Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/ktlX_rOO3raXC83lO5IDJm4TL_s.roa
File: ktlX_rOO3raXC83lO5IDJm4TL_s.roa (raw, json)
Hash identifier: Zr/8yGPdIQcj4Ieb5b5PEzjsiZpTZuJn6Ep06lhBllc=
Subject key identifier: 92:D9:57:FE:B3:8E:DE:B6:97:0B:CD:E5:3B:92:03:26:6E:13:2F:FB
Certificate issuer: /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Certificate serial: 019427B5FAFDD8233C1CAC1FD238561BAA54
Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/ktlX_rOO3raXC83lO5IDJm4TL_s.roa
Signing time: Thu 02 Jan 2025 15:50:25 +0000
ROA not before: Thu 02 Jan 2025 15:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24961
IP address blocks: 193.176.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:fa:fd:d8:23:3c:1c:ac:1f:d2:38:56:1b:aa:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Validity
Not Before: Jan 2 15:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92d957feb38edeb6970bcde53b9203266e132ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3d:2b:b4:1e:a4:e4:c1:7b:8b:60:8b:b3:40:
ec:ad:56:02:e3:43:a5:e9:2e:0b:85:82:01:c3:f4:
8f:29:68:d6:69:4e:64:ca:9b:bf:ff:f0:2d:37:77:
83:b4:00:da:1b:d4:e2:7d:af:ac:df:bf:f5:ab:2a:
da:14:1b:22:fb:ce:c3:0d:cb:d0:69:49:f7:92:9f:
6c:2a:11:4b:8a:2e:c1:53:90:74:f6:5c:d2:ca:ba:
4e:f1:b6:59:b1:d0:e5:18:f9:9c:27:1c:67:a3:2b:
e8:7a:dc:69:7a:8e:b1:11:33:c4:19:46:92:ee:37:
31:85:e9:2b:d0:5c:df:35:63:ac:4f:89:9b:03:a4:
e2:c4:d2:1f:38:1e:8d:04:f4:c8:68:fa:28:b3:65:
59:37:6a:c7:fb:8f:a8:c9:b4:06:35:2d:76:c4:52:
b2:37:7c:7a:1d:c3:bf:a9:63:17:59:8c:f0:95:c1:
07:75:53:be:e8:6e:3e:1e:d1:eb:e7:bf:89:41:f1:
48:7c:50:85:54:2d:d9:b3:35:cd:d9:64:7b:05:bd:
67:44:5f:e6:76:05:9d:91:e3:8c:75:2f:a1:bb:36:
1d:24:3f:3b:64:c8:6b:44:a4:03:3a:11:4e:fa:90:
3e:a8:19:73:f8:96:75:5a:8b:e6:37:f4:7b:32:0c:
02:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D9:57:FE:B3:8E:DE:B6:97:0B:CD:E5:3B:92:03:26:6E:13:2F:FB
X509v3 Authority Key Identifier:
keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/ktlX_rOO3raXC83lO5IDJm4TL_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.1.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:4e:8c:fb:46:ef:43:8d:de:80:ae:c3:94:71:87:cf:16:e0:
7c:2c:52:8b:d3:c0:48:1f:29:15:fc:a9:2f:b9:62:14:44:b5:
03:04:eb:6b:e0:75:25:00:d3:1e:16:38:3d:4a:48:91:1c:76:
c3:c0:c9:80:24:0c:ff:8d:ff:7c:60:71:47:f2:de:3e:03:90:
69:b0:73:e6:79:b2:e6:77:09:4d:b8:30:dc:a5:90:bf:ee:cc:
3b:f1:cf:ed:af:85:78:06:26:5d:00:56:f1:32:b2:3c:cc:57:
f5:12:bd:d8:c7:34:8b:5b:1e:10:dd:8c:d2:78:4d:d7:c6:33:
7a:69:b1:e6:4f:cb:10:b9:07:50:ee:95:ff:42:84:61:85:05:
86:26:21:f2:1e:e8:e0:2e:7e:9b:48:3e:a1:6f:ed:e2:69:19:
31:b0:c2:7c:68:97:72:1d:70:de:09:00:f4:6e:65:79:dd:c6:
b8:3c:ea:64:08:00:a5:4a:a3:69:d2:b4:10:24:71:56:ea:af:
75:d7:9f:65:a1:15:6f:a5:8e:79:15:cd:cf:7e:e0:1d:43:a3:
6b:f4:6f:42:50:e6:e2:59:7d:c2:fc:c5:83:89:59:a4:eb:5b:
5b:85:11:bc:3d:67:0e:b4:f1:33:0c:29:b0:18:4a:2c:bd:42:
3b:c4:1b:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntfr92CM8HKwf0jhWG6pUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjRlMWZkYjQyNGE5MTIwMjIzYjNhNzVjNmNjYzMxYjZm
NjIyNGEwHhcNMjUwMTAyMTU1MDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmQ5NTdmZWIzOGVkZWI2OTcwYmNkZTUzYjkyMDMyNjZlMTMyZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT0rtB6k5MF7i2CLs0DsrVYC40Ol
6S4LhYIBw/SPKWjWaU5kypu///AtN3eDtADaG9Tifa+s37/1qyraFBsi+87DDcvQ
aUn3kp9sKhFLii7BU5B09lzSyrpO8bZZsdDlGPmcJxxnoyvoetxpeo6xETPEGUaS
7jcxhekr0FzfNWOsT4mbA6TixNIfOB6NBPTIaPoos2VZN2rH+4+oybQGNS12xFKy
N3x6HcO/qWMXWYzwlcEHdVO+6G4+HtHr57+JQfFIfFCFVC3ZszXN2WR7Bb1nRF/m
dgWdkeOMdS+huzYdJD87ZMhrRKQDOhFO+pA+qBlz+JZ1WovmN/R7MgwCTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJLZV/6zjt62lwvN5TuSAyZuEy/7MB8GA1UdIwQY
MBaAFLv04f20JKkSAiOzp1xszDG29iJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xMWNkMTAtM2VmNy00MTA1LTgyNDgt
YmE1MTMyM2RiNGU1LzEva3RsWF9yT08zcmFYQzgzbE81SURKbTRUTF9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xMWNkMTAtM2VmNy00MTA1LTgyNDgtYmE1MTMyM2RiNGU1
LzEvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbABMA0G
CSqGSIb3DQEBCwUAA4IBAQCqToz7Ru9Djd6ArsOUcYfPFuB8LFKL08BIHykV/Kkv
uWIURLUDBOtr4HUlANMeFjg9SkiRHHbDwMmAJAz/jf98YHFH8t4+A5BpsHPmebLm
dwlNuDDcpZC/7sw78c/tr4V4BiZdAFbxMrI8zFf1Er3YxzSLWx4Q3YzSeE3XxjN6
abHmT8sQuQdQ7pX/QoRhhQWGJiHyHujgLn6bSD6hb+3iaRkxsMJ8aJdyHXDeCQD0
bmV53ca4POpkCAClSqNp0rQQJHFW6q91159loRVvpY55Fc3PfuAdQ6Nr9G9CUObi
WX3C/MWDiVmk61tbhRG8PWcOtPEzDCmwGEosvUI7xBsE
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:36:17 2025 by rpki-client