Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/KwNlvQCZAHtW--zQUDRmCH-H2sA.roa
File: KwNlvQCZAHtW--zQUDRmCH-H2sA.roa (raw, json)
Hash identifier: /D5Mqw2z8QpiJp2gc0EkG23FK5ia0zs1J1JlbG4Tw5E=
Subject key identifier: 2B:03:65:BD:00:99:00:7B:56:FB:EC:D0:50:34:66:08:7F:87:DA:C0
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFA97C94150875AA8512AF9E7BB7739
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/KwNlvQCZAHtW--zQUDRmCH-H2sA.roa
Signing time: Wed 01 Jan 2025 03:48:23 +0000
ROA not before: Wed 01 Jan 2025 03:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56627
IP address blocks: 37.230.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:97:c9:41:50:87:5a:a8:51:2a:f9:e7:bb:77:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b0365bd0099007b56fbecd0503466087f87dac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:43:0b:a0:d4:15:2e:7a:f4:50:40:04:1f:e7:
ea:4e:2f:c4:d5:e9:57:b0:4b:cc:90:67:25:b8:e7:
f1:e5:1e:f6:ad:30:f4:81:06:47:bd:9a:ca:5d:0f:
19:82:17:79:d1:a0:e4:36:66:d8:16:86:2c:bc:f6:
12:e1:2a:49:2e:ee:3c:7e:4f:bd:33:a9:3e:f9:12:
bb:b5:01:e4:73:20:7a:ea:43:0e:80:86:1e:c2:e9:
a6:ec:ec:76:a7:36:d4:ae:9a:ac:3a:98:c4:6a:af:
b7:8a:1e:be:95:f0:03:a1:cc:d1:00:2d:7e:45:8e:
f0:e0:9e:2f:42:9a:9c:11:ff:c5:77:66:e7:2a:63:
6a:56:f7:16:fd:70:ed:7f:20:7a:a4:69:43:34:79:
d8:61:cf:d1:85:64:41:d7:68:a0:ba:d4:a9:81:55:
75:21:c8:32:59:76:38:44:b0:09:58:f1:51:39:10:
1c:0a:eb:24:5c:a4:95:b8:67:7b:46:f0:78:0f:b4:
a7:c8:d2:3e:cf:a4:7e:cf:11:d1:27:cd:22:ec:21:
70:ce:56:98:db:e2:88:93:b4:6a:38:53:37:b4:24:
1f:5a:3b:f0:ae:cb:2e:04:fa:b7:1c:11:c0:67:b5:
c8:8d:e1:83:06:42:f3:13:74:10:04:40:8a:ea:65:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:03:65:BD:00:99:00:7B:56:FB:EC:D0:50:34:66:08:7F:87:DA:C0
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/KwNlvQCZAHtW--zQUDRmCH-H2sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.249.0/24
Signature Algorithm: sha256WithRSAEncryption
47:6e:45:5a:66:c8:95:8a:80:fc:44:b7:23:96:d2:70:5d:3d:
23:fa:13:62:47:32:24:0f:94:09:2e:9b:02:05:4b:a4:cd:35:
12:9e:dc:ce:01:64:1b:a2:ca:83:ff:6d:83:5f:64:98:b4:aa:
f9:7d:7c:58:9f:94:17:53:aa:0a:af:f6:46:81:8d:10:12:d5:
3a:80:00:3c:13:a9:8b:7e:31:2a:d2:b5:cd:8c:9e:3d:6c:19:
e7:5a:80:e3:fd:f2:55:0e:99:0d:ef:89:5a:c4:56:43:e8:b0:
f4:6c:d6:dc:eb:45:b0:3a:18:b6:fe:95:70:c7:a8:f4:d8:66:
60:ce:46:12:7c:f1:c3:63:7d:cb:a4:2a:ed:e0:e7:88:78:89:
71:77:2e:47:6c:12:9e:9b:a1:c9:ac:4b:d9:7f:96:d1:47:db:
c1:66:53:2b:69:95:be:fa:13:2f:ce:6d:58:03:b0:ac:84:45:
ed:e8:2f:52:66:39:10:fa:eb:9c:05:d4:4d:61:1f:3a:7e:ec:
a4:78:59:41:7f:3f:cb:f9:8b:e0:62:de:58:c7:b0:0e:00:2b:
e3:de:97:2d:5d:42:d1:e2:37:74:d2:43:7b:99:17:b0:40:32:
af:22:23:83:fb:70:9d:4f:5a:f6:55:c3:44:f5:41:12:de:f7:
d8:2e:3e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:17:57 2025 by rpki-client