Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/K3-P0BjiGGZ4nzbeNELzqEVRUXQ.roa
File: K3-P0BjiGGZ4nzbeNELzqEVRUXQ.roa (raw, json)
Hash identifier: mZAxldt+IlCpLOehWxq3yA+3IoToCcsVOjUlUqrfi0s=
Subject key identifier: 2B:7F:8F:D0:18:E2:18:66:78:9F:36:DE:34:42:F3:A8:45:51:51:74
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 01941FFA8446C5D3236361022A58ED1F20BF
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/K3-P0BjiGGZ4nzbeNELzqEVRUXQ.roa
Signing time: Wed 01 Jan 2025 03:48:19 +0000
ROA not before: Wed 01 Jan 2025 03:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42184
IP address blocks: 89.251.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:84:46:c5:d3:23:63:61:02:2a:58:ed:1f:20:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b7f8fd018e21866789f36de3442f3a845515174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:52:5d:38:b7:0b:fd:52:fb:11:34:73:ea:4e:
1c:3d:0c:66:07:2b:0e:c9:41:15:8d:c5:71:5d:b2:
2d:df:fa:8b:c1:8c:2e:7b:df:10:0f:91:06:b6:ae:
80:25:83:93:b2:25:cc:c3:27:f7:16:33:c2:b3:40:
f2:bc:ba:80:ea:57:ce:f5:23:87:50:b3:7d:2a:e2:
35:d0:a3:83:99:a5:b4:3f:e1:3b:d2:41:97:3b:88:
b9:8e:48:cf:12:12:f0:a6:78:d6:bb:6a:d6:71:3b:
ae:22:98:cc:da:bd:6e:72:66:93:09:5c:a6:bc:26:
b6:42:d9:4e:9b:b6:5e:45:c0:02:24:6a:f1:70:24:
31:bc:18:64:fc:a9:7c:c3:24:a0:d9:7a:2e:7d:a3:
3a:fa:65:7b:8e:c4:70:df:29:fb:2f:29:8b:61:e7:
bf:6f:c3:24:3b:36:da:4c:0d:a2:fc:b8:80:96:87:
f0:40:23:0a:86:dd:b2:f6:17:6e:6b:28:58:50:8c:
30:21:b8:5a:7f:2b:f6:50:87:47:cc:7b:8b:8c:bd:
2a:65:85:11:db:ad:99:61:5e:e1:d1:c0:79:32:45:
54:b8:6c:df:79:1d:31:c7:53:c2:73:6c:f9:73:d2:
96:0b:d3:d0:e8:9e:74:68:43:56:eb:4e:38:3b:7d:
fc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7F:8F:D0:18:E2:18:66:78:9F:36:DE:34:42:F3:A8:45:51:51:74
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/K3-P0BjiGGZ4nzbeNELzqEVRUXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.128.0/20
Signature Algorithm: sha256WithRSAEncryption
81:38:1b:d5:51:66:0b:10:85:86:0f:8b:26:4c:a7:5c:7f:bb:
ab:09:92:10:ea:01:2b:a7:f1:b1:a5:47:c8:ce:c4:a5:3e:37:
c9:85:8c:a4:f7:92:c9:ce:fd:8d:4b:d5:ad:61:40:8b:4b:af:
f8:f1:4e:ae:0e:e5:3a:63:c8:40:25:1b:fa:ca:8c:99:85:df:
0e:8b:11:c3:bd:28:3d:f4:af:bc:33:10:be:43:b1:1f:3f:80:
d6:08:7f:8e:95:e6:be:5b:06:79:da:2b:95:34:80:1c:4d:79:
df:2b:51:8c:24:b2:21:e4:20:44:15:aa:2b:41:ba:63:d1:21:
95:19:db:54:1e:48:10:ab:24:5d:65:67:90:26:f0:64:55:25:
2f:28:e5:ed:99:86:e6:42:64:b7:ba:c8:80:7a:aa:cf:9c:d8:
cf:b2:f4:0b:eb:1b:bc:66:2d:83:01:53:68:e1:a4:3f:1a:45:
97:59:3b:2e:c0:6e:6c:5e:82:f6:10:c9:10:8e:06:c2:dc:9d:
d1:43:ed:38:eb:8c:9b:94:e9:52:98:99:34:29:94:c8:81:27:
6a:e6:c7:e6:5a:7b:6c:c1:75:d3:f9:e4:56:55:3e:59:a9:1b:
e5:b8:a7:f2:75:41:7e:bc:9e:8c:df:53:e3:0b:e6:84:02:22:
ec:19:d2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:18:44 2025 by rpki-client