Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/kIauAKAEPDGUiqRzZKf1-zzLViU.roa
File: kIauAKAEPDGUiqRzZKf1-zzLViU.roa (raw, json)
Hash identifier: ajO4l/6tIJY/grZz1/mU3dymnv+IkFvwXNVUf7Kw9ao=
Subject key identifier: 90:86:AE:00:A0:04:3C:31:94:8A:A4:73:64:A7:F5:FB:3C:CB:56:25
Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Certificate serial: 019420D5E9D7F8FE5123F5ABE6B23A9E9719
Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/kIauAKAEPDGUiqRzZKf1-zzLViU.roa
Signing time: Wed 01 Jan 2025 07:47:57 +0000
ROA not before: Wed 01 Jan 2025 07:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39062
IP address blocks: 195.66.158.0/23 maxlen: 23
195.66.158.0/24 maxlen: 24
195.66.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e9:d7:f8:fe:51:23:f5:ab:e6:b2:3a:9e:97:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Validity
Not Before: Jan 1 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9086ae00a0043c31948aa47364a7f5fb3ccb5625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:1e:b2:1b:90:99:e6:80:25:38:cf:07:3c:
3a:4e:a2:06:2f:8d:97:09:a0:53:7f:48:2f:ff:c8:
2f:c7:0b:94:b4:62:b1:93:8f:31:ca:0b:f9:ef:c6:
9a:f2:b4:88:5e:2d:be:52:17:c1:ff:ec:cb:51:de:
fd:9d:74:5a:b7:30:43:85:1d:74:b9:d6:eb:4e:0d:
45:b7:e3:9d:f1:30:0a:df:62:f9:4f:b6:b0:ba:e7:
53:07:e6:c8:59:c8:8a:54:a7:55:cb:28:53:6b:bb:
06:d3:9b:6a:29:a5:0f:f4:04:b8:4b:61:56:cf:cf:
8b:43:9e:64:d7:50:12:c7:13:46:49:5d:9b:63:c6:
66:d3:e3:ae:05:4c:e5:c1:75:22:e4:2f:88:bc:65:
e6:f7:45:a9:84:ff:fa:3c:d6:05:4c:19:27:e2:23:
0f:a2:b0:3b:05:d9:73:31:4a:23:f3:cd:d4:e2:e8:
7c:7f:d8:25:92:6b:09:34:26:d6:e4:90:4b:c9:13:
d9:84:95:27:b0:cc:c4:58:19:fc:cc:e8:09:0f:dc:
8f:c0:37:4a:1f:0f:1b:03:37:44:12:fc:9b:c8:49:
86:d7:99:f5:09:b7:c7:2d:13:c9:b6:ab:2b:cc:5e:
01:8e:fe:7f:15:02:d4:a2:39:b1:7f:90:ae:9e:e2:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:86:AE:00:A0:04:3C:31:94:8A:A4:73:64:A7:F5:FB:3C:CB:56:25
X509v3 Authority Key Identifier:
keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/kIauAKAEPDGUiqRzZKf1-zzLViU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.158.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:c0:dd:36:4a:a8:0b:a1:03:92:58:5f:a1:89:15:4f:19:63:
44:74:2d:4a:ed:67:5a:3e:24:a5:68:2f:8f:c6:9b:64:1f:63:
f1:0a:ae:d5:23:f6:a4:ee:1d:29:5d:67:ab:21:5f:6e:64:8d:
83:f0:ea:f1:41:33:b0:5b:10:de:65:e0:ae:fe:0c:a4:dc:60:
ae:39:7a:7e:84:cd:0f:cb:31:95:c6:e6:89:27:9a:a0:d0:37:
9c:74:ba:81:71:9f:f4:71:6e:23:d9:ea:e1:19:38:15:dd:9e:
fd:72:d7:eb:6f:38:6b:48:67:24:41:df:22:5e:d1:bd:da:3c:
4a:cb:a5:f7:c4:0c:10:99:17:98:53:f4:ec:e3:19:3f:6b:f8:
94:ce:75:de:e6:01:7a:d8:1c:1c:d0:60:62:8d:bb:79:8a:3b:
ad:55:83:c6:f1:04:1b:7e:c6:a3:8d:98:ab:53:6c:dc:09:8b:
ed:6c:6c:ba:4c:36:b9:a9:f4:cc:a1:2e:1a:d0:4b:f7:61:32:
4d:b4:84:37:35:2c:45:3a:fd:e3:52:7d:da:55:2d:56:31:e2:
8c:0d:f7:b3:4e:56:c0:de:56:07:42:c1:0f:29:a1:c9:8c:4d:
05:b0:88:14:a2:27:e9:a8:a9:5c:86:8a:07:8b:03:5d:16:43:
15:41:f5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:29 2025 by rpki-client