Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/klqt66FL_fbr6-S9maCaJ71u_2M.roa
File: klqt66FL_fbr6-S9maCaJ71u_2M.roa (raw, json)
Hash identifier: veL+ZGa8+a7DgdnASURYCHEXm47JFKP1LXkF9cJkBfQ=
Subject key identifier: 92:5A:AD:EB:A1:4B:FD:F6:EB:EB:E4:BD:99:A0:9A:27:BD:6E:FF:63
Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial: 019422202E0BB6153ADF6BE97409A2B610A6
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/klqt66FL_fbr6-S9maCaJ71u_2M.roa
Signing time: Wed 01 Jan 2025 13:48:41 +0000
ROA not before: Wed 01 Jan 2025 13:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.230.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2e:0b:b6:15:3a:df:6b:e9:74:09:a2:b6:10:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
Validity
Not Before: Jan 1 13:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=925aadeba14bfdf6ebebe4bd99a09a27bd6eff63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:9b:2d:eb:5d:c2:18:aa:aa:b6:97:be:c1:
3e:78:80:f1:fc:5f:a5:05:b7:71:aa:64:01:28:da:
43:ae:92:b6:72:86:fe:3c:49:2f:a3:4a:58:66:e4:
5e:46:5d:15:1b:45:7a:1a:2e:6b:77:9b:5a:f6:a6:
4c:21:25:70:fa:65:7a:a4:0c:41:ea:04:4f:9c:cd:
78:76:06:b3:0e:30:72:c7:49:45:27:94:e8:61:c5:
87:f0:3c:19:e0:42:f1:7a:c7:71:2f:c8:73:6e:66:
89:7b:68:0b:54:00:cd:11:ce:ad:85:de:91:c7:b1:
5c:4c:e2:1d:3b:a3:25:52:5a:20:99:6d:98:8c:d7:
3f:d6:c7:70:10:db:4a:8e:21:07:c8:8f:bf:92:23:
9b:3d:3e:8e:60:ff:f1:e1:87:12:6c:8a:ab:c1:21:
fa:35:26:ce:c5:64:b1:8c:1f:60:bc:38:63:37:e8:
ba:ef:ca:9b:e7:e3:6b:fc:75:cf:2a:bd:ec:c1:84:
20:73:c6:63:41:ff:7f:fc:aa:c2:49:01:3f:b8:b4:
1b:e4:f1:3a:bc:63:c0:0e:1a:be:b8:ce:18:a7:41:
06:a8:0c:70:f4:39:d7:be:3b:84:d5:f8:18:2f:ca:
12:80:93:ef:9e:6e:47:c5:a5:f4:11:c3:cf:ed:2a:
ac:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5A:AD:EB:A1:4B:FD:F6:EB:EB:E4:BD:99:A0:9A:27:BD:6E:FF:63
X509v3 Authority Key Identifier:
keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/klqt66FL_fbr6-S9maCaJ71u_2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.104.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a5:57:7a:c6:43:18:05:ff:49:dd:76:ca:38:ae:90:91:6d:
6b:11:f6:ee:e7:ed:fd:21:94:0f:4b:b0:48:ac:d1:ff:fe:73:
bc:58:3a:db:81:46:15:e5:3b:e7:68:f8:92:bf:7a:51:21:36:
0e:14:1c:e2:25:2e:0b:b8:9e:f3:99:0a:0c:5f:9b:9b:1c:0b:
c1:e1:a4:aa:bb:94:cc:26:62:0a:07:54:fe:52:8a:74:ee:2e:
3f:72:2a:15:89:ef:05:3e:ba:29:18:4b:26:f3:0f:05:9c:0e:
67:aa:57:77:99:60:17:38:b3:34:fa:04:e9:62:7f:63:a3:cd:
e1:cb:bc:58:c8:d1:63:ec:0e:7c:59:6f:45:a1:5b:94:03:78:
eb:a0:f3:be:d7:65:69:70:2f:33:cd:75:8f:27:d7:38:9f:ce:
2e:70:2b:c3:0b:8d:95:11:48:3c:04:6c:6f:8c:31:ce:36:61:
0a:6d:ed:33:49:6f:fb:c3:b3:6b:11:b9:1d:df:b2:64:b0:fa:
61:9c:45:48:aa:59:74:da:23:bb:28:61:5a:21:ca:da:ee:30:
8f:5f:9d:47:8c:3e:b4:bd:39:0d:56:85:e0:15:a1:b6:e8:21:
1c:d3:f2:a5:6d:72:93:67:65:6c:7a:ea:65:13:8b:f0:2d:22:
8f:ea:0e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:50:09 2025 by rpki-client