Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KoDV8ih4phRJxNpMvuWdmmEak5c.roa
File: KoDV8ih4phRJxNpMvuWdmmEak5c.roa (raw, json)
Hash identifier: rocsBPtidQZl2PYB6snKayB774O+c88rOB69IZycdAc=
Subject key identifier: 2A:80:D5:F2:28:78:A6:14:49:C4:DA:4C:BE:E5:9D:9A:61:1A:93:97
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01943C2C8996D4B9F12682FAECFAD0F5B9B5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KoDV8ih4phRJxNpMvuWdmmEak5c.roa
Signing time: Mon 06 Jan 2025 15:12:19 +0000
ROA not before: Mon 06 Jan 2025 15:12:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48835
IP address blocks: 5.231.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3c:2c:89:96:d4:b9:f1:26:82:fa:ec:fa:d0:f5:b9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 6 15:12:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a80d5f22878a61449c4da4cbee59d9a611a9397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:e0:3e:72:55:84:2d:04:12:d6:1c:92:53:
cf:bb:a2:d7:a1:15:76:b5:22:40:68:72:da:40:3b:
d3:42:92:74:79:69:6f:e9:7f:ae:fb:e2:71:c2:c3:
2d:70:3c:60:d5:b2:6d:f5:44:52:ca:04:f4:ac:d6:
35:d1:ac:3c:ce:a7:62:ad:33:1d:df:2f:2c:a8:6d:
34:a5:be:cf:54:ce:12:9f:49:14:f4:4a:99:c6:41:
82:2b:ee:6b:17:5b:13:fe:a1:78:d7:b1:42:27:b9:
ce:3c:73:a6:bc:29:3a:8e:57:90:46:36:18:d3:e1:
f3:b4:26:e0:ba:95:5c:af:b0:60:6f:22:32:b8:4d:
e9:aa:24:92:04:b7:0d:a5:74:52:a5:77:29:d6:3e:
9c:48:d5:66:94:6c:fe:54:23:3e:a4:1f:2f:96:91:
e4:2a:d8:99:7a:3c:5d:94:a6:03:74:30:8a:08:dd:
f6:72:c5:be:8b:56:3a:30:d9:3d:75:8b:cb:0d:51:
d2:ae:8d:5b:4a:59:1e:85:4e:81:4a:9a:8c:33:47:
15:8d:5b:21:14:b6:9b:05:f7:ee:3f:07:43:d6:d1:
2b:df:9c:18:d6:04:6f:a1:71:3f:9a:99:7f:4b:86:
9b:a8:3a:50:f3:e5:81:30:15:14:e9:23:fc:00:2f:
34:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:80:D5:F2:28:78:A6:14:49:C4:DA:4C:BE:E5:9D:9A:61:1A:93:97
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/KoDV8ih4phRJxNpMvuWdmmEak5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.42.0/24
Signature Algorithm: sha256WithRSAEncryption
04:00:04:b9:cd:41:16:f0:de:c7:34:6b:53:65:c0:60:54:00:
fb:b2:e0:a9:44:70:b5:57:0e:0f:a3:6d:f1:8b:1a:34:c5:76:
6f:3d:02:fe:82:22:e7:85:3d:e0:f8:45:43:89:f6:01:c8:bd:
4f:8a:d0:36:cb:73:78:13:94:54:89:f4:0b:bf:3d:91:60:2e:
f4:11:d2:32:2b:52:39:a9:9c:62:44:42:40:8b:c6:70:7d:e1:
2f:f1:c4:19:b9:da:96:e7:f1:66:e4:2d:8e:28:d3:2d:55:a1:
b8:0d:8a:c8:8d:34:7e:49:21:0b:8b:bf:50:3f:45:ab:29:01:
ed:6e:18:2a:24:cc:66:20:d6:f7:cb:72:fe:f5:3f:da:51:33:
ed:b5:60:a1:13:c1:4b:17:b4:d9:14:9a:17:e7:1e:74:03:73:
33:82:64:67:5b:19:15:69:1a:59:58:cf:1e:77:39:31:c8:50:
e6:9d:72:af:91:af:22:6d:2a:5a:ea:9d:3d:cc:70:22:a6:c1:
28:99:48:d8:6e:64:d1:f3:1e:4e:1b:34:05:9b:0a:e3:ec:58:
b4:e8:45:41:ee:aa:76:ca:25:10:da:d1:d2:1d:01:47:fb:f1:
65:ad:15:a2:42:ee:29:28:d3:41:e2:94:9d:f8:e0:d1:3e:c6:
c0:37:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:57 2025 by rpki-client