Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/KIsVR7p21CkiOwFpLezt4rD5cfQ.roa
File: KIsVR7p21CkiOwFpLezt4rD5cfQ.roa (raw, json)
Hash identifier: zL//TWTz7Ngvatzn/aZapGUQIaxv7WfbdWUS4yTIKLc=
Subject key identifier: 28:8B:15:47:BA:76:D4:29:22:3B:01:69:2D:EC:ED:E2:B0:F9:71:F4
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427485FB99B3075B5949F3431864FEE41
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/KIsVR7p21CkiOwFpLezt4rD5cfQ.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51132
IP address blocks: 193.181.43.0/24 maxlen: 24
193.181.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5f:b9:9b:30:75:b5:94:9f:34:31:86:4f:ee:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=288b1547ba76d429223b01692decede2b0f971f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:ee:5a:5c:13:57:9e:d8:0d:dc:1e:88:3e:
66:93:1a:bf:0e:00:bf:cb:96:0d:48:c3:74:46:c7:
fe:3d:ef:9c:26:76:51:75:7d:0a:8c:95:4e:8c:8d:
9d:b1:da:88:0f:2f:d6:1b:7a:59:1c:f3:13:55:c3:
2d:5d:de:25:71:13:3f:96:67:a5:6d:a4:da:54:3f:
ce:d6:7c:78:35:b4:c4:c8:a0:e1:b7:23:53:05:12:
31:db:a4:86:3b:d7:42:30:34:a7:c3:8a:62:20:3f:
18:28:00:5f:9c:cc:98:f2:f5:f6:a6:f0:b6:df:ba:
c0:f5:a4:e6:1d:f0:de:35:eb:45:d9:14:21:d3:98:
e9:ae:84:cb:30:bc:ea:c5:2c:19:ad:b3:da:a3:3d:
13:da:ec:2e:11:aa:fe:b9:9e:da:dc:c0:67:8f:40:
c1:e2:e5:82:81:61:1d:82:63:85:07:bc:74:da:ab:
4d:01:ec:21:90:b9:86:eb:25:a8:20:5a:e4:91:63:
c5:5f:ec:59:16:09:9a:92:de:f9:6d:b1:c5:e9:c4:
9c:4b:60:8f:97:49:35:b9:de:3e:2d:4e:e1:d2:3c:
13:fe:2a:7f:88:2d:45:f5:1d:7c:42:51:20:cc:36:
14:dd:65:fe:5f:49:e4:c7:1f:8c:80:9c:85:e8:59:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8B:15:47:BA:76:D4:29:22:3B:01:69:2D:EC:ED:E2:B0:F9:71:F4
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/KIsVR7p21CkiOwFpLezt4rD5cfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.43.0/24
193.181.48.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:ed:5a:90:a5:f9:d4:bd:02:58:35:d1:61:05:b4:ef:12:97:
0c:91:54:b6:7b:e3:9f:e8:26:6f:73:9c:c8:3e:b0:c8:3b:7e:
cd:4f:dc:75:e4:61:d8:4b:f7:2d:6b:fc:2c:bb:65:ca:b0:5f:
42:dd:a4:a4:b6:16:13:83:c7:51:25:af:7f:80:59:66:5b:b5:
dd:4d:d0:b1:c4:c6:af:f1:58:88:c9:0d:9b:64:43:67:79:68:
1c:b1:86:9f:40:06:fe:ef:3a:e4:c7:8f:92:2a:ec:cc:d8:46:
f4:0b:9b:d9:b1:f1:24:16:30:29:97:68:b1:8e:9e:c0:fb:94:
2d:33:e6:ee:b4:c9:3d:9f:74:72:7b:7b:85:f9:c9:18:a9:4e:
40:bd:53:df:68:4b:6f:c0:ad:9b:e6:fa:6f:a3:e3:c6:04:60:
8d:0e:81:fa:60:4c:40:89:46:49:0b:8e:03:b2:52:65:4b:0a:
85:2c:3e:82:67:f8:b1:a5:02:ba:ac:bb:14:e7:85:dc:5b:7b:
c9:08:9d:83:fb:6b:b4:3c:f7:e3:ca:34:c0:03:c7:5c:34:16:
fd:fa:49:12:a9:a0:b6:f5:82:ad:3b:5e:63:46:27:67:ca:a1:
2f:74:79:c4:f4:b4:5d:6c:a8:e0:d4:0a:d3:66:32:55:ad:7f:
bb:d8:ab:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:06 2025 by rpki-client