Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/ksEVVLS3M5w1AKi-nF72xAY7y7o.roa
File: ksEVVLS3M5w1AKi-nF72xAY7y7o.roa (raw, json)
Hash identifier: z5VVyVNSP1G0pwH68pGPs7a4UWtVv2Td4kN9zQtymP4=
Subject key identifier: 92:C1:15:54:B4:B7:33:9C:35:00:A8:BE:9C:5E:F6:C4:06:3B:CB:BA
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 01942067BD6F5FAB16714AF8043930C23CB3
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/ksEVVLS3M5w1AKi-nF72xAY7y7o.roa
Signing time: Wed 01 Jan 2025 05:47:37 +0000
ROA not before: Wed 01 Jan 2025 05:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51964
IP address blocks: 195.151.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:bd:6f:5f:ab:16:71:4a:f8:04:39:30:c2:3c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Jan 1 05:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92c11554b4b7339c3500a8be9c5ef6c4063bcbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:c9:f7:2c:f3:1d:c5:4d:06:4d:2e:bb:c3:
27:02:96:7d:35:5e:8c:d9:29:02:fc:8a:ff:f0:9a:
37:7b:dd:6a:9b:b5:f7:dc:6f:2c:b3:49:6f:81:be:
6e:3e:3a:52:29:e0:98:7d:ae:3e:7f:f5:26:1c:47:
65:fc:5c:cf:e9:53:62:df:01:f3:8a:ce:89:c8:fb:
84:8e:f9:a2:b2:a2:8d:90:96:e5:d9:a9:1f:da:2e:
cc:d7:a1:e9:b8:47:32:9f:35:28:67:ad:e1:e0:a2:
cd:1d:fa:2d:20:f2:19:39:f9:33:cd:03:87:d6:b1:
a1:39:b3:5c:f7:25:02:99:54:a5:b9:3f:3e:91:b3:
8c:90:3d:43:6a:9f:9e:ee:c0:6b:49:9d:e6:30:5a:
61:9b:41:0f:1b:3f:24:ff:c3:c3:85:10:a1:6d:11:
1e:79:0d:f2:18:3f:df:78:45:7c:8f:d9:94:bb:e9:
e6:cc:dd:08:c1:38:f4:32:d5:71:9c:0a:e3:c0:d4:
fb:83:f9:f2:37:58:b3:22:79:77:94:56:ea:06:b4:
67:51:47:b9:14:a3:dc:4b:d2:be:61:4b:99:94:6d:
76:a2:02:31:20:7c:c2:c2:2b:72:2f:5a:df:84:88:
e1:f7:0b:87:a8:99:16:6b:44:8a:41:da:52:6f:4d:
2f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C1:15:54:B4:B7:33:9C:35:00:A8:BE:9C:5E:F6:C4:06:3B:CB:BA
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/ksEVVLS3M5w1AKi-nF72xAY7y7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.151.160.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e6:7d:86:8b:94:67:c0:35:bc:ae:5b:f0:9d:09:ea:12:de:
8c:dd:0d:cf:88:05:d1:d2:f1:3d:7e:03:7e:a4:8a:d9:55:b6:
dc:95:a7:3b:d9:3a:e4:80:c5:92:16:c8:62:63:f8:93:1c:76:
1b:1c:ba:9e:7e:34:5e:8b:ee:d1:a1:5e:d0:b9:e2:24:3b:be:
2f:5d:48:80:48:7b:f4:a6:f9:6d:30:1b:fb:8e:f2:b6:d4:7f:
ac:7a:68:c6:3d:39:88:08:c8:30:26:f8:2a:45:53:2a:dd:8d:
45:cc:76:6d:4d:f8:09:80:10:5b:26:6b:6e:c1:9c:61:ee:e6:
2c:54:de:ae:38:f4:b8:81:77:73:d9:86:af:98:bc:d4:7d:21:
e0:ea:71:e2:e5:92:4b:02:00:91:09:fb:0a:cb:4b:98:fb:4b:
ac:01:c1:2a:0a:a6:94:86:19:0f:69:c3:09:9a:32:f8:dd:80:
b0:29:d4:95:40:1d:f9:6e:1f:dc:68:3c:c2:6f:26:cc:7a:8c:
aa:60:94:a0:4c:2e:b9:60:8e:96:45:37:4c:b9:65:e4:19:a9:
14:24:db:3d:33:bf:9f:fb:c5:18:dc:18:3b:33:c9:a2:2d:ee:
b4:cb:52:b1:db:45:6d:84:0a:4e:93:5d:9d:fa:c8:15:c8:88:
10:93:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:52:13 2025 by rpki-client