Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kfGcXxZYuETX26VZThMhTyJLXds.roa
File: kfGcXxZYuETX26VZThMhTyJLXds.roa (raw, json)
Hash identifier: A7g1rb8zMZN6sbTpj/dbzC8Px4e7JEgw8F7tbi5JVV0=
Subject key identifier: 91:F1:9C:5F:16:58:B8:44:D7:DB:A5:59:4E:13:21:4F:22:4B:5D:DB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143DAFE1BFD06C3117B7B46A5641148
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kfGcXxZYuETX26VZThMhTyJLXds.roa
Signing time: Wed 01 Jan 2025 09:48:02 +0000
ROA not before: Wed 01 Jan 2025 09:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 89.213.43.0/24 maxlen: 24
89.213.99.0/24 maxlen: 24
109.176.200.0/24 maxlen: 24
213.130.155.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
213.218.225.0/24 maxlen: 24
213.218.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:da:fe:1b:fd:06:c3:11:7b:7b:46:a5:64:11:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91f19c5f1658b844d7dba5594e13214f224b5ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:f4:28:c1:0a:fd:53:11:f3:ef:21:af:1b:
e0:8e:04:68:75:51:82:2f:b6:50:53:a8:35:6c:61:
1a:dc:56:9c:b4:36:56:98:6f:ff:a9:a2:f8:00:14:
ee:50:23:65:b1:e2:0d:f3:fe:60:c5:24:62:6b:6c:
f1:8a:13:fb:af:ed:93:70:d8:67:27:d7:aa:5c:39:
4c:b9:20:03:bf:83:c5:1b:89:53:8e:e6:81:67:03:
39:65:e0:60:97:8a:ea:14:97:8c:9f:62:84:25:aa:
76:ad:9e:c3:03:49:4f:6c:09:d7:3f:b7:04:ca:92:
6c:64:0b:f9:cc:bc:94:f2:b2:80:ca:9e:47:9c:55:
a9:ed:e4:b3:0c:b1:0f:5f:67:9b:86:fa:c8:9b:91:
2b:dc:c2:b6:a1:5d:48:a3:58:f6:1d:4b:37:bd:dd:
30:7d:2e:83:d2:f1:2a:c1:fb:a8:9e:eb:37:33:92:
ca:30:0a:2a:d7:40:54:93:69:cc:31:b7:b5:37:79:
93:54:00:42:fb:c9:a5:82:da:a1:2a:25:37:65:a4:
a4:e5:31:f8:85:87:04:74:27:76:39:3f:f6:12:22:
98:7d:94:c8:c0:09:c3:ef:db:c8:2a:a8:e1:f8:a2:
22:bd:cc:a5:b5:74:76:39:0b:9c:3b:be:28:74:b7:
c3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F1:9C:5F:16:58:B8:44:D7:DB:A5:59:4E:13:21:4F:22:4B:5D:DB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kfGcXxZYuETX26VZThMhTyJLXds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.43.0/24
89.213.99.0/24
109.176.200.0/24
213.130.155.0/24
213.218.213.0/24
213.218.225.0/24
213.218.227.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e8:0d:cb:2a:0c:89:ba:c9:89:74:09:cb:6a:ce:0e:c2:9d:
66:26:4c:41:c2:22:0e:b8:36:26:f2:e3:7d:22:c5:7d:14:eb:
f3:ac:a9:2e:a2:f6:4b:65:f1:51:07:ca:d8:ce:73:f7:36:e7:
f3:5f:df:69:40:16:da:8f:49:9b:78:3a:8e:ae:99:28:34:15:
c6:71:95:c4:25:8a:71:3c:86:e9:f9:d2:ba:80:bd:22:72:fc:
4b:97:b4:e0:72:67:f0:22:28:91:b3:8e:69:74:bf:31:fd:74:
dd:18:6b:58:70:49:52:30:2f:0d:e8:a3:d7:21:e9:59:63:d4:
03:4d:69:29:ef:7f:8b:4a:87:c1:15:d3:b9:d3:4d:85:6b:42:
9b:97:85:89:48:4f:85:3e:32:3f:ad:04:01:ab:9d:72:0c:13:
50:12:05:38:93:66:93:19:c7:35:7b:6c:e1:96:7a:31:39:00:
56:fb:7f:e1:01:0b:20:2e:9c:b4:f8:6d:e8:a2:e4:43:ff:65:
62:71:8d:19:81:0f:f9:44:88:37:2c:6c:24:7a:60:58:e0:40:
4d:8d:ec:e9:05:14:7f:e8:48:88:e8:03:4d:ac:51:2d:4e:79:
e5:0e:f3:2c:49:84:be:ac:90:f7:32:2a:76:18:bc:db:64:96:
13:70:5f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:42:26 2025 by rpki-client