Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/KzFfCDjHV6hqDoqqVxbHisFAzqw.roa
File: KzFfCDjHV6hqDoqqVxbHisFAzqw.roa (raw, json)
Hash identifier: EJN3VDm9IKnbYFgaxZt9SIfMAHKvU3wGx8Z5+gCSQRo=
Subject key identifier: 2B:31:5F:08:38:C7:57:A8:6A:0E:8A:AA:57:16:C7:8A:C1:40:CE:AC
Certificate issuer: /CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
Certificate serial: 019423D701ABAC5A769FE4C09EBDB67F68F0
Authority key identifier: C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/KzFfCDjHV6hqDoqqVxbHisFAzqw.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202480
IP address blocks: 91.217.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:01:ab:ac:5a:76:9f:e4:c0:9e:bd:b6:7f:68:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b315f0838c757a86a0e8aaa5716c78ac140ceac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:da:f0:a7:30:e3:32:15:c1:0f:53:8f:09:
f4:62:e6:c2:b2:a9:e0:05:5d:00:d2:10:9d:2f:08:
5e:35:a1:fc:cc:b1:61:91:36:61:2c:60:20:66:ed:
e5:bf:40:92:fa:74:d9:1b:44:71:5d:c0:83:ea:62:
60:4f:93:19:3f:3f:23:ab:1e:22:74:63:7f:16:06:
dd:1b:dd:82:56:89:7f:89:b1:2e:6d:a7:c8:63:0c:
f0:12:a7:18:9f:0f:87:a8:d0:84:a7:91:7a:51:a8:
f3:c0:42:b0:cd:41:58:31:cf:16:5d:7c:2e:3e:5d:
41:b9:29:83:3b:02:48:ca:af:7e:03:c8:ff:ce:1c:
55:1a:a0:ce:c5:a5:89:70:2b:9c:dd:92:f4:14:3c:
1f:b3:42:49:41:0c:80:f9:47:a2:d0:af:bc:a8:9b:
a7:61:f6:24:43:ac:66:81:43:65:2a:92:44:f6:91:
f6:9e:27:20:64:28:cc:3d:40:b8:f3:67:3f:b8:e4:
ee:75:23:50:e3:49:27:29:7e:52:04:7f:d4:57:72:
8c:35:c3:76:88:f2:83:b4:fa:8a:b7:81:c9:45:84:
59:a5:cd:66:ec:d8:0a:99:7b:e9:53:6b:e3:5f:20:
ce:19:ca:92:68:24:fa:c7:6d:c5:58:cc:f3:c2:aa:
b3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:31:5F:08:38:C7:57:A8:6A:0E:8A:AA:57:16:C7:8A:C1:40:CE:AC
X509v3 Authority Key Identifier:
keyid:C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/KzFfCDjHV6hqDoqqVxbHisFAzqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.50.0/24
Signature Algorithm: sha256WithRSAEncryption
05:fa:35:a2:01:d5:63:17:6f:ee:bc:75:89:5e:a6:b9:41:b4:
c5:67:92:60:5b:97:c1:7b:07:45:b2:d1:2f:f9:b5:ef:3b:3f:
40:49:72:d4:2f:60:fc:82:2d:e0:2d:03:e5:fc:3d:e1:79:4c:
cb:19:d2:66:22:c6:02:2e:cc:ff:61:e0:de:7b:52:18:1b:0a:
52:4a:69:ba:f6:38:ca:5e:d1:7b:e4:f0:5c:7d:01:e1:15:92:
f1:4f:c2:4b:b6:a3:13:d8:0e:12:80:76:dc:db:34:ec:07:66:
d6:7f:00:d9:95:11:08:39:0d:a1:c2:67:d0:8c:0e:cd:b4:9a:
00:fc:1a:fe:41:f3:06:c5:2e:ea:a1:a3:f2:b5:7e:b6:c0:27:
5d:3b:22:a7:21:21:41:0b:dd:63:21:92:fa:2a:22:99:ed:55:
b6:5e:6f:e1:99:2f:1b:c0:02:ec:a0:34:f7:f8:41:0f:0e:22:
8a:f3:28:ac:e0:bb:6b:50:5d:43:c1:81:50:34:1f:b2:cf:45:
d2:cf:59:d0:b7:ca:c0:81:66:cb:87:cc:d7:8c:5b:37:bd:9c:
7b:79:c2:8b:a9:13:6e:5c:7b:79:1d:78:8e:5e:56:22:e2:d5:
79:09:71:8d:21:b1:79:a6:8a:e3:f9:2c:cd:f6:10:27:f1:43:
13:9c:5a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:02:27 2025 by rpki-client