Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/KxRNTvfcdP27-i8KDlCuxj_UX9s.roa
File: KxRNTvfcdP27-i8KDlCuxj_UX9s.roa (raw, json)
Hash identifier: olLk9GQzBEMbkOZCVQ+if+KnQS1x8YbAz2sIcJuFwbg=
Subject key identifier: 2B:14:4D:4E:F7:DC:74:FD:BB:FA:2F:0A:0E:50:AE:C6:3F:D4:5F:DB
Certificate issuer: /CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Certificate serial: 019422FB9B95DC8B093DDD128DC6CC95EB95
Authority key identifier: 15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/KxRNTvfcdP27-i8KDlCuxj_UX9s.roa
Signing time: Wed 01 Jan 2025 17:48:22 +0000
ROA not before: Wed 01 Jan 2025 17:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35625
IP address blocks: 31.172.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9b:95:dc:8b:09:3d:dd:12:8d:c6:cc:95:eb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Validity
Not Before: Jan 1 17:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b144d4ef7dc74fdbbfa2f0a0e50aec63fd45fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:aa:36:2b:54:ce:43:7d:87:2c:e1:6c:5c:
78:26:3a:38:2f:fd:0d:87:3c:06:01:fe:db:37:3f:
35:cd:74:c9:8b:23:87:0e:9f:dd:a9:42:4b:5d:8b:
25:35:5e:da:65:71:e4:7d:09:22:93:83:c4:e5:6d:
7d:88:96:53:62:e6:af:1f:0d:28:dd:a2:6c:a0:1b:
24:65:9a:11:a9:3f:db:02:90:3c:1e:dd:f4:a0:67:
13:66:e1:d9:2b:71:35:a5:f2:1f:bd:84:8f:25:f0:
b9:90:c0:90:4a:83:cc:64:5a:43:2a:83:67:90:d0:
f4:ab:e1:08:a9:a5:4a:6e:cb:cf:d3:ca:f9:e1:3e:
24:46:ad:c4:5c:55:f5:73:89:d9:31:0b:9c:d3:d5:
f5:90:8c:9b:9c:76:f8:10:44:92:17:f4:ce:0c:8a:
82:db:3b:a3:c9:c7:c3:56:0f:6b:08:1c:de:8d:ed:
d5:53:4a:b4:b8:20:3e:62:85:72:38:7b:43:c8:2e:
b6:20:5d:c8:4e:a8:32:b8:75:a9:45:cb:7a:bb:c3:
6d:d5:47:e8:17:0e:3e:33:16:44:f8:09:b2:ee:87:
c1:5e:81:a5:b7:59:3b:c0:c6:b3:f8:44:d5:38:a8:
1a:78:30:60:18:b4:94:9c:2f:6e:df:f2:9c:54:31:
d4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:14:4D:4E:F7:DC:74:FD:BB:FA:2F:0A:0E:50:AE:C6:3F:D4:5F:DB
X509v3 Authority Key Identifier:
keyid:15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/KxRNTvfcdP27-i8KDlCuxj_UX9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.172.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:1e:df:69:ab:fb:89:1e:bf:64:60:96:be:37:08:64:c2:43:
b4:23:e5:0d:94:6e:fa:45:a7:bc:7f:e8:ff:62:9d:5e:55:6d:
5b:b6:53:8b:f9:62:75:4e:8b:88:d3:33:5f:8d:20:c9:6c:ef:
e5:8b:d0:57:c3:b8:14:52:c2:53:29:da:a3:e9:8e:91:b2:73:
39:4a:e1:ee:b8:fb:06:83:db:1c:5f:ce:e9:bf:96:52:91:43:
6d:48:04:65:f7:14:be:46:eb:e0:12:80:87:5c:50:fb:2f:8f:
bb:72:72:71:0c:84:3a:a9:1c:07:a7:45:43:27:44:ed:f5:ad:
22:91:7c:83:7a:ca:86:7c:22:18:93:5e:4c:2c:45:43:3a:c4:
84:a1:2f:e9:91:12:c6:c6:7c:ed:e1:be:69:04:ad:02:da:8a:
a2:f9:27:e8:36:2a:62:bc:42:c2:0c:0a:fb:23:95:21:bd:24:
39:f3:69:61:e1:70:54:73:53:d6:15:71:66:28:1e:eb:2d:ee:
f7:3a:37:d4:d0:cf:8b:8f:43:c7:a3:8f:15:ea:d6:af:01:ba:
5f:fe:87:d3:f7:e2:eb:30:16:6b:22:9e:67:9a:74:fe:a7:f2:
51:90:83:c4:b7:19:9b:10:6a:6f:c1:04:c4:ad:59:25:e3:d6:
d9:49:88:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:11:25 2025 by rpki-client