Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KSdWPEt9fB_iBluYNf4K7txBQrE.roa
File: KSdWPEt9fB_iBluYNf4K7txBQrE.roa (raw, json)
Hash identifier: YJ0c3CPnKgl+QFgMB6tD+ii2GX7vwrvuc49Rrz/E7uI=
Subject key identifier: 29:27:56:3C:4B:7D:7C:1F:E2:06:5B:98:35:FE:0A:EE:DC:41:42:B1
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01959A82FA2672BF07D9542CF88D06321017
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KSdWPEt9fB_iBluYNf4K7txBQrE.roa
Signing time: Sat 15 Mar 2025 15:53:49 +0000
ROA not before: Sat 15 Mar 2025 15:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199760
IP address blocks: 85.239.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9a:82:fa:26:72:bf:07:d9:54:2c:f8:8d:06:32:10:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Mar 15 15:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2927563c4b7d7c1fe2065b9835fe0aeedc4142b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:a8:61:03:2b:d6:cb:eb:d0:1e:73:ff:c1:
6e:5f:a2:42:2f:26:7c:c4:40:db:65:77:18:d7:0a:
cf:fe:7b:27:45:d7:9a:36:56:62:4b:7b:54:f0:92:
e9:44:5a:5a:cb:7c:a5:0b:89:8f:69:72:aa:e5:9f:
15:84:ce:86:9c:c7:67:ab:8a:54:80:35:9e:70:87:
85:c4:ca:a0:8d:8e:15:0f:ad:d1:75:52:b4:f6:d3:
63:e0:59:a1:bc:9b:6e:42:11:a0:61:a9:69:b0:4b:
6c:66:1f:ca:04:4c:3c:63:70:32:2b:1f:0b:53:5a:
35:4e:4c:87:78:44:a0:4e:71:d7:a2:42:eb:8d:ab:
45:64:37:9d:62:16:ba:42:ff:36:cf:b4:60:88:ac:
e7:73:d1:38:35:b4:d6:1b:58:7f:6d:35:f0:9c:93:
0e:a0:92:54:c0:e6:c5:92:5d:37:39:87:bd:67:7f:
93:3b:86:32:aa:4b:b7:54:f9:f9:7a:d5:2b:d1:95:
d6:1c:ed:0b:b4:4c:66:bc:9d:81:a4:d2:50:78:af:
74:c3:6c:41:58:3e:51:b5:65:2d:29:1c:55:a8:88:
e6:5d:9f:bd:93:7c:d6:0d:19:6f:5a:17:dc:5f:ef:
35:b8:a4:06:a4:e0:c3:4b:d7:8b:f7:bf:37:e9:23:
ab:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:27:56:3C:4B:7D:7C:1F:E2:06:5B:98:35:FE:0A:EE:DC:41:42:B1
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KSdWPEt9fB_iBluYNf4K7txBQrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.158.0/24
Signature Algorithm: sha256WithRSAEncryption
72:91:99:8d:82:b9:bb:e7:28:c9:92:28:f5:62:a7:fe:08:bb:
a5:48:41:1a:01:12:a6:8c:c4:cb:cf:95:35:45:40:37:5e:1c:
39:36:0d:e3:23:d9:0d:01:c1:f6:43:08:15:40:7b:3b:a9:49:
45:9f:12:33:c0:6a:ef:19:ab:3d:68:e4:d7:da:4f:1a:d8:96:
29:99:79:ef:04:fb:9e:a9:4e:d1:66:6a:82:bb:88:7a:98:a6:
69:c8:8a:e7:6d:08:da:a9:3a:0b:45:df:f3:5b:54:a5:4b:cf:
5b:0c:e2:40:e5:45:8d:d8:c4:ff:ee:1c:ba:05:46:ec:fe:6d:
43:dd:98:39:1d:77:69:c5:24:aa:1b:02:67:85:91:b0:f7:3e:
57:97:6d:9f:0e:05:7a:fa:16:06:f6:56:1b:ce:97:2e:dc:48:
af:5b:b6:0b:a6:53:db:7c:62:b0:fe:ab:56:09:55:98:ae:be:
36:28:b9:e2:2d:cb:08:a1:81:e5:ac:2a:0a:fd:f1:82:bb:03:
e0:ff:0f:ff:cb:59:8e:e9:c7:d8:b1:ea:11:ce:6a:ef:9f:9b:
1d:86:4e:f3:f1:fe:90:9c:68:b9:6f:0c:05:d9:28:79:41:25:
81:f1:5f:d0:ce:78:c1:09:7d:78:91:21:0a:70:75:50:a0:ce:
e3:4c:b4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:14:22 2025 by rpki-client