Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/KrudkOICJ6o23J172JFVZgrTE8Q.roa
File: KrudkOICJ6o23J172JFVZgrTE8Q.roa (raw, json)
Hash identifier: LOElKXAo1zxfoDmHY1gKUaU9NBQHXV4qqyUFnydMwws=
Subject key identifier: 2A:BB:9D:90:E2:02:27:AA:36:DC:9D:7B:D8:91:55:66:0A:D3:13:C4
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019425FCDF893F7E838B447AD9C5D52285F1
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/KrudkOICJ6o23J172JFVZgrTE8Q.roa
Signing time: Thu 02 Jan 2025 07:48:36 +0000
ROA not before: Thu 02 Jan 2025 07:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28920
IP address blocks: 149.126.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:df:89:3f:7e:83:8b:44:7a:d9:c5:d5:22:85:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 07:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2abb9d90e20227aa36dc9d7bd89155660ad313c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:76:2d:fb:0c:06:eb:0d:f5:8d:ac:eb:b5:39:
72:87:92:5c:75:df:7a:cc:63:53:cb:02:4b:c7:b8:
d1:6e:26:38:a2:c2:62:f6:ca:a4:2c:dc:09:c6:0b:
6b:71:52:98:a8:c8:b7:e5:81:f8:3e:57:9e:94:a9:
15:3a:b2:a7:d6:aa:c4:60:24:b8:02:ab:9a:96:75:
a9:a2:a8:53:c2:1e:6f:a1:69:26:d9:32:7c:06:05:
82:71:46:ec:3b:6a:7a:5d:dc:3c:a7:e3:7c:6c:ac:
6a:eb:5e:59:28:87:87:e6:c9:aa:4d:c9:ba:bc:79:
33:36:40:7c:2d:ba:b2:cb:09:81:2c:0e:fa:5e:74:
a9:a2:dc:14:85:85:6e:a8:1e:2a:5e:3d:cc:de:79:
61:4e:d8:13:72:27:1a:92:9b:07:33:2b:2f:26:bd:
3c:ec:44:ac:c6:67:1d:e9:52:f1:e1:09:c1:e8:71:
ba:14:48:8e:2c:10:9a:6f:01:a7:1d:67:06:65:3d:
65:01:48:07:ce:9a:fd:1c:4d:48:bc:8b:76:6c:3d:
40:6b:c0:a0:b2:0e:1b:39:40:c0:a4:b6:e4:87:4d:
29:f9:b1:28:32:ec:9d:65:1a:7f:0f:5a:78:f9:c8:
1c:c5:e7:13:0a:a6:35:0a:2c:69:41:49:1e:b8:d1:
27:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BB:9D:90:E2:02:27:AA:36:DC:9D:7B:D8:91:55:66:0A:D3:13:C4
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/KrudkOICJ6o23J172JFVZgrTE8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:42:47:7d:27:9d:50:ba:6b:7c:24:ec:df:fd:3a:8a:cc:99:
c6:43:0a:38:d6:03:e3:02:31:85:c6:4c:26:8b:21:e5:c7:80:
8c:d6:d4:1e:a4:77:ea:3e:a8:9a:7e:9d:f3:d8:99:81:57:19:
9e:39:28:8e:c8:7b:10:d8:46:c0:0a:66:01:c9:99:2e:1b:f8:
d7:7c:8f:da:ba:26:3e:72:fe:8f:9d:3a:50:c6:98:33:08:6c:
e1:53:52:be:00:ea:f8:6f:44:9c:02:f4:ff:d7:08:8c:8d:4d:
82:6d:e3:c3:58:35:47:2f:aa:0a:f6:8e:49:cb:82:b8:5b:36:
27:93:90:1d:12:b6:b1:95:8c:cb:13:39:69:6d:d7:67:02:3a:
95:44:fe:d8:5a:7a:9b:f0:d9:65:a4:45:15:f0:55:de:3c:e6:
2d:27:7a:68:0d:61:ba:dc:a0:8f:18:56:c1:c8:24:18:5b:f4:
b7:0b:ef:98:d8:c6:d8:a6:54:0b:38:28:24:92:16:b4:8f:91:
2f:d3:7a:97:36:26:51:5a:c7:42:77:9b:44:a8:02:30:ea:01:
d9:be:d3:f1:9d:0f:e9:43:17:17:fb:12:fe:a2:27:27:a3:0a:
11:22:d4:24:42:d1:2c:cf:fc:e3:1b:7c:14:44:15:da:e1:fa:
80:90:21:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:33:41 2025 by rpki-client