Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/KZ08JkK0sSRvNMx3Ikkq6uBEkO0.roa
File: KZ08JkK0sSRvNMx3Ikkq6uBEkO0.roa (raw, json)
Hash identifier: hZ8c3KxUe/IuNuwm8qqXzahz1nx8hksDbJXcmHPzZMg=
Subject key identifier: 29:9D:3C:26:42:B4:B1:24:6F:34:CC:77:22:49:2A:EA:E0:44:90:ED
Certificate issuer: /CN=33ea19b670cbd1af620704c4e2a33308ab20e452
Certificate serial: 0194221F9518BCD0658F4C585E55DAF9B58C
Authority key identifier: 33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/KZ08JkK0sSRvNMx3Ikkq6uBEkO0.roa
Signing time: Wed 01 Jan 2025 13:48:02 +0000
ROA not before: Wed 01 Jan 2025 13:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211694
IP address blocks: 185.171.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:95:18:bc:d0:65:8f:4c:58:5e:55:da:f9:b5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea19b670cbd1af620704c4e2a33308ab20e452
Validity
Not Before: Jan 1 13:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=299d3c2642b4b1246f34cc7722492aeae04490ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:86:03:bd:43:11:99:fd:23:fe:3c:c8:05:
54:45:1d:bd:81:33:86:e6:8e:a1:93:70:9a:dd:7f:
9d:e2:6b:c1:27:ce:6a:2c:92:ca:6d:5f:44:9c:f9:
8f:81:7f:b5:2f:c6:e1:96:05:be:3d:97:85:86:72:
66:33:eb:45:81:b3:aa:94:c2:1b:74:e3:87:66:60:
12:7d:26:db:3e:6b:4c:6c:5b:93:36:42:0b:54:f2:
ac:0f:4c:a5:63:7d:c4:3c:b9:75:ff:0e:bd:2d:76:
b7:c1:0d:5a:ac:b3:c7:71:ed:8b:d8:41:98:06:2f:
90:3f:f9:db:6e:da:ed:75:ed:bc:e5:9f:95:ec:f2:
1f:f4:c3:d4:5a:d6:5d:9e:3b:fb:f6:46:ca:9c:56:
7a:16:1c:37:b6:43:55:0e:c4:9d:61:ae:68:f0:d7:
06:c6:67:eb:e7:d6:33:3b:f4:d0:19:1e:fe:e1:20:
e8:39:23:d4:67:4a:ec:b7:a2:ce:d3:35:44:c2:40:
bf:7a:46:8f:ab:3b:ee:f6:bb:7f:42:16:cd:3f:ee:
2b:f7:0f:b4:20:47:d2:23:bf:a9:e0:2f:1a:9b:a3:
2c:66:39:c5:ac:4f:2c:e1:0f:62:50:c0:ff:f6:bc:
0a:c0:d8:af:04:ce:c4:82:d3:4b:ec:df:fc:81:f1:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9D:3C:26:42:B4:B1:24:6F:34:CC:77:22:49:2A:EA:E0:44:90:ED
X509v3 Authority Key Identifier:
keyid:33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/KZ08JkK0sSRvNMx3Ikkq6uBEkO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.162.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ca:d5:b6:d5:9f:4b:00:7a:b5:c0:b2:da:11:8e:13:4f:67:
f3:73:19:b6:23:87:e1:89:59:f1:17:06:97:a8:e2:e2:df:0f:
20:6e:ea:d1:70:19:4a:5f:24:4e:75:fc:99:cf:e3:1e:dc:a3:
b1:1f:30:80:9e:75:eb:9a:4f:4a:a3:18:9c:a2:85:e6:58:a7:
96:61:94:92:46:77:35:3e:6f:04:37:a5:ce:46:83:c0:6d:30:
a0:1d:6f:d8:d7:ad:48:ae:bf:a1:a2:f8:59:14:00:78:e0:8f:
22:ea:b3:fe:7e:28:82:37:33:34:ee:a4:33:aa:a7:77:cb:51:
15:3f:96:d0:61:c3:6a:f2:54:2c:57:76:f9:32:dc:f3:e7:8e:
c9:32:58:1f:02:47:b8:f4:7b:22:5a:9a:94:17:94:c6:c1:ea:
63:7c:3a:4f:7d:37:65:ef:2b:51:ff:94:dc:27:70:85:61:1d:
c8:cc:21:8d:b9:66:c1:2e:c4:d5:2e:40:eb:75:36:9f:9e:57:
f7:f4:87:68:92:8b:6b:48:29:0a:bf:d7:85:6c:ee:9c:d0:b5:
8f:a0:03:50:8e:f7:03:ef:75:08:ce:56:cf:93:80:14:a8:c2:
2a:6f:66:d6:64:53:3c:c3:16:78:6d:d2:70:49:cb:1f:04:cc:
83:19:50:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:47:53 2025 by rpki-client