Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa
File: KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa (raw, json)
Hash identifier: f+sPFtl5m3OxWszP2lWT8ksbcw3IfqI/0r+W/rJn5fs=
Subject key identifier: 29:E3:56:1F:B1:6E:7F:F2:AD:AF:D6:B9:D1:DB:FD:A1:D8:7C:CC:BC
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 019422FC134AC3CD87B1AE5DE4B4FDADE55B
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60620
IP address blocks: 185.14.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:13:4a:c3:cd:87:b1:ae:5d:e4:b4:fd:ad:e5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29e3561fb16e7ff2adafd6b9d1dbfda1d87cccbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:13:97:92:70:c3:2c:f7:22:4f:c6:5e:f5:
6a:f1:57:7d:38:56:53:30:3c:3c:80:df:82:84:58:
df:9a:22:77:de:68:71:a1:18:50:e9:15:de:e6:c8:
4c:34:0d:59:29:31:fc:ad:b6:05:34:be:5a:fb:12:
ee:e7:ce:da:81:3f:cd:36:86:b4:82:6b:b0:59:ec:
2c:38:00:61:73:0f:d7:12:d2:5e:97:6a:9a:71:32:
60:3d:16:1f:54:c0:51:6f:be:ea:3a:3c:80:6d:a2:
f0:f9:56:9a:97:e5:3b:0e:ca:66:84:ea:b5:ed:04:
31:be:70:22:ac:11:c0:7b:e8:0c:27:fb:a5:86:a8:
26:11:a7:68:c5:e1:02:eb:d1:d4:90:79:b9:5b:86:
96:5b:63:89:69:a9:07:f9:c8:1c:c3:f8:a2:aa:87:
b9:ab:40:75:01:09:23:0e:45:01:96:61:bc:fc:ef:
ed:52:48:90:90:9d:5d:1a:55:15:26:07:87:d4:06:
2f:4f:13:0c:59:66:4b:75:66:fb:f8:fa:3c:be:58:
2e:91:69:91:5e:c5:da:ef:db:15:ac:ae:d6:a8:08:
93:c8:7b:d7:f6:39:fb:b2:4a:02:20:a1:48:b8:b4:
cb:5c:aa:8d:3d:8f:d2:ab:2a:43:1d:f1:50:74:f4:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E3:56:1F:B1:6E:7F:F2:AD:AF:D6:B9:D1:DB:FD:A1:D8:7C:CC:BC
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/KeNWH7Fuf_Ktr9a50dv9odh8zLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.177.0/24
Signature Algorithm: sha256WithRSAEncryption
81:de:c1:eb:08:25:f8:35:0c:4a:32:6b:d9:94:46:83:6f:6b:
91:38:40:c9:34:2c:58:3e:51:2b:2a:9b:a4:7f:35:18:f8:70:
16:d9:83:c2:26:d3:1a:35:10:30:6a:49:09:e2:7e:b3:ea:a9:
70:8e:fa:95:cd:5e:84:86:34:c4:ef:16:c4:7d:09:ff:4e:05:
8b:67:22:41:d3:9e:4d:5b:3f:46:df:9e:46:b4:9e:23:37:f3:
18:05:25:c0:1e:c6:08:86:b5:7c:35:48:43:8e:12:d4:10:ed:
05:e2:67:99:35:55:78:96:dc:51:c5:4e:34:4e:9e:94:68:19:
1b:eb:1f:12:28:a2:14:d1:c1:f6:57:52:3b:1c:c1:c0:df:7b:
9e:d8:b1:5c:3f:74:f7:5f:8b:34:16:3c:13:fb:07:bd:6b:bc:
f4:92:a9:b4:17:cf:9e:af:ac:c4:f8:36:4b:97:11:4d:ec:7b:
59:fe:ea:2e:59:e6:20:01:13:73:95:7f:65:bc:e1:aa:44:d6:
77:5f:b6:2d:e8:71:5c:80:7a:a2:0b:4c:5f:39:55:0b:5d:cb:
b4:1f:e3:f1:d0:c0:df:d0:ef:ae:48:e1:62:6a:fb:2e:04:cd:
1b:c0:b6:c1:1d:8d:7a:4d:d7:35:9d:78:e3:07:71:68:4d:59:
5d:df:4e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:14:31 2025 by rpki-client