Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/KAVL6kTny8TDOYbmZPaPDwl2wXM.roa
File: KAVL6kTny8TDOYbmZPaPDwl2wXM.roa (raw, json)
Hash identifier: aJfitKEgdn0yPAeBVox/YEVRIDod3KCN4Iqb7ST2CSs=
Subject key identifier: 28:05:4B:EA:44:E7:CB:C4:C3:39:86:E6:64:F6:8F:0F:09:76:C1:73
Certificate issuer: /CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Certificate serial: 01972CE946803DD070039784257FFBA729C2
Authority key identifier: FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/KAVL6kTny8TDOYbmZPaPDwl2wXM.roa
Signing time: Sun 01 Jun 2025 19:12:54 +0000
ROA not before: Sun 01 Jun 2025 19:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206268
IP address blocks: 185.190.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2c:e9:46:80:3d:d0:70:03:97:84:25:7f:fb:a7:29:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Validity
Not Before: Jun 1 19:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28054bea44e7cbc4c33986e664f68f0f0976c173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:38:68:b9:c6:09:81:0e:3d:aa:a2:78:49:
c4:ba:dd:b5:b0:ce:74:b1:30:59:99:37:98:c9:3e:
b2:29:12:06:de:9a:75:aa:26:47:b6:88:49:04:12:
8b:07:7f:2a:42:ee:05:da:a6:a0:6b:9c:97:a3:10:
0d:63:6d:a8:7d:0b:7d:f2:5b:2f:d0:40:76:a6:c8:
09:9e:49:e6:69:f5:e2:90:16:f0:ee:e8:b0:35:f2:
85:f6:71:19:e3:ac:4e:04:42:85:bc:cf:6c:7f:0c:
a1:47:17:5a:53:16:a2:75:ff:1a:2a:72:1d:52:12:
3d:0f:b6:85:5a:fd:4f:68:3a:ad:00:bb:5c:7b:27:
be:83:55:ba:e9:9b:fa:ef:c3:12:da:e6:86:11:56:
15:b0:de:d1:42:6d:f1:f6:2b:ec:4e:0b:b5:e7:25:
9c:97:ad:d2:ba:6e:cb:17:bf:51:cf:04:2a:c5:11:
08:2c:fa:1d:07:9d:d7:ac:f5:b7:51:cf:50:48:58:
cd:5d:9f:60:56:50:d0:11:f9:bc:d3:b9:0b:1d:60:
d8:8d:93:7b:26:f2:bc:53:e9:84:8f:ee:6f:d2:18:
0b:67:c9:87:4f:15:b1:ef:d7:f9:58:2d:53:66:ef:
75:a5:24:ce:fd:8c:18:06:aa:49:6d:64:e4:98:3b:
ad:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:05:4B:EA:44:E7:CB:C4:C3:39:86:E6:64:F6:8F:0F:09:76:C1:73
X509v3 Authority Key Identifier:
keyid:FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/KAVL6kTny8TDOYbmZPaPDwl2wXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.177.0/24
Signature Algorithm: sha256WithRSAEncryption
28:1a:a7:fb:3c:22:e5:2b:39:5d:7a:b0:f0:73:6e:f8:58:fd:
d2:5d:33:3e:63:83:d2:68:62:fe:dc:68:5a:d2:49:61:8b:94:
af:d9:fe:36:4c:97:68:84:b3:7b:c5:fa:43:b7:f3:a8:c8:db:
55:3b:ab:3d:45:f2:88:91:3f:4d:04:a1:26:2d:81:c5:94:71:
67:fc:d7:40:19:e5:91:c8:58:67:38:9e:1c:45:cc:70:b0:c4:
cd:4d:60:0f:ca:92:14:43:35:f3:6e:ad:26:86:1e:86:7d:9e:
73:a8:c2:a0:9e:13:d3:dc:81:10:d9:c1:ed:1f:a4:88:03:a9:
37:8b:d3:1a:2e:aa:55:88:63:76:47:87:f5:73:f4:8c:94:5d:
17:9d:03:9c:52:b5:4a:86:77:b3:a6:f2:0c:09:fc:87:62:fc:
16:8a:00:8f:e6:98:bc:74:18:71:5a:f8:18:5f:c7:98:4a:fa:
62:e2:6e:63:84:11:cf:44:2f:ed:6c:f5:e4:fd:83:aa:f1:c9:
79:a6:dc:0b:61:76:2b:5c:cf:9a:af:6c:fe:35:8e:a3:2f:60:
27:5c:24:69:88:31:2a:91:0a:57:be:9b:28:ec:61:8d:e8:28:
a3:fc:42:bd:0d:85:8d:a0:64:6d:42:c6:d0:73:d9:07:3b:26:
f9:c6:bc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:48:32 2025 by rpki-client