Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/KRDtf3OrZoijGFAdBpTPZ_LqhCU.roa
File: KRDtf3OrZoijGFAdBpTPZ_LqhCU.roa (raw, json)
Hash identifier: hhT6v19/kwC+l+XsitAuGoa0pCOzj3GbmlwXD/IoK9Q=
Subject key identifier: 29:10:ED:7F:73:AB:66:88:A3:18:50:1D:06:94:CF:67:F2:EA:84:25
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CBE28A9E4D2321187862F27D6133B
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/KRDtf3OrZoijGFAdBpTPZ_LqhCU.roa
Signing time: Wed 01 Jan 2025 01:48:24 +0000
ROA not before: Wed 01 Jan 2025 01:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204821
IP address blocks: 185.238.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:be:28:a9:e4:d2:32:11:87:86:2f:27:d6:13:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2910ed7f73ab6688a318501d0694cf67f2ea8425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:10:2e:40:70:dd:de:f2:a2:b8:15:54:83:
1f:ce:8c:54:81:f3:f7:cc:25:84:c0:fb:36:e2:b0:
a1:80:f0:64:cb:86:44:0c:76:be:ba:e6:2e:aa:3b:
4d:a6:3e:12:cf:4b:c2:e9:26:1c:ef:6f:ee:ea:d2:
53:84:0d:69:16:f4:47:af:a8:8a:a1:46:cc:90:4d:
2d:84:44:02:ef:d1:3e:6d:a8:e1:06:8d:ab:f5:72:
43:ea:ed:f8:47:ce:33:da:64:24:20:f2:a5:98:ff:
3a:a5:8e:ab:ac:97:3b:66:0e:69:de:30:39:0f:41:
94:22:a8:5b:09:4c:8c:f4:17:81:65:c8:f0:18:b4:
4c:15:e7:a7:33:81:11:42:8a:fe:6a:6c:23:cb:ad:
7e:07:80:03:d5:1a:8d:d9:70:20:bb:c6:ea:4f:91:
11:8c:fe:0b:b1:9c:1b:f0:7d:1b:42:1a:f5:86:20:
39:9d:2e:c7:f0:30:b4:4d:89:56:2f:f9:da:9e:e7:
96:7c:2f:37:43:1d:fb:8b:04:f4:ca:35:17:53:9e:
ac:37:69:46:e2:ce:09:fe:2f:7e:d9:57:78:02:23:
83:86:09:6b:1a:6e:0c:d5:ab:8b:a2:5b:68:c6:8d:
32:28:9e:98:5f:b8:d4:1f:7e:8e:f5:71:79:b3:76:
ee:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:10:ED:7F:73:AB:66:88:A3:18:50:1D:06:94:CF:67:F2:EA:84:25
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/KRDtf3OrZoijGFAdBpTPZ_LqhCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:01:3a:6e:90:cc:09:c8:33:a5:3a:e9:dd:58:68:30:10:6b:
ea:ac:de:d0:4a:02:cf:e4:5e:fe:d5:b5:d4:ff:0d:56:4a:b9:
e5:33:f2:86:12:c4:b6:b5:29:65:35:87:ea:e7:22:8a:31:df:
b9:29:84:74:ce:02:f7:c6:00:ba:d0:a9:71:2e:1d:6c:d8:ce:
ac:02:4e:8d:a6:2a:c8:84:09:14:b1:a0:4b:ae:66:5a:2c:26:
77:3f:f7:67:24:01:26:1a:d6:fd:f4:2a:be:74:9b:93:fa:e7:
c1:49:38:e7:00:cc:5f:28:86:63:8c:fb:b3:dc:63:1d:0d:43:
2c:ca:22:04:d9:8e:bd:80:f8:55:ae:dd:da:17:6b:cb:62:0c:
da:12:51:7b:de:47:bc:47:43:61:33:76:af:1a:53:1b:5e:e2:
ba:69:99:b5:78:1e:d1:a7:6e:9d:ce:7e:2f:1d:6f:30:5f:36:
aa:26:01:5f:40:9e:b5:ea:92:7c:f5:86:1f:1f:11:8f:cb:d8:
85:ce:3c:ff:32:ee:2a:fa:e4:2e:23:18:b6:0f:39:55:c1:41:
54:99:8c:9f:3b:fa:a3:b9:d4:c1:5e:97:76:c1:a5:52:0e:da:
6e:3c:ce:71:e2:ef:ff:98:b2:bd:4a:75:e6:0e:f3:f5:ae:70:
fd:3b:02:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:44:53 2025 by rpki-client