:01:2d:8f:3f:24:28:b7:94:
ca:a9:73:9b:d8:4d:46:48:e7:6a:39:ed:16:c3:ff:
88:59:e0:c5:df:0e:64:86:cd:8f:d3:8f:3c:5e:94:
01:a6:02:e9:ce:14:69:43:f6:80:f3:ce:3f:9b:79:
57:e3:a3:d7:22:cc:aa:bf:e9:40:da:ba:ee:aa:f4:
96:57:40:3f:54:ac:2a:52:f2:95:08:38:e7:9b:14:
2f:09:02:7a:e7:8a:e8:f8:fe:83:c5:68:ae:91:b5:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:58:47:2E:28:4A:1F:11:E4:D3:A7:93:75:B1:97:9E:DB:26:EE:7D
X509v3 Authority Key Identifier:
keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/K1hHLihKHxHk06eTdbGXntsm7n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.144.0/24
IPv6:
2001:67c:938::/48
Signature Algorithm: sha256WithRSAEncryption
a4:76:f5:da:d7:42:79:c3:3a:21:03:25:61:92:84:82:e1:8e:
76:d5:51:77:cc:3b:f2:3c:35:69:67:9d:07:2f:24:a1:10:42:
d8:fa:34:89:fb:d0:3a:fb:ab:3e:9f:b0:76:ce:ab:ac:89:f1:
3d:d1:b1:2b:1e:06:1f:e0:e8:f7:f1:3f:c4:90:dc:2a:70:42:
ba:2d:4c:32:12:3e:27:74:6f:be:61:72:50:4b:2b:f9:ff:a5:
4f:ce:e2:a0:ac:13:e9:c4:18:18:25:61:d1:12:53:97:0b:94:
de:e8:8b:76:73:fb:cd:0c:85:1d:10:05:65:94:d6:e0:16:00:
0a:0c:a5:a6:31:2c:40:99:c7:dd:98:d1:b0:79:05:b8:a7:ea:
ad:b4:1a:34:e7:e4:eb:55:c4:cd:de:dd:86:e5:8a:0c:bd:98:
73:37:df:65:b5:64:ae:9f:e6:52:c6:78:97:21:e4:0b:34:ce:
ee:81:c7:bc:17:c0:c2:98:3d:92:0c:c4:88:3b:d5:4b:4d:b9:
36:17:51:83:4b:55:06:2e:ac:d3:5a:49:ce:08:69:7c:ed:e7:
94:37:2d:6b:85:64:7a:a8:7d:a9:ad:83:28:79:7a:17:76:c8:
2d:5e:b6:ef:0c:1c:3f:58:34:a8:db:33:2a:69:e0:b1:0c:f0:
07:06:a8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:02:28 2025 by rpki-client