Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kLVunQTpycmTbFlTkZgfKhfbziI.roa
File: kLVunQTpycmTbFlTkZgfKhfbziI.roa (raw, json)
Hash identifier: pc0PhsnelZTRtxOfqQay2VlSH+c9H6RA/uuSrGdkBpo=
Subject key identifier: 90:B5:6E:9D:04:E9:C9:C9:93:6C:59:53:91:98:1F:2A:17:DB:CE:22
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194B25D00438516986C4982DF7D1B21D9CA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kLVunQTpycmTbFlTkZgfKhfbziI.roa
Signing time: Wed 29 Jan 2025 14:00:26 +0000
ROA not before: Wed 29 Jan 2025 14:00:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202448
IP address blocks: 178.215.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:5d:00:43:85:16:98:6c:49:82:df:7d:1b:21:d9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 29 14:00:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90b56e9d04e9c9c9936c595391981f2a17dbce22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:6c:ff:d6:75:0e:24:84:44:5a:29:77:37:
36:ce:67:02:53:f0:05:a4:d9:e6:34:aa:94:d7:83:
b0:43:1d:aa:c3:c7:ac:92:41:63:6e:a2:ac:3a:8d:
6c:75:d3:67:1b:1b:17:ea:10:8c:3e:09:76:cf:75:
77:ee:d1:6b:64:87:1b:e6:6c:8e:fd:90:73:7b:15:
65:89:d7:a6:54:ed:05:83:82:17:12:be:c7:80:64:
4f:82:c0:18:fa:29:86:5e:19:d9:34:ec:07:e7:e8:
16:4d:aa:8c:fd:e0:a6:21:b0:4a:d7:6e:4a:af:2a:
11:5c:40:81:55:6b:0c:f7:14:08:97:12:3c:97:56:
94:12:1a:43:df:e1:07:aa:28:7f:dd:15:86:29:a6:
64:5b:1a:92:6a:fd:3a:19:a3:f3:9e:cd:40:a5:dc:
4b:95:26:e8:05:ae:bc:05:d6:75:bf:44:82:de:a3:
05:4b:b2:66:54:21:41:90:75:72:ca:c7:24:54:93:
91:46:07:2f:12:4f:67:fc:70:30:d7:f7:b5:26:aa:
b9:ca:6b:b4:47:1b:27:c4:94:31:99:4d:b8:02:35:
a1:a4:e6:54:a9:55:79:f5:31:1e:ae:f2:63:78:da:
0e:48:11:8c:34:ef:f5:ac:c1:c0:98:c7:e7:e0:fc:
d4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B5:6E:9D:04:E9:C9:C9:93:6C:59:53:91:98:1F:2A:17:DB:CE:22
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kLVunQTpycmTbFlTkZgfKhfbziI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.215.237.0/24
Signature Algorithm: sha256WithRSAEncryption
95:7f:c7:6a:f8:79:fe:b2:27:4a:d6:00:a3:a6:c9:36:10:7a:
ed:f3:09:c2:a7:74:7b:3d:d2:03:0e:3e:7b:f4:e5:8b:55:bd:
0b:7b:b5:6d:95:30:5f:e4:27:43:8b:fd:e6:cc:db:62:5d:e6:
00:ba:a9:65:6e:cd:69:f7:2c:39:eb:eb:b5:e5:8d:6b:e1:df:
8f:f2:f4:2f:00:a2:36:28:16:b5:47:00:a8:11:8a:00:51:6e:
11:70:b8:95:d6:6b:5a:2b:28:5d:98:61:3e:df:ca:7f:54:32:
fd:96:c3:1d:50:9a:ab:5e:e1:df:7d:6b:95:47:9a:69:92:87:
d9:91:fc:36:99:aa:40:45:d9:f1:94:e5:9b:9a:6e:3e:ac:25:
19:d3:04:6d:ce:81:61:3b:3c:93:92:d3:e4:54:3e:b8:f4:16:
5c:52:16:eb:90:01:8f:57:3f:2e:21:ff:41:74:a2:b5:6a:43:
cc:1e:c2:c2:0d:a6:9f:02:02:65:3a:f7:21:21:35:8f:63:ce:
b2:b4:9b:62:43:72:db:ba:77:1e:94:84:06:4f:76:3a:d2:61:
c6:80:19:85:52:32:54:e7:66:82:eb:bf:62:7a:3c:98:15:f2:
e8:36:20:1f:b5:9d:59:a2:98:00:e4:47:d3:c9:1c:1e:a5:ee:
59:ba:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:16 2025 by rpki-client