Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/kroCcDuLJiEm7WFd8GtQQzKukrk.roa
File: kroCcDuLJiEm7WFd8GtQQzKukrk.roa (raw, json)
Hash identifier: C4/C9Nc89baYiSQf8o8T95z101LyK5Fm6SS+L143NqQ=
Subject key identifier: 92:BA:02:70:3B:8B:26:21:26:ED:61:5D:F0:6B:50:43:32:AE:92:B9
Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial: 0194266C0A4ED1AE155ADD8E5517B13FE617
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/kroCcDuLJiEm7WFd8GtQQzKukrk.roa
Signing time: Thu 02 Jan 2025 09:50:02 +0000
ROA not before: Thu 02 Jan 2025 09:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1921
IP address blocks: 176.97.158.0/24 maxlen: 24
192.174.68.0/24 maxlen: 24
2001:67c:10b8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0a:4e:d1:ae:15:5a:dd:8e:55:17:b1:3f:e6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Validity
Not Before: Jan 2 09:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92ba02703b8b262126ed615df06b504332ae92b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:98:a5:23:a4:38:fa:1e:0c:6c:b3:55:2e:ec:
53:f8:ea:01:20:2a:4c:7f:8c:04:df:e7:04:05:45:
d5:7f:f7:d8:5a:0e:67:a9:d4:aa:41:a7:40:5c:92:
08:e8:fe:a2:ad:b3:ad:93:90:0a:2c:0d:a9:55:d6:
48:d6:01:84:2e:60:8e:e8:66:69:b5:80:ad:ec:5e:
6f:74:32:90:6b:f9:21:c8:dd:67:0e:d0:17:45:63:
b2:b5:80:f7:15:61:2c:b9:27:e5:b6:de:04:85:c2:
63:e6:75:87:89:33:a9:b0:a2:b4:41:b3:9c:8b:8c:
c5:f5:5e:2b:49:91:be:87:4f:d6:6c:b6:a3:32:47:
7e:3c:8a:e7:87:9f:80:f9:eb:d1:f9:36:0b:4c:ca:
d2:64:da:a4:52:7d:c9:a6:6e:f1:16:64:94:01:a7:
91:2a:d4:35:61:1c:d6:06:07:48:fc:c5:45:bc:db:
df:8f:5c:78:e3:e2:2a:53:84:71:85:b9:dd:67:24:
37:8c:ef:67:f1:c5:8c:c6:73:91:6b:76:7c:58:d6:
3e:8a:4f:48:ef:1c:53:ff:07:aa:82:6c:6e:31:83:
ac:00:11:cc:16:ff:eb:f4:7b:7f:97:92:13:98:24:
fe:69:89:d3:b4:b4:6a:bc:cd:41:b6:2c:c5:3d:d3:
eb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BA:02:70:3B:8B:26:21:26:ED:61:5D:F0:6B:50:43:32:AE:92:B9
X509v3 Authority Key Identifier:
keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/kroCcDuLJiEm7WFd8GtQQzKukrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.158.0/24
192.174.68.0/24
IPv6:
2001:67c:10b8::/48
Signature Algorithm: sha256WithRSAEncryption
61:92:2a:12:c2:8e:9f:91:c0:37:3a:f3:3e:fc:12:06:1b:1a:
09:74:74:c9:b0:a6:0c:1e:ed:cb:fe:93:83:bc:4e:22:74:61:
87:c9:27:dc:62:af:6e:36:4b:be:54:4b:a2:d0:ee:b1:2a:bb:
42:af:36:6f:75:ca:b2:46:82:8d:dc:d7:99:d5:6f:03:a7:6a:
9c:e8:f4:bc:d1:7c:7f:1d:c2:bb:3a:fa:18:0d:e8:61:44:7e:
2c:8a:54:df:84:be:ab:74:96:cc:91:90:67:38:b6:3d:39:73:
28:96:a2:86:80:65:92:3d:4a:8d:04:a5:5e:5d:0a:53:9d:8b:
9a:53:26:b9:1a:fa:9c:93:cd:d4:4f:d1:88:58:8e:89:e8:b2:
fb:33:92:71:2b:97:0e:9d:53:5e:4f:71:9e:f7:4a:d5:65:fb:
16:37:70:c8:c1:93:df:94:97:a7:a0:31:89:9c:d2:30:c7:0c:
b6:79:d7:de:92:7d:27:4e:ab:5f:be:34:45:3d:b4:34:d2:4f:
82:42:26:8a:72:bd:61:8e:e0:15:5a:94:ef:ea:d5:f6:81:52:
92:8b:4d:28:96:48:a0:e4:d8:69:79:82:19:e4:1f:bb:b1:ed:
27:b9:db:5d:ad:ea:cb:de:32:82:60:46:f2:b6:72:c1:dc:76:
b7:94:f3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:47:18 2025 by rpki-client