Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/KXplrrjoXk-pwean-b2EUxmjWf0.roa
File: KXplrrjoXk-pwean-b2EUxmjWf0.roa (raw, json)
Hash identifier: SADzPbjQpUkns1iDSl5tKZ2PbDzP9GLXflBpqt90i+0=
Subject key identifier: 29:7A:65:AE:B8:E8:5E:4F:A9:C1:E6:A7:F9:BD:84:53:19:A3:59:FD
Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial: 01942143E24FE326107AEF9BC6DEB6AA5D7B
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/KXplrrjoXk-pwean-b2EUxmjWf0.roa
Signing time: Wed 01 Jan 2025 09:48:04 +0000
ROA not before: Wed 01 Jan 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397651
IP address blocks: 193.46.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e2:4f:e3:26:10:7a:ef:9b:c6:de:b6:aa:5d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Validity
Not Before: Jan 1 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=297a65aeb8e85e4fa9c1e6a7f9bd845319a359fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f4:d2:bf:71:4c:c6:34:4d:cd:e7:c0:a2:29:
42:2f:b7:41:18:49:46:90:27:07:17:d1:6d:f2:9c:
75:cc:9b:64:f4:bf:48:e7:8f:f3:8b:76:73:b4:9e:
3b:63:47:1e:91:69:92:92:20:b3:9b:7a:40:8f:0a:
94:8e:12:df:21:fd:11:9b:e2:a4:cc:aa:34:ba:a6:
26:bf:d6:aa:9f:76:97:1a:d9:0c:ff:62:20:65:70:
e7:01:3f:bf:61:3d:97:24:64:38:1c:34:20:52:84:
ae:a5:6f:ae:fb:ca:7b:a8:7b:87:42:f0:b2:d0:13:
d8:9b:e6:94:46:90:68:71:66:4c:9b:ee:bf:65:fe:
d9:33:f3:2a:8e:ff:93:0f:a3:3b:55:b1:84:f8:b6:
2d:20:0e:91:1b:76:16:f7:98:78:fc:88:db:f1:cf:
fb:68:d9:17:d8:0c:f8:00:12:01:75:91:e2:d5:43:
4e:73:8b:61:52:ab:8c:8c:35:03:22:43:e3:75:b5:
b2:a4:13:aa:5a:9e:b2:8b:bb:f7:53:34:44:39:c3:
7c:3b:1b:82:34:ab:0d:31:3a:d7:2c:38:a6:91:f9:
8a:46:c1:c0:f1:0c:78:f4:51:8f:23:fc:80:15:c6:
7c:38:1c:85:5c:2c:3a:a3:e6:4e:35:a4:7a:81:d7:
eb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7A:65:AE:B8:E8:5E:4F:A9:C1:E6:A7:F9:BD:84:53:19:A3:59:FD
X509v3 Authority Key Identifier:
keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/KXplrrjoXk-pwean-b2EUxmjWf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.67.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:8d:df:94:2a:30:19:7e:0a:55:69:af:f5:a4:b6:6b:f1:b9:
b5:f6:78:a8:55:23:27:37:96:5f:0d:c4:f8:9d:dd:9a:b6:42:
1e:dc:e5:8f:19:dc:0d:51:57:5a:49:dc:42:1b:68:ae:83:e8:
e3:a4:3c:e1:64:61:2a:5a:34:2a:e8:e4:df:96:84:48:c8:83:
6e:4c:b8:33:d1:19:6d:dc:8d:52:5c:70:56:62:85:fb:8b:e7:
5e:b9:ee:b3:82:57:c4:de:e7:b0:a9:d0:45:a3:a9:4c:a5:a2:
1e:f4:c8:43:2c:d5:6d:d2:95:39:3f:03:54:e4:3e:b2:4b:ae:
5e:7b:43:4f:2c:9d:6c:0c:bd:8f:86:3c:82:cc:4c:75:a6:33:
8c:ec:26:19:1a:96:96:b4:16:32:a3:68:e8:cc:9e:37:fd:c0:
79:40:af:7e:bc:b5:ee:a5:e3:85:99:d0:01:f9:5b:25:1e:ff:
c4:c9:fe:9c:73:4b:00:61:1e:66:7e:26:4a:03:5c:c4:bf:62:
33:0e:1c:ce:67:d8:43:61:7c:38:db:72:39:8d:78:3c:4e:25:
4d:fa:ff:98:ef:bc:b0:9b:54:bb:c4:0c:ee:a2:69:0c:a4:2f:
6e:85:4b:5b:21:8b:21:9e:c4:d5:c5:46:b7:37:df:aa:ef:06:
ae:6e:85:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:10:35 2025 by rpki-client