Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/kxBC-y0IllTJVS30L0NxSPbYl5k.roa
File: kxBC-y0IllTJVS30L0NxSPbYl5k.roa (raw, json)
Hash identifier: URvxTuHHPgKr+L+8uNywgEsk29rIbLnVfs2KTbEBNVw=
Subject key identifier: 93:10:42:FB:2D:08:96:54:C9:55:2D:F4:2F:43:71:48:F6:D8:97:99
Certificate issuer: /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial: 019422FBDD8E888A3428B10DE23C56E447BE
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/kxBC-y0IllTJVS30L0NxSPbYl5k.roa
Signing time: Wed 01 Jan 2025 17:48:39 +0000
ROA not before: Wed 01 Jan 2025 17:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57717
IP address blocks: 185.225.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:dd:8e:88:8a:34:28:b1:0d:e2:3c:56:e4:47:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Validity
Not Before: Jan 1 17:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=931042fb2d089654c9552df42f437148f6d89799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:e5:78:7e:82:72:ae:a4:bb:4e:4f:06:23:
8d:9e:74:15:55:7d:5d:70:41:ca:f2:a7:de:d3:87:
67:cf:59:dc:60:77:92:83:86:82:1c:b8:fc:80:03:
7d:fb:b9:14:8e:ea:7f:98:4a:ba:21:29:06:26:d5:
39:cb:a0:ea:d7:ae:ea:a1:e1:59:f7:96:4f:ff:2a:
d2:24:0d:b3:1b:17:e2:ac:1e:17:46:88:5f:ca:ac:
a7:c1:98:55:93:92:c2:8e:e2:17:6e:c4:ca:5c:13:
01:11:81:a7:70:a2:fe:65:51:51:42:50:ed:03:42:
1c:5c:39:fb:d4:74:1b:95:be:7c:f2:95:3a:6d:7f:
87:41:ef:af:82:31:23:e1:05:99:a7:ff:87:f5:18:
75:3b:80:50:b6:28:21:cd:fa:79:3b:47:aa:08:5f:
72:65:3e:e9:eb:0a:30:2f:9e:ef:23:7b:67:1b:02:
04:2c:f8:96:fd:85:f5:e7:5a:dc:57:33:12:2f:02:
fe:28:2d:78:1c:48:b0:ce:7e:18:4d:29:5c:7c:5d:
49:5b:12:64:15:80:b8:83:15:3a:ab:d0:55:cf:85:
4b:3d:37:3d:c7:13:26:a6:66:4d:59:0f:80:49:98:
66:f2:25:93:1e:b5:ca:f6:48:62:9d:f2:97:03:aa:
90:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:10:42:FB:2D:08:96:54:C9:55:2D:F4:2F:43:71:48:F6:D8:97:99
X509v3 Authority Key Identifier:
keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/kxBC-y0IllTJVS30L0NxSPbYl5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.112.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:05:18:b0:b9:a7:37:ea:f3:a5:b9:59:f7:40:25:e3:17:40:
d0:df:76:19:b4:23:75:70:b9:a7:27:fb:ae:b5:7b:c2:4e:d6:
65:c0:98:1e:8e:cc:ac:6e:c2:a7:70:73:3a:c3:d4:25:d1:fa:
64:4c:9a:6a:30:1f:24:9d:d6:d0:7c:44:ef:58:98:48:11:f3:
28:fd:98:f2:24:37:31:bc:35:b8:43:71:a4:1b:5c:49:7f:84:
c4:8c:0b:ae:8d:1d:eb:9a:e9:6e:7c:8a:e1:18:6f:57:e7:da:
8d:bb:86:f9:05:32:97:af:41:c9:34:ab:ae:4f:7f:9f:64:2e:
5e:94:89:06:f1:62:29:1f:85:4d:a4:5d:29:64:b6:62:71:8e:
86:e9:82:f7:f5:d1:0f:c5:5c:63:d6:6e:91:d7:8f:ae:c1:26:
fc:a3:9e:1f:cb:ac:8a:07:bc:cc:82:d3:f9:67:8a:61:1b:77:
c9:21:97:e6:22:f9:89:5c:c0:89:a4:e1:f5:ae:e4:61:ef:3a:
c8:b1:02:a1:88:20:e0:aa:c0:19:c7:bc:6b:1f:d1:eb:4e:96:
89:51:e8:44:22:1e:2b:10:37:aa:c5:0a:45:bf:f9:6f:7c:9a:
22:4c:34:a1:b3:02:83:b8:39:9a:ab:4a:8a:16:e0:56:5b:08:
d7:0c:24:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:40:00 2025 by rpki-client