Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/kugx0pmGjZcPbrm442ZVv3mcERM.roa
File: kugx0pmGjZcPbrm442ZVv3mcERM.roa (raw, json)
Hash identifier: 8HVL/O8ljTv0w7h4Su+p/KKbgW0QL4ldGTWXFsYBJVE=
Subject key identifier: 92:E8:31:D2:99:86:8D:97:0F:6E:B9:B8:E3:66:55:BF:79:9C:11:13
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01942067E38C61AF692CDDDF2DE096A809A2
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/kugx0pmGjZcPbrm442ZVv3mcERM.roa
Signing time: Wed 01 Jan 2025 05:47:46 +0000
ROA not before: Wed 01 Jan 2025 05:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35384
IP address blocks: 31.41.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e3:8c:61:af:69:2c:dd:df:2d:e0:96:a8:09:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92e831d299868d970f6eb9b8e36655bf799c1113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:fe:5f:b8:b8:8e:d9:a7:83:ff:53:99:46:
28:05:11:86:0f:93:b7:df:97:90:59:17:e4:8b:ff:
ba:5e:70:65:69:1e:e1:64:7d:0c:73:7b:e4:b6:02:
14:58:60:56:09:58:7b:f0:d3:ac:16:bf:ba:d8:c2:
bb:0d:a5:e5:8a:21:a5:88:d4:2a:bb:84:4a:f0:80:
21:58:71:5b:cc:5d:21:01:54:67:38:94:88:3b:2b:
8f:40:0c:52:8f:b3:11:bd:da:93:f0:ed:02:84:39:
17:af:e1:fa:22:9a:5c:ad:f6:56:41:04:a4:51:05:
f7:0d:f3:64:f8:b3:f6:00:4d:4f:7b:bc:68:a5:73:
9b:f2:a6:de:0e:a0:74:b1:50:f7:18:3c:c2:af:35:
79:d5:74:81:36:d1:5f:74:b7:fa:4b:25:d5:0f:d3:
8d:cd:c6:0f:39:21:5e:05:9f:96:bd:07:2b:b8:7b:
71:9a:22:5c:ec:60:25:d4:be:eb:71:b2:56:73:4a:
76:e0:2a:6e:94:ce:ca:19:2b:c7:83:99:74:b4:60:
bd:75:af:93:87:4b:24:4c:4b:d3:01:82:4b:50:3a:
20:34:61:fb:4c:7a:7f:0a:d1:8a:99:8c:34:66:43:
67:cc:2b:ab:1a:6f:f0:2c:ad:65:1f:53:38:a6:3b:
e6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E8:31:D2:99:86:8D:97:0F:6E:B9:B8:E3:66:55:BF:79:9C:11:13
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/kugx0pmGjZcPbrm442ZVv3mcERM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.34.0/24
Signature Algorithm: sha256WithRSAEncryption
53:8a:56:9d:21:bb:59:df:b3:bd:78:08:01:de:51:a5:18:75:
81:ad:ff:23:86:f3:54:8b:ec:be:81:a5:54:e9:c0:e9:d3:c4:
d7:87:d0:f8:8b:e8:16:10:11:cf:4e:bb:a2:69:f6:30:56:0b:
dd:26:ac:fb:7c:73:2b:c6:e6:ac:d7:e0:d4:e3:56:bb:96:b2:
0a:2f:a3:d2:2a:c3:14:68:7b:8e:48:18:4f:63:ad:7c:3e:5b:
c4:63:b2:90:02:9c:0e:24:6d:0c:1a:9d:0d:cb:a0:d4:ac:bf:
3b:2b:42:ea:94:ac:bf:b8:ca:b3:dc:27:8e:b2:20:c0:d9:b3:
96:dd:01:7e:d5:5d:59:82:2d:87:8a:88:36:94:00:5c:33:6c:
6d:46:94:ad:21:ee:10:c6:86:ee:3e:c2:11:7b:18:58:0f:38:
1d:dd:83:6e:7d:d1:c6:31:02:30:b6:8b:34:3f:a1:15:07:13:
7d:1c:18:e3:01:83:ea:b6:bd:45:e8:35:31:fc:56:56:22:6a:
d5:7a:1b:54:e6:3d:4c:f1:4c:52:93:e3:89:99:87:4e:ac:b9:
47:7b:0f:55:91:2c:4a:aa:47:f1:bc:37:8e:40:6a:3b:f0:e9:
03:2c:f6:03:98:de:b8:ff:c7:f7:93:70:cc:b8:a4:31:1b:95:
9f:7d:fb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:43 2025 by rpki-client