Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/pkKFz2i-u01ooC-CNsUtdwFkgaU.roa
File: pkKFz2i-u01ooC-CNsUtdwFkgaU.roa (raw, json)
Hash identifier: p5PsvXtLF5UZNG88lZcAw5mURzFb72zoyvhFpktP8Cs=
Subject key identifier: A6:42:85:CF:68:BE:BB:4D:68:A0:2F:82:36:C5:2D:77:01:64:81:A5
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019428242E8AD2371EE7B6729A82CEFE6B99
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/pkKFz2i-u01ooC-CNsUtdwFkgaU.roa
Signing time: Thu 02 Jan 2025 17:50:47 +0000
ROA not before: Thu 02 Jan 2025 17:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214177
IP address blocks: 91.148.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:2e:8a:d2:37:1e:e7:b6:72:9a:82:ce:fe:6b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a64285cf68bebb4d68a02f8236c52d77016481a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:0f:d5:34:f7:59:92:fb:76:bf:ab:87:89:
46:b4:98:c7:11:0f:04:bb:26:b1:1b:86:1b:44:a0:
45:75:b1:42:63:c1:dd:83:57:ec:58:f2:f6:17:d7:
ea:b4:ed:96:e4:a9:20:22:57:7a:e9:b7:95:af:a7:
1b:a2:84:05:8c:1a:32:d6:66:60:47:8f:95:21:4d:
c7:fe:98:c4:18:79:1a:90:ce:98:09:57:fe:6a:86:
0c:df:73:b1:88:13:04:45:af:dc:1e:32:ee:b6:75:
1c:9c:b9:34:0d:39:c1:44:11:60:50:16:75:95:4e:
47:f1:a5:2a:3a:52:fa:ac:d6:87:f8:df:e3:03:f5:
5e:8b:2d:bf:80:6c:1b:e5:70:b4:b7:a0:f3:26:25:
89:9b:0b:f7:d6:1f:80:ac:c2:dd:88:41:23:90:52:
b6:37:fc:b1:ff:0f:99:4d:39:12:b4:dc:70:e1:54:
a4:fc:b3:61:3a:7e:27:c6:c5:98:43:12:6e:81:cc:
73:e2:b0:fc:a4:57:fe:53:1c:98:59:10:2d:c0:76:
c6:5e:50:a0:26:50:d2:13:aa:c6:e6:c3:19:10:4d:
a0:95:2e:57:41:93:59:21:c6:2e:64:b7:99:45:ba:
9c:30:ab:57:36:30:21:46:fb:ea:1d:f5:e3:4c:f3:
f3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:42:85:CF:68:BE:BB:4D:68:A0:2F:82:36:C5:2D:77:01:64:81:A5
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/pkKFz2i-u01ooC-CNsUtdwFkgaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.148.167.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d0:b0:1a:e7:b2:67:96:e5:f0:e4:0d:b1:e5:7d:63:b9:22:
88:af:26:41:0e:78:ae:c3:46:fb:2b:dd:18:06:ff:e7:9c:f9:
8a:d8:ba:61:4f:30:07:09:c9:f1:51:4b:b1:dc:95:7d:37:b4:
64:9b:44:d5:d2:5e:6f:d7:50:44:a7:d5:b6:10:3a:90:83:6b:
dd:e4:05:b1:91:a9:4c:28:42:52:aa:38:d2:cc:c3:ba:ef:12:
da:91:7e:7a:6a:4a:01:78:a2:00:87:ec:95:f0:aa:58:b0:f8:
97:1e:fd:9c:a6:eb:dc:c4:9d:c5:12:83:64:ca:74:71:a5:8b:
b6:cf:68:8b:ac:44:7d:d1:dc:4c:67:1b:11:e2:6d:de:40:30:
51:1d:42:f1:bd:60:4f:de:28:a8:09:f5:2c:ea:86:ad:fa:50:
64:d9:7b:c5:ac:54:bc:64:8c:15:52:ad:9f:62:dd:94:5c:95:
19:5d:44:a2:5c:8b:f6:ee:bb:86:7d:8c:af:c8:15:2e:68:29:
b8:fb:04:dd:83:6a:70:58:4b:14:96:11:3f:41:94:a8:35:a3:
91:23:06:21:78:41:4d:62:be:34:a5:e2:6f:55:36:84:a0:1b:
bb:eb:7b:66:75:08:13:a1:66:55:fb:b4:f4:c8:23:5d:8a:15:
72:02:57:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:28 2025 by rpki-client