Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/k33f_PMIoHn5FXjWs9o_hAagQPU.roa
File: k33f_PMIoHn5FXjWs9o_hAagQPU.roa (raw, json)
Hash identifier: CQN6YPAgrfc6UnCswx4tiN7JfnanWIcuyP1dM7rzekg=
Subject key identifier: 93:7D:DF:FC:F3:08:A0:79:F9:15:78:D6:B3:DA:3F:84:06:A0:40:F5
Certificate issuer: /CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Certificate serial: 019422200B4BBCB42CA24BECBEE38B5FA25C
Authority key identifier: E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/k33f_PMIoHn5FXjWs9o_hAagQPU.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 553
IP address blocks: 141.31.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0b:4b:bc:b4:2c:a2:4b:ec:be:e3:8b:5f:a2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=937ddffcf308a079f91578d6b3da3f8406a040f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ee:a7:d6:d8:e4:17:80:00:ad:20:ec:d6:78:
cc:8c:92:0f:dc:3b:7a:b2:82:7f:b8:02:ae:69:c7:
e7:08:66:63:b6:d8:e5:59:b8:51:9a:77:b7:73:cd:
9d:87:cd:ed:20:b2:9d:6e:e6:eb:d9:e3:0e:76:ef:
07:78:b1:57:b4:38:07:a0:16:a7:8a:7b:84:48:00:
aa:8b:b6:f7:79:3a:73:14:da:f5:95:98:3a:ea:8c:
ab:ec:33:89:8f:4d:b5:ac:5f:1e:39:32:1a:77:6e:
99:4a:2d:05:fa:76:bb:66:f4:fd:ed:f3:c1:39:9a:
38:a0:3e:b8:5e:1f:ab:2b:19:a6:9b:a7:78:e1:03:
b7:76:1b:0f:c1:bb:58:32:e0:4f:66:7d:30:aa:bd:
fd:bf:dd:15:35:7c:cd:7b:ca:0b:9d:ba:a9:eb:1f:
e2:37:58:33:65:2b:24:41:34:a3:27:3f:b0:6a:9d:
65:81:fa:b0:81:b0:8f:0c:05:50:ba:8d:43:70:97:
a9:dd:cd:e5:6e:01:4c:7b:82:81:a2:f3:32:f5:0f:
0a:60:33:e3:f3:cd:5d:7b:60:a1:24:de:a1:f4:ca:
fd:47:88:58:5e:ab:4f:51:85:76:ad:3d:4a:95:26:
a5:4c:41:98:16:0e:00:56:9d:13:70:40:3a:c1:4f:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7D:DF:FC:F3:08:A0:79:F9:15:78:D6:B3:DA:3F:84:06:A0:40:F5
X509v3 Authority Key Identifier:
keyid:E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/k33f_PMIoHn5FXjWs9o_hAagQPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.31.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:66:18:4e:01:c7:b7:21:d0:3a:6c:92:44:ee:ea:ee:5f:60:
e7:a6:41:b7:2f:cf:c7:0d:98:1b:80:dc:13:c4:6c:62:bb:fc:
c2:62:2e:49:c2:d7:37:08:cd:66:59:ba:ed:53:c2:af:85:c8:
2c:3f:16:41:9b:28:44:e3:18:bf:b5:c2:ce:48:62:37:8e:32:
da:b7:7a:0e:32:ac:ec:52:48:40:0f:1a:b0:db:b2:77:61:f0:
9c:b0:24:53:3e:bc:73:91:42:48:e9:de:53:03:cb:c6:06:31:
0f:bd:ee:22:f9:2c:f7:3b:eb:1c:68:70:b8:5e:f6:d5:50:77:
12:7d:34:26:58:cb:87:d6:5a:9a:12:61:fe:d8:a4:dc:73:b8:
b8:40:cd:6d:d6:5b:5e:80:03:1a:c6:0e:13:54:8f:ca:27:e4:
8c:04:9d:ca:14:e9:77:98:ca:92:0e:d3:9e:59:32:8a:92:27:
be:4e:a2:3f:6f:37:56:41:32:e6:5d:e5:03:56:7a:38:9f:05:
d3:c6:7c:36:b0:4d:e3:82:2f:1d:7a:91:21:fe:77:83:60:2c:
84:bd:c5:d8:ea:47:a1:97:5a:b2:ac:f4:34:12:c0:29:04:8c:
a3:9f:f6:32:a4:e9:a7:43:6e:c2:06:9c:6b:80:73:a0:b8:27:
1e:52:1c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:50:53 2025 by rpki-client