Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/kkP9DYlGyrd37X6SQKdzTGCam1o.roa
File: kkP9DYlGyrd37X6SQKdzTGCam1o.roa (raw, json)
Hash identifier: bMVwkAVuqOnAw1ImRYGn9QuCqdb4AtSlRj2LsDkWhWU=
Subject key identifier: 92:43:FD:0D:89:46:CA:B7:77:ED:7E:92:40:A7:73:4C:60:9A:9B:5A
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA2EF0E022DA6283DD2E39ABDC0865
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/kkP9DYlGyrd37X6SQKdzTGCam1o.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9050
IP address blocks: 31.14.20.0/24 maxlen: 24
188.214.141.0/24 maxlen: 24
188.241.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2e:f0:e0:22:da:62:83:dd:2e:39:ab:dc:08:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9243fd0d8946cab777ed7e9240a7734c609a9b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:25:94:90:8e:f1:2d:ad:14:52:57:d1:09:
ae:40:ef:24:bb:28:7d:f8:c5:d6:a7:82:63:07:79:
7b:8b:6c:23:fc:7f:6c:8c:c1:ce:fe:9e:0a:03:bd:
83:a4:a7:da:b8:fe:45:35:5b:5f:21:f3:87:4e:52:
82:0f:68:26:b2:22:51:b4:88:82:b5:68:6c:25:dc:
63:76:40:a7:a1:fc:57:a3:de:57:a4:7d:45:ab:fd:
4f:96:74:e0:ad:e0:a4:0f:b1:60:65:00:17:ed:d9:
b8:75:23:1b:9f:28:9f:f8:aa:b9:3e:ec:2d:42:e4:
f7:46:81:4f:e0:e6:be:a2:ca:46:17:39:bf:e0:85:
0e:50:58:27:2c:31:4e:47:bc:43:7e:0d:61:7a:62:
60:05:81:c3:21:f9:5b:4b:6e:c1:35:96:cf:f5:5c:
9b:3f:59:44:7b:a3:6c:b7:88:dd:75:54:48:d8:57:
c7:db:4a:e5:7a:a8:15:7f:ef:66:08:49:a9:d5:70:
1e:57:7e:9a:47:1b:5b:44:91:a9:c0:da:c2:70:1e:
18:f7:1e:3a:50:cb:0f:0a:02:57:3f:29:d7:f5:8a:
23:44:6b:e4:c4:b5:ef:0e:17:85:d0:76:33:ec:74:
47:a5:73:05:05:ed:7b:98:99:f9:6e:5a:7d:70:75:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:43:FD:0D:89:46:CA:B7:77:ED:7E:92:40:A7:73:4C:60:9A:9B:5A
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/kkP9DYlGyrd37X6SQKdzTGCam1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.20.0/24
188.214.141.0/24
188.241.7.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c5:67:9e:67:d2:b5:20:de:7f:7f:60:cb:42:d4:d2:ae:b5:
73:e5:7a:44:ef:93:36:d8:48:79:dc:a7:55:90:e7:0c:41:b7:
32:62:43:ac:b2:b9:56:f9:d0:1d:ce:2d:d6:37:76:07:58:32:
c0:5e:21:cc:fa:8b:52:69:c2:28:cc:4e:a5:bd:90:70:f1:ef:
d5:2e:92:fd:a7:d0:3b:72:25:c4:f9:c7:84:4d:19:0e:db:26:
94:8d:ed:bb:f0:51:57:fe:39:d1:8b:42:65:82:0e:31:d7:f4:
01:ff:57:6c:1d:bb:1e:b6:0f:38:da:38:bb:15:7f:5a:94:a2:
bc:a9:04:c8:cb:64:3f:a1:aa:ba:05:6e:eb:0c:64:58:55:03:
d0:8e:14:2f:be:89:3a:b3:bb:5a:93:78:10:f3:d7:ce:4f:ec:
17:99:15:8c:69:81:26:08:73:6e:ee:7d:1f:c8:fd:dc:8a:5d:
6d:ac:42:65:bb:c3:11:dc:6b:0c:51:3b:18:06:f2:b8:75:b3:
24:d1:0e:8e:09:8d:a3:85:ff:e6:a9:d9:1d:c7:00:56:fc:6f:
d2:e8:c6:d0:db:9d:0e:78:e9:84:49:a0:c2:5a:9c:3c:b3:f9:
5b:ad:71:4f:23:4a:a2:dd:25:bd:94:19:99:2a:64:aa:71:aa:
40:d2:6e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:58 2025 by rpki-client