Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/KX4BdF1jeIPrlBaQXcm4-FxDbVI.roa
File: KX4BdF1jeIPrlBaQXcm4-FxDbVI.roa (raw, json)
Hash identifier: Tzk0TQLXuHX7Z8zB6m4PRwPBrghVQJ9zPu5wXgONfUs=
Subject key identifier: 29:7E:01:74:5D:63:78:83:EB:94:16:90:5D:C9:B8:F8:5C:43:6D:52
Certificate issuer: /CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Certificate serial: 01942444CEC96A0EF67C95BBE0EAC73F3938
Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/KX4BdF1jeIPrlBaQXcm4-FxDbVI.roa
Signing time: Wed 01 Jan 2025 23:47:56 +0000
ROA not before: Wed 01 Jan 2025 23:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206924
IP address blocks: 91.198.241.0/24 maxlen: 24
185.230.223.0/24 maxlen: 24
2a0c:2f05:3512::/48 maxlen: 48
2a0c:2f07:d::/48 maxlen: 48
2a0c:2f07:f::/48 maxlen: 48
2a0c:2f07:29::/48 maxlen: 48
2a0c:2f07:384::/48 maxlen: 48
2a0c:2f07:666::/48 maxlen: 48
2a0c:2f07:ac1::/48 maxlen: 48
2a0c:2f07:4663::/48 maxlen: 48
2a0c:2f07:4896::/48 maxlen: 48
2a0c:2f07:9459::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ce:c9:6a:0e:f6:7c:95:bb:e0:ea:c7:3f:39:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Validity
Not Before: Jan 1 23:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=297e01745d637883eb9416905dc9b8f85c436d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:62:6e:c0:a5:07:93:19:a7:4e:db:d8:52:
e8:64:d2:5a:34:40:fc:14:19:42:b6:28:3f:5a:e9:
df:86:e5:69:fe:a1:ed:62:d8:54:88:4a:58:39:9e:
97:3e:50:4b:2c:9e:3e:b0:ab:68:5f:bc:14:a7:c8:
39:65:16:1d:de:8c:38:d7:c5:ba:26:f2:70:d9:d1:
22:af:f7:93:7d:fc:e1:73:a9:fe:ac:6b:56:86:38:
c6:7f:3c:66:cc:9b:7c:78:52:1c:46:0e:c4:26:8e:
6d:e4:e9:30:56:84:9f:19:52:2f:48:47:16:a2:4f:
cd:bd:57:87:d8:67:9d:bb:39:ad:05:25:c7:0d:32:
c8:80:ec:bd:38:c6:58:55:08:6d:7a:58:cb:a5:7c:
20:7b:3e:f8:7d:f6:0f:d8:c1:0c:0a:0a:3e:30:be:
97:b6:1c:0e:70:04:88:97:a3:00:12:68:3d:4e:15:
9e:d3:10:0b:e4:fe:31:bc:bc:f5:12:60:a8:cc:4c:
5f:90:2f:a1:87:3d:ee:5c:2b:d0:aa:41:b6:6b:48:
d3:e8:da:38:75:67:37:3d:05:69:6f:56:2a:94:82:
61:a7:45:46:50:fe:52:bd:5c:13:04:5e:45:d3:cb:
22:7d:9d:ec:ab:63:34:e9:ce:72:a6:db:a1:72:b5:
81:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7E:01:74:5D:63:78:83:EB:94:16:90:5D:C9:B8:F8:5C:43:6D:52
X509v3 Authority Key Identifier:
keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/KX4BdF1jeIPrlBaQXcm4-FxDbVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.241.0/24
185.230.223.0/24
IPv6:
2a0c:2f05:3512::/48
2a0c:2f07:d::/48
2a0c:2f07:f::/48
2a0c:2f07:29::/48
2a0c:2f07:384::/48
2a0c:2f07:666::/48
2a0c:2f07:ac1::/48
2a0c:2f07:4663::/48
2a0c:2f07:4896::/48
2a0c:2f07:9459::/48
Signature Algorithm: sha256WithRSAEncryption
47:78:a9:84:d8:1d:11:f3:78:a7:4d:95:e6:70:92:58:7f:c7:
40:f1:c3:e5:8e:51:6f:ec:ec:04:43:b6:84:54:f6:7e:0f:06:
98:c3:b9:70:af:4a:b6:c7:6c:33:dd:3c:2d:32:4c:32:79:1a:
59:05:0b:5e:a7:af:4f:8a:ee:43:c1:87:22:05:1b:aa:94:83:
02:22:54:30:fb:3e:df:80:b6:db:24:f6:17:51:ce:51:d3:36:
bc:7b:9f:d3:a8:23:35:b2:0a:b2:5c:70:ff:3f:6a:16:64:32:
37:70:21:ba:08:44:9c:cf:04:9c:11:3f:f4:38:33:0b:50:14:
18:0c:f8:55:e9:84:1c:a8:73:2b:bf:b2:bb:d2:fb:5f:64:6e:
c7:fe:89:23:39:2e:76:c9:35:38:6a:00:0a:92:a6:ed:bd:35:
4a:69:9f:6c:10:43:32:e5:f6:54:66:2f:2f:3d:90:06:80:6b:
aa:17:af:13:01:3c:a8:ef:15:93:e6:02:91:58:e2:da:03:d6:
cc:a6:9f:05:61:3d:a8:d5:64:65:49:f1:fd:ae:ff:19:84:f4:
7e:6e:54:ca:7e:3b:9f:c9:99:88:37:d0:ee:1d:ec:62:e3:c6:
46:df:90:1f:18:24:7c:0a:79:2b:29:eb:6c:12:b2:df:36:12:
97:66:9a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:58:51 2025 by rpki-client