Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/KO2tMW1du9dekDI4Y-9_plcBYSk.roa
File: KO2tMW1du9dekDI4Y-9_plcBYSk.roa (raw, json)
Hash identifier: L0Z21UNOLLnga8zui/KqFlS4YtgeuRJ/OBRssHd9hXE=
Subject key identifier: 28:ED:AD:31:6D:5D:BB:D7:5E:90:32:38:63:EF:7F:A6:57:01:61:29
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0194266B8BC2F5C9DD51633E6F6F9E983CF7
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/KO2tMW1du9dekDI4Y-9_plcBYSk.roa
Signing time: Thu 02 Jan 2025 09:49:29 +0000
ROA not before: Thu 02 Jan 2025 09:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56611
IP address blocks: 193.160.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8b:c2:f5:c9:dd:51:63:3e:6f:6f:9e:98:3c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 2 09:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28edad316d5dbbd75e90323863ef7fa657016129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:44:23:dd:bf:4e:23:ff:5a:a7:c9:48:8d:c8:
c4:3b:9c:bc:87:14:f4:55:2d:26:b3:83:92:9d:f9:
51:a7:26:5a:55:fe:a1:72:45:c6:1c:d0:50:3d:7a:
8b:09:46:9a:cc:d6:4f:6f:f6:93:c2:e8:41:96:0a:
86:d2:62:7e:b9:f8:6f:54:ed:b5:65:ff:24:70:57:
7e:f2:35:48:f3:96:2c:88:5a:ad:2b:f7:33:f2:28:
74:7f:46:06:a0:8c:5f:21:b5:15:c0:5c:53:4b:23:
18:91:24:5b:c8:ca:64:c3:90:be:15:f1:85:65:0c:
d3:7d:b0:19:ea:76:ca:11:23:fc:64:8f:c8:6a:5b:
cd:4e:a6:d1:8b:94:bd:a1:73:07:b5:81:45:ed:67:
df:05:b0:05:c7:75:09:58:c6:cc:45:d0:a9:1b:a2:
83:a9:7a:33:29:a6:67:6e:fd:13:dd:2a:53:42:6a:
13:f3:23:05:07:d7:df:b5:79:05:f8:66:e5:69:98:
4c:77:63:f1:e5:a9:a1:c4:53:d3:d7:d8:7a:fd:46:
85:36:6b:e7:a6:45:c7:c9:7b:2c:d3:07:58:9a:9c:
cd:5e:bf:21:e7:ae:ff:7d:69:e5:8f:22:b8:84:d3:
36:0c:26:17:16:c3:a4:64:13:6f:a4:3f:85:3a:61:
c4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:ED:AD:31:6D:5D:BB:D7:5E:90:32:38:63:EF:7F:A6:57:01:61:29
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/KO2tMW1du9dekDI4Y-9_plcBYSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.96.0/24
Signature Algorithm: sha256WithRSAEncryption
05:c1:53:92:35:8e:57:6d:6a:53:56:dc:7d:37:0e:bf:c4:31:
8b:be:f4:5e:4b:f7:a7:bc:bc:ff:d8:fa:56:d4:af:53:54:47:
f7:9f:dc:de:32:5a:09:27:02:2d:16:fc:8a:eb:b5:f9:d9:0a:
ad:49:cf:14:21:f9:01:c4:55:71:1b:92:d7:cb:13:52:1b:5f:
52:7a:9b:ba:7c:1a:98:ac:fe:f5:ed:b3:db:66:e1:a1:d1:c5:
4b:ba:fb:20:0b:29:10:a7:84:da:42:22:96:f5:61:70:15:66:
d2:9f:1c:f0:fc:3b:c1:a0:ce:d0:9d:0a:79:aa:67:df:74:8e:
38:cf:b2:e2:43:aa:dd:40:99:22:75:d6:32:7a:44:dd:ae:32:
9b:ac:d0:a7:62:6a:5e:e1:9a:fc:55:d1:8a:32:bd:2e:ad:a5:
a3:fb:a0:91:b9:91:79:bf:29:ee:03:3f:ae:b3:e6:43:66:47:
c8:b4:66:1e:3b:c0:96:70:db:b2:d9:de:4f:e5:6e:2c:6f:f1:
f2:ec:b6:e1:18:8e:96:cc:cf:81:7d:3a:19:eb:72:93:89:11:
0d:2e:ab:cc:2b:08:20:23:05:ce:dc:89:41:b8:a2:51:b8:f4:
53:38:be:2f:49:05:66:7b:70:0b:9f:e5:31:41:6c:97:15:06:
d9:bf:f6:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma4vC9cndUWM+b2+emDz3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2
OGIxZTEwHhcNMjUwMTAyMDk0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGVkYWQzMTZkNWRiYmQ3NWU5MDMyMzg2M2VmN2ZhNjU3MDE2MTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kQj3b9OI/9ap8lIjcjEO5y8hxT0
VS0ms4OSnflRpyZaVf6hckXGHNBQPXqLCUaazNZPb/aTwuhBlgqG0mJ+ufhvVO21
Zf8kcFd+8jVI85YsiFqtK/cz8ih0f0YGoIxfIbUVwFxTSyMYkSRbyMpkw5C+FfGF
ZQzTfbAZ6nbKESP8ZI/IalvNTqbRi5S9oXMHtYFF7WffBbAFx3UJWMbMRdCpG6KD
qXozKaZnbv0T3SpTQmoT8yMFB9fftXkF+GblaZhMd2Px5amhxFPT19h6/UaFNmvn
pkXHyXss0wdYmpzNXr8h567/fWnljyK4hNM2DCYXFsOkZBNvpD+FOmHEmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCjtrTFtXbvXXpAyOGPvf6ZXAWEpMB8GA1UdIwQY
MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut
ZGNlOTQ3ZTI5NGI2LzEvS08ydE1XMWR1OWRla0RJNFktOV9wbGNCWVNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2
LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaBgMA0G
CSqGSIb3DQEBCwUAA4IBAQAFwVOSNY5XbWpTVtx9Nw6/xDGLvvReS/envLz/2PpW
1K9TVEf3n9zeMloJJwItFvyK67X52QqtSc8UIfkBxFVxG5LXyxNSG19Sepu6fBqY
rP717bPbZuGh0cVLuvsgCykQp4TaQiKW9WFwFWbSnxzw/DvBoM7QnQp5qmffdI44
z7LiQ6rdQJkiddYyekTdrjKbrNCnYmpe4Zr8VdGKMr0uraWj+6CRuZF5vynuAz+u
s+ZDZkfItGYeO8CWcNuy2d5P5W4sb/Hy7LbhGI6WzM+BfToZ63KTiRENLqvMKwgg
IwXO3IlBuKJRuPRTOL4vSQVme3ALn+UxQWyXFQbZv/bt
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:27 2025 by rpki-client