Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/KRkqED0ctYpoZB7oeI4xeTlom74.roa
File: KRkqED0ctYpoZB7oeI4xeTlom74.roa (raw, json)
Hash identifier: GGJ6zaKCx2jOcLgTSAUJM/JH7L5GpenhjUY0963J7rc=
Subject key identifier: 29:19:2A:10:3D:1C:B5:8A:68:64:1E:E8:78:8E:31:79:39:68:9B:BE
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3AF30BD151BCD9FE036C364F0CEDF
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/KRkqED0ctYpoZB7oeI4xeTlom74.roa
Signing time: Thu 02 Jan 2025 15:47:54 +0000
ROA not before: Thu 02 Jan 2025 15:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210740
IP address blocks: 45.128.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:af:30:bd:15:1b:cd:9f:e0:36:c3:64:f0:ce:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29192a103d1cb58a68641ee8788e317939689bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:c0:9f:83:5d:14:c2:56:0e:64:61:2d:40:
83:81:1a:fd:0c:df:a2:93:29:9f:10:45:48:78:7e:
e6:c0:ec:d6:6b:19:ee:de:fc:11:55:2e:71:27:07:
e5:ec:ef:9d:1e:f3:17:ed:bc:ef:69:b3:af:c5:a9:
d3:83:ef:a0:31:e7:af:d2:08:1f:d3:3a:2c:5d:ab:
ac:6f:5a:4a:02:f7:73:37:99:df:85:93:a0:40:02:
dc:14:c3:f0:3f:76:19:78:35:2d:2c:8b:fe:eb:cf:
7c:50:c5:60:ac:c8:73:0a:d4:33:d7:c9:3d:0c:9e:
04:97:67:5b:74:65:24:74:eb:de:2a:0a:5e:d3:04:
40:95:a2:46:de:32:21:54:f5:50:a4:4c:db:f4:e1:
1d:f1:cf:92:a7:d1:a0:8b:5e:a6:93:33:78:a0:72:
27:5f:25:62:5c:4c:23:e8:79:ea:ff:96:24:f2:1c:
2f:af:9a:9e:a3:b1:2f:65:c7:e1:26:b4:5b:6d:53:
29:5c:cc:e1:fb:ca:b6:91:1d:c2:3f:64:fa:2f:8f:
6f:61:f4:76:35:fe:5b:7a:95:52:06:56:fd:d7:a3:
7e:92:37:c0:a3:ec:3b:29:91:90:07:e1:b7:24:db:
40:99:3c:28:0e:b9:af:f9:9b:3c:f4:02:13:7c:5a:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:19:2A:10:3D:1C:B5:8A:68:64:1E:E8:78:8E:31:79:39:68:9B:BE
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/KRkqED0ctYpoZB7oeI4xeTlom74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.197.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:3b:d5:58:53:6a:3b:58:a1:6c:03:2e:0c:04:29:3c:e1:f0:
f9:3f:ca:9c:45:9a:6c:12:93:59:f1:4f:6e:5e:68:e5:dd:70:
cd:b1:6d:1f:47:95:21:e1:81:2c:08:54:93:af:0a:0d:d7:94:
ef:1c:ce:f0:65:03:53:87:40:e5:6b:5b:44:f6:33:7c:01:fd:
b8:54:fc:7a:d5:73:02:4f:9c:27:f2:18:a2:2d:f7:d4:de:c1:
8f:11:07:e6:f2:d4:99:21:ed:0b:04:9b:e8:21:65:ff:cf:69:
62:07:89:26:51:2d:07:f1:7b:7e:5e:3f:41:39:d6:91:34:0b:
78:8d:be:ec:37:d7:5c:b4:9b:cd:c7:01:6a:72:ba:d1:bb:58:
6c:d0:f3:61:00:04:6a:64:a9:0b:4b:7d:b5:9e:c6:ca:9a:ac:
d6:d0:61:41:48:98:3d:f8:8e:a0:3f:f3:d0:16:a3:d3:0f:0c:
77:52:60:3c:c9:a3:d7:e7:1a:55:52:32:e3:1a:b3:6d:4f:e2:
c9:c6:c8:6f:54:de:d1:8c:9d:e5:cc:a7:b9:90:9f:f7:24:4b:
ea:b6:6d:ac:0a:19:e9:a8:12:64:51:fd:87:39:60:f9:a7:dd:
7d:c4:3a:48:71:d1:00:53:8c:86:7c:02:75:7f:a5:f0:25:99:
11:b5:eb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:41:36 2025 by rpki-client