Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/KVHIamZJVn2A53v0da8_IQ5hmAc.roa
File: KVHIamZJVn2A53v0da8_IQ5hmAc.roa (raw, json)
Hash identifier: MHiTghXPbp0Yn7XA7tDf2bHlQcgsEoD122bH+wIZHLg=
Subject key identifier: 29:51:C8:6A:66:49:56:7D:80:E7:7B:F4:75:AF:3F:21:0E:61:98:07
Certificate issuer: /CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Certificate serial: 0194274836B4245C63EBF192BEA9A13C5874
Authority key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/KVHIamZJVn2A53v0da8_IQ5hmAc.roa
Signing time: Thu 02 Jan 2025 13:50:31 +0000
ROA not before: Thu 02 Jan 2025 13:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39460
IP address blocks: 195.66.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:36:b4:24:5c:63:eb:f1:92:be:a9:a1:3c:58:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Validity
Not Before: Jan 2 13:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2951c86a6649567d80e77bf475af3f210e619807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:a9:d3:c0:3c:8d:a0:23:6d:67:7d:6a:51:
51:e1:5d:fb:2b:bd:4e:03:34:39:99:e5:00:3c:fe:
c1:07:b1:be:c0:09:4e:02:02:f2:f7:25:3a:dc:17:
7d:d2:fd:cd:e6:13:0c:7d:30:9e:8e:19:26:a5:87:
20:ba:4e:18:71:98:f5:41:4c:e2:84:f5:bf:52:b7:
54:0b:7d:20:48:ca:e5:ae:18:fa:43:21:d9:62:1e:
22:5b:d1:6b:4e:8c:e3:f8:95:ed:59:33:bc:ac:18:
04:9e:14:78:08:6f:d7:38:3f:26:3c:9a:f6:04:d7:
b3:84:a5:32:f1:4d:df:e4:46:13:53:95:93:2b:15:
a9:59:25:51:8a:1e:0a:88:72:29:23:ab:e5:6a:f3:
d8:07:27:ac:6e:16:7e:57:0e:e1:bf:97:fa:8b:63:
f0:a2:ab:b5:b3:57:f3:2c:43:40:e2:6e:65:fd:c4:
35:b5:d4:d4:62:b2:71:fe:a3:24:b0:b0:46:e5:c4:
6e:7e:70:b1:39:35:b5:97:f7:95:13:2f:d8:b7:30:
3c:f0:95:41:64:8f:6d:d0:96:2d:c8:db:11:7d:3a:
7c:93:d7:21:33:e6:1b:e4:78:59:66:a5:40:e5:2b:
e3:6a:7e:fb:9c:e5:8a:8e:01:98:f1:12:6b:b7:c7:
93:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:51:C8:6A:66:49:56:7D:80:E7:7B:F4:75:AF:3F:21:0E:61:98:07
X509v3 Authority Key Identifier:
keyid:AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/KVHIamZJVn2A53v0da8_IQ5hmAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.92.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:68:df:55:d3:25:db:9d:35:9f:05:9e:9a:d3:31:a4:bf:19:
a8:44:a4:80:ba:6e:84:5a:4f:29:86:d5:7e:61:8c:ae:62:50:
5d:3c:14:f9:d1:1d:3e:8d:37:35:bf:19:ba:21:b5:08:fa:ee:
e6:b6:06:b4:42:f2:76:41:fe:02:1d:4e:26:ad:78:8c:0d:ab:
b5:96:c0:40:8d:02:3c:60:60:81:fc:92:ed:89:76:24:ca:3a:
ff:85:fc:8c:64:24:80:43:90:a2:60:5c:cc:89:25:3c:90:58:
a7:b8:62:88:8e:56:5d:72:12:62:7e:7e:00:bf:da:5d:d2:b6:
5f:72:1b:21:7c:e1:33:a2:d7:fb:04:53:c3:e5:a7:7d:17:ed:
ac:e9:f4:eb:44:10:5c:16:10:8b:8b:48:4e:52:ea:fc:7b:3d:
da:b9:12:8b:a6:57:8b:d4:ad:4d:7f:6d:2e:29:70:70:e3:d2:
ba:0b:fe:64:04:df:b9:17:73:17:49:6e:03:f0:79:a9:26:80:
31:bc:02:d2:e9:d9:e7:ad:00:d0:76:10:8c:22:c5:d0:11:9a:
59:21:00:93:d4:a9:c1:99:a5:36:88:d0:29:c3:37:82:b9:49:
41:c4:9f:54:9c:54:4e:5b:11:ad:aa:e1:a6:0e:25:4d:d6:e1:
46:5a:d1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:13 2025 by rpki-client