Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/kXbHyNgTaS4VSl7iNXExbL4omTQ.roa
File: kXbHyNgTaS4VSl7iNXExbL4omTQ.roa (raw, json)
Hash identifier: OHwa8ZLjzHYPPIqn4XloQ0JQlOD6SyKesyHnojZd1NI=
Subject key identifier: 91:76:C7:C8:D8:13:69:2E:15:4A:5E:E2:35:71:31:6C:BE:28:99:34
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 019420D5ACFD7F82A5F7D1DDD9A840402CDD
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/kXbHyNgTaS4VSl7iNXExbL4omTQ.roa
Signing time: Wed 01 Jan 2025 07:47:41 +0000
ROA not before: Wed 01 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30943
IP address blocks: 185.67.167.0/24 maxlen: 24
217.112.32.0/20 maxlen: 20
217.112.32.0/23 maxlen: 23
217.112.34.0/23 maxlen: 23
217.112.35.0/24 maxlen: 24
217.112.40.0/23 maxlen: 23
217.112.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ac:fd:7f:82:a5:f7:d1:dd:d9:a8:40:40:2c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Jan 1 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9176c7c8d813692e154a5ee23571316cbe289934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:81:f2:90:d0:50:65:71:1f:8e:47:77:c9:
c4:99:95:59:01:39:d8:82:39:66:e4:a4:96:e3:c1:
91:4b:49:20:77:c2:e7:09:17:14:fb:3a:28:e8:ef:
c5:86:f3:c3:64:2a:4d:a0:a4:b3:0c:8e:64:01:c2:
b9:c4:97:02:16:3c:9f:ef:c7:af:12:aa:60:98:b0:
f0:72:87:d0:a3:c1:89:17:68:bd:ed:15:94:15:c5:
9e:b2:3d:4d:0d:63:2f:01:78:94:95:1b:eb:20:bb:
32:be:53:2c:01:b0:82:16:f5:ac:8d:34:b1:92:a1:
8b:a7:fd:0c:ba:fe:1d:f9:a1:21:b3:ff:e3:a2:4d:
9d:bd:c1:8b:b7:6f:f6:2a:b0:37:6e:fd:6c:e3:25:
fe:38:11:7b:25:b6:a3:9d:ea:16:d8:c3:e1:b8:1a:
8d:3a:98:9a:1d:d7:1a:60:c2:6a:22:26:6a:a2:64:
82:36:39:f3:e8:20:d0:2a:57:02:91:4f:7c:36:66:
41:81:71:8b:dc:7d:fd:66:bb:65:7d:d7:8f:75:37:
24:23:f9:48:d1:41:ec:01:43:35:81:b9:8b:cb:1b:
98:75:75:d7:49:ca:43:de:ec:fb:69:fb:90:27:1f:
d7:3a:14:9d:c6:32:16:61:15:1d:7b:66:93:8d:d5:
2f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:76:C7:C8:D8:13:69:2E:15:4A:5E:E2:35:71:31:6C:BE:28:99:34
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/kXbHyNgTaS4VSl7iNXExbL4omTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.167.0/24
217.112.32.0/20
Signature Algorithm: sha256WithRSAEncryption
af:97:fe:44:7b:42:9e:7c:2e:15:5d:5a:23:9b:16:01:b8:d8:
cf:02:22:d0:10:52:ca:43:09:de:80:65:9e:42:06:1c:97:90:
30:99:2c:98:e3:78:cd:b9:04:1b:fc:ce:68:dd:b1:46:60:9f:
55:fb:b6:c6:76:53:1a:d6:3f:84:55:99:d0:12:69:1b:49:a1:
32:09:82:5b:c2:43:e0:69:05:81:b7:d9:e0:73:28:68:23:56:
05:b1:f2:a0:6e:f2:3a:1a:ea:3b:d4:cb:31:30:fe:40:0a:2f:
63:3f:ac:0e:02:c8:2b:c1:da:a4:91:fe:41:53:87:d0:1d:0a:
e3:a6:28:63:ab:d6:33:b4:d5:d1:89:cb:17:0a:1a:e3:c2:5a:
6b:d1:19:da:80:9c:56:63:b8:2d:ca:2e:0d:b2:9c:39:f8:24:
60:84:e5:4d:f0:80:c0:e4:06:57:4f:e8:e1:75:37:1c:f7:19:
41:0b:f8:4f:60:cc:03:01:d9:d1:09:e1:3a:18:68:71:b5:a2:
52:81:16:15:39:94:2b:e3:82:8b:79:63:28:6c:81:b5:c9:a9:
72:4c:26:54:f7:de:bf:e7:29:dc:ac:5a:e6:3b:4d:ef:2a:30:
18:89:7a:67:7a:0d:c4:a2:a3:70:ef:3f:b8:45:dd:18:e7:ce:
29:7f:15:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:04 2025 by rpki-client