Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/knaFRbAl_ceAP0N2jozdCfFzbWg.roa
File: knaFRbAl_ceAP0N2jozdCfFzbWg.roa (raw, json)
Hash identifier: z+S5kWFreMG4gpU9r97I3ZddeuG/+z9pbzZZNbHj5Ug=
Subject key identifier: 92:76:85:45:B0:25:FD:C7:80:3F:43:76:8E:8C:DD:09:F1:73:6D:68
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0196FDEA55642753F9302424890FD11C9DF4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/knaFRbAl_ceAP0N2jozdCfFzbWg.roa
Signing time: Fri 23 May 2025 16:11:55 +0000
ROA not before: Fri 23 May 2025 16:11:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 81.168.120.0/24 maxlen: 24
82.153.72.0/24 maxlen: 24
89.213.43.0/24 maxlen: 24
89.213.99.0/24 maxlen: 24
109.176.200.0/24 maxlen: 24
213.130.155.0/24 maxlen: 24
213.218.213.0/24 maxlen: 24
213.218.225.0/24 maxlen: 24
213.218.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fd:ea:55:64:27:53:f9:30:24:24:89:0f:d1:1c:9d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 23 16:11:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92768545b025fdc7803f43768e8cdd09f1736d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:7d:5a:c0:70:8c:ea:13:35:5a:f7:a1:01:
31:fa:4d:9b:54:00:de:36:0f:35:d3:fb:9d:43:a0:
0a:9c:38:9e:14:19:12:cc:ed:b3:12:c0:17:80:fa:
84:3c:bc:0e:05:53:a1:aa:cf:30:4b:3f:29:61:91:
f3:32:0b:21:ad:51:be:df:ce:a2:04:c3:a2:30:7e:
3c:27:86:13:b7:9f:52:e9:12:10:a8:e1:58:58:42:
57:30:80:50:3e:84:84:97:90:4f:8e:ba:77:6d:8f:
18:e0:51:eb:34:27:49:71:73:4b:53:b8:ab:57:bc:
f9:89:a4:93:67:b3:f5:19:a6:d0:b9:a4:9b:db:f5:
50:1b:32:d2:b8:f7:65:ab:5e:db:4c:ba:6f:ac:ca:
f5:30:fd:10:8d:fa:bb:01:b4:d4:3c:54:88:ac:66:
33:ac:e9:09:22:02:a6:7a:d7:16:80:c7:a7:ee:18:
b3:4f:9b:80:fa:3b:e0:8b:e0:2b:78:a6:6c:0c:bb:
98:ad:ae:e8:52:88:89:58:b8:7e:b9:be:7a:65:0d:
10:74:b6:4b:95:c3:1a:41:a2:69:70:ba:8e:36:a7:
38:ba:ee:69:d3:d6:e4:26:8e:01:0e:4e:82:2a:77:
eb:cf:c4:32:19:76:09:4e:70:7d:63:c2:72:33:0b:
f0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:76:85:45:B0:25:FD:C7:80:3F:43:76:8E:8C:DD:09:F1:73:6D:68
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/knaFRbAl_ceAP0N2jozdCfFzbWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.120.0/24
82.153.72.0/24
89.213.43.0/24
89.213.99.0/24
109.176.200.0/24
213.130.155.0/24
213.218.213.0/24
213.218.225.0/24
213.218.227.0/24
Signature Algorithm: sha256WithRSAEncryption
58:6e:52:f2:ce:d3:a7:b2:62:a6:57:91:d5:b5:51:14:db:aa:
cd:f3:18:12:0a:82:c6:d6:64:03:70:5f:53:6b:fb:e1:45:01:
ee:6b:70:d0:69:b7:50:e0:75:19:54:1c:9e:bd:8e:3f:15:33:
d9:d7:92:b0:c4:1f:95:8a:7c:85:48:21:ad:06:61:84:71:ae:
0f:6a:5e:ce:42:d6:61:f9:dd:46:ba:2d:ef:d4:70:b4:6c:f1:
33:37:74:ab:c7:23:52:c1:54:9d:9f:cc:ac:c6:49:4b:82:de:
be:14:60:f2:5f:16:47:7b:7e:65:54:21:09:52:0c:e9:dc:26:
3d:f8:71:ec:46:f5:98:50:24:56:99:eb:70:35:2c:86:d0:fe:
02:88:f9:24:76:c2:9d:48:e9:31:1a:88:ca:f0:4c:28:b6:40:
23:94:2a:af:75:db:35:69:b5:19:1f:e2:5d:f0:40:88:c2:72:
ed:70:4a:3c:2f:89:d4:4b:81:71:a8:59:2f:85:e9:dd:83:72:
b1:9e:e7:e8:d6:0a:93:6f:35:65:8e:ca:e6:9e:d4:f7:fb:9e:
94:10:39:40:4b:ed:fa:f1:a4:7d:b1:b4:30:fe:24:c7:fb:d1:
f6:b8:08:63:ed:35:9d:23:bb:27:fd:de:90:f7:fb:ca:be:5b:
15:31:f9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:22:04 2025 by rpki-client