Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/KatNB724uDRt0-ZiwLjIS5tNdSI.roa
File: KatNB724uDRt0-ZiwLjIS5tNdSI.roa (raw, json)
Hash identifier: 44IwgAiGyeQdbyG6MSKbubj3iGudNdrcCJvguuMAbNQ=
Subject key identifier: 29:AB:4D:07:BD:B8:B8:34:6D:D3:E6:62:C0:B8:C8:4B:9B:4D:75:22
Certificate issuer: /CN=90ea6199755e6300f0402c2a08ed437a0a73001e
Certificate serial: 01942444B5886EF1EEE2A52CCFD02FA97BC5
Authority key identifier: 90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/KatNB724uDRt0-ZiwLjIS5tNdSI.roa
Signing time: Wed 01 Jan 2025 23:47:49 +0000
ROA not before: Wed 01 Jan 2025 23:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24961
IP address blocks: 109.68.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b5:88:6e:f1:ee:e2:a5:2c:cf:d0:2f:a9:7b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ea6199755e6300f0402c2a08ed437a0a73001e
Validity
Not Before: Jan 1 23:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29ab4d07bdb8b8346dd3e662c0b8c84b9b4d7522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:47:a2:76:f0:85:eb:c4:1d:09:35:08:d9:
c1:d9:e2:9e:35:fb:4a:8d:90:50:0b:e1:58:3e:ab:
d8:7d:13:d3:06:dd:5b:36:46:0c:e4:a2:08:ce:f7:
c6:f4:dc:bd:98:e7:73:e7:52:7f:2f:29:0f:f8:7c:
f1:19:4c:4e:14:f6:e9:77:97:ab:c5:05:9d:f6:4f:
74:62:5d:68:0d:85:ff:8d:3d:db:0e:04:1a:d5:b7:
1a:2a:f7:7e:62:11:ed:df:1c:49:5a:f7:bf:50:ed:
90:0b:90:26:b1:08:56:77:bd:5f:6f:26:f1:90:e6:
bb:58:85:ae:73:ad:0e:06:f2:ef:33:5f:f8:1d:d3:
02:6e:6f:61:25:60:7f:b4:00:cd:b2:ee:d8:16:f7:
8c:da:4b:22:b9:a2:24:fe:8d:44:9a:88:f2:c5:01:
9f:e7:9e:87:67:49:12:f4:9b:29:f0:3b:2d:a6:1f:
f9:47:1b:cf:63:a5:ad:05:0b:cd:ce:06:3e:41:7a:
19:b4:49:cd:59:5e:d6:b0:fd:b8:50:14:5c:23:5c:
2e:5f:4f:24:ce:c7:7d:98:35:cc:e0:f7:d8:bd:0c:
32:bb:06:e8:e2:71:4f:58:89:07:fe:9a:04:8b:84:
66:10:38:28:1a:a5:b9:ca:fa:db:ed:ed:28:76:bd:
26:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AB:4D:07:BD:B8:B8:34:6D:D3:E6:62:C0:B8:C8:4B:9B:4D:75:22
X509v3 Authority Key Identifier:
keyid:90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/KatNB724uDRt0-ZiwLjIS5tNdSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.216.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:bc:4b:ee:e9:49:70:ad:ae:d4:43:52:f8:8c:44:fa:f1:ec:
51:89:be:4b:55:14:64:d8:ab:a2:ff:2a:ca:84:aa:81:52:26:
f0:a7:1b:b5:80:4b:11:ff:26:e5:b8:fe:b5:f4:12:01:2e:ab:
e7:3f:2f:cc:d7:00:50:a8:4e:f5:8a:46:4b:9a:c2:a0:0f:87:
cf:48:d9:4a:a3:8a:06:be:c5:5a:54:76:89:ce:1c:1b:0a:c1:
08:34:6c:fa:37:f1:db:8f:ea:90:81:f7:1e:af:9f:c4:90:1f:
03:a3:a6:69:fc:98:a6:e8:dd:c7:7e:1c:c4:df:11:fd:69:aa:
fb:6e:57:5d:01:51:ee:36:a7:64:85:9d:57:e6:8f:b3:2c:d4:
48:95:2a:2d:9f:83:c6:6d:16:f3:2b:c2:ce:00:30:78:59:14:
17:65:b8:e8:99:b8:54:50:ff:fb:db:50:5f:da:79:5c:2d:96:
17:14:4e:11:c0:9a:d9:62:c1:1e:c3:71:80:f9:16:f7:cd:2e:
65:66:9c:36:54:24:bb:72:c4:62:77:12:3b:1b:b9:a9:d5:17:
36:5b:a9:ad:76:78:9f:e9:d2:f4:30:cf:b7:01:74:04:5d:5c:
e2:88:aa:6f:8e:3a:e6:d0:9e:e6:c8:0c:7d:bf:12:71:61:b6:
02:41:00:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:20:03 2025 by rpki-client