Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/krhkLUIQBsN1Y_z2MNatuN7IicE.roa
File: krhkLUIQBsN1Y_z2MNatuN7IicE.roa (raw, json)
Hash identifier: EeXfXB+LCRt55BDPuaJwFhTvlXUxMPxkOpiH9rPmQPk=
Subject key identifier: 92:B8:64:2D:42:10:06:C3:75:63:FC:F6:30:D6:AD:B8:DE:C8:89:C1
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01942067F0359A796041B51F79AD190B74C8
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/krhkLUIQBsN1Y_z2MNatuN7IicE.roa
Signing time: Wed 01 Jan 2025 05:47:50 +0000
ROA not before: Wed 01 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209988
IP address blocks: 2a12:3fc2:1200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f0:35:9a:79:60:41:b5:1f:79:ad:19:0b:74:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92b8642d421006c37563fcf630d6adb8dec889c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:26:ef:4b:c7:83:10:89:74:24:74:bd:b9:63:
e4:3e:cf:d5:3c:71:26:cd:44:04:e8:50:51:41:c3:
83:cb:81:12:82:ed:9f:74:03:a8:5b:15:f5:e1:f8:
2e:33:33:12:f5:3c:fb:cd:df:5c:3e:24:1f:a4:c4:
36:06:89:f1:3c:d5:7f:6c:ea:a3:5b:b5:77:95:84:
b8:11:2d:43:6c:bb:40:7b:ee:50:18:a0:dc:b8:ba:
34:f0:8b:0f:d7:6e:78:78:0d:d1:50:e3:89:78:ab:
95:47:c0:85:f0:ed:6a:02:77:c4:2a:c5:49:a3:0d:
65:de:78:44:98:1d:ee:e8:77:b9:b1:3d:84:bf:b7:
51:f1:10:9a:19:48:58:e9:77:73:78:10:28:fe:84:
1a:02:99:db:17:a5:27:6f:17:a0:56:c9:41:31:69:
37:9a:0b:a8:21:54:e6:3e:11:48:34:41:c6:f9:f1:
43:7b:61:70:0b:87:ce:4d:03:c6:09:c4:3e:c8:b9:
89:25:97:e1:d1:0e:2c:2f:27:9f:73:c0:3d:ef:d7:
73:c0:ff:1b:6b:5e:f0:fd:b5:f1:10:33:d5:c5:9a:
61:70:8c:fe:57:ca:3d:e8:37:54:38:c7:19:5c:85:
fc:6c:96:28:94:95:ba:f4:59:3a:2c:ff:8a:0a:84:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B8:64:2D:42:10:06:C3:75:63:FC:F6:30:D6:AD:B8:DE:C8:89:C1
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/krhkLUIQBsN1Y_z2MNatuN7IicE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:1200::/40
Signature Algorithm: sha256WithRSAEncryption
ba:11:7c:70:01:4a:06:98:63:94:bd:75:eb:79:4f:69:99:85:
98:b9:92:e9:8d:29:32:a8:26:c4:ac:1d:20:31:aa:be:e0:21:
66:1a:c6:77:7f:99:09:70:49:3e:8f:02:90:1c:5f:1c:f5:8f:
6c:ea:ad:bc:0e:65:e6:de:89:0e:35:f9:23:b5:5d:09:4d:73:
4c:a4:2d:e5:34:25:95:cf:cd:fc:b1:d3:0a:88:75:82:f2:cd:
86:4f:7d:be:65:18:0b:7e:22:fc:c6:a5:10:93:84:49:78:63:
40:c3:0a:20:5d:4b:e1:d4:a1:a6:b3:67:ec:51:3a:2f:64:18:
fb:10:4c:e6:73:fa:9a:f8:d5:56:ba:44:a5:d5:99:52:88:ac:
4f:71:8b:94:54:37:16:76:63:d6:68:b8:04:cb:0a:f2:19:38:
b6:c0:2e:00:c4:72:46:5d:80:e9:da:86:b1:ab:37:34:df:c2:
18:6f:f0:4d:a5:52:0c:cb:53:c4:9b:6b:6c:dd:71:c8:85:d8:
ef:b4:ad:6d:90:8b:1f:cc:cd:a5:64:ad:7f:59:8b:eb:75:79:
c6:16:c6:9d:79:3b:55:2b:e3:49:a1:98:d9:d1:97:44:ef:df:
3c:9e:e1:3e:64:8e:cb:b4:ba:44:ee:95:df:24:8b:c3:4c:e0:
36:c3:18:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:13 2025 by rpki-client