Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/kWKDhSgGMjBkxIksahUfjXABQ-c.roa
File: kWKDhSgGMjBkxIksahUfjXABQ-c.roa (raw, json)
Hash identifier: bePUxmO011xN2IcAnGzNmjkh4o6A+TUyvzs5MubrycQ=
Subject key identifier: 91:62:83:85:28:06:32:30:64:C4:89:2C:6A:15:1F:8D:70:01:43:E7
Certificate issuer: /CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Certificate serial: 0195ED4706D314C2EF1037F5094FA41DC368
Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/kWKDhSgGMjBkxIksahUfjXABQ-c.roa
Signing time: Mon 31 Mar 2025 17:36:49 +0000
ROA not before: Mon 31 Mar 2025 17:36:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0f:9c04::/32 maxlen: 32
2a0f:9c07::/32 maxlen: 32
2a11:68c0::/32 maxlen: 32
2a11:68c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ed:47:06:d3:14:c2:ef:10:37:f5:09:4f:a4:1d:c3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Validity
Not Before: Mar 31 17:36:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=916283852806323064c4892c6a151f8d700143e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:0f:d8:c7:09:e3:c7:0e:d0:43:84:ad:97:
9e:8d:43:3b:dc:97:65:4f:0e:71:a2:81:1f:6d:83:
f6:ee:e3:ea:48:43:e7:1d:2c:c5:42:61:d8:75:80:
98:19:8e:94:b6:f4:e5:dc:4c:b2:ed:1f:38:f6:75:
7a:65:5f:22:63:a2:dd:d8:b0:b3:90:c4:87:8f:d8:
f1:12:e4:54:fd:30:98:55:a6:05:7d:dd:27:5e:12:
09:a4:a4:f4:b6:6b:c5:b9:e0:1b:d6:13:1f:27:71:
93:36:6e:71:d4:e8:0b:3f:c7:c5:dc:59:6e:73:6d:
7c:a5:df:16:c5:11:22:d2:51:e3:06:2a:46:ae:36:
b2:d0:26:d8:37:e5:39:68:56:71:33:94:11:88:47:
de:ac:a3:95:55:cb:96:60:00:69:89:c3:db:85:b4:
28:34:b4:b2:1e:fc:1d:dc:3e:20:ad:e4:a3:fe:d5:
86:c4:4f:1f:b5:64:ae:86:0f:0e:22:4f:09:7b:ea:
bf:b6:f1:23:a6:20:04:bb:e4:b4:0f:51:a1:88:a3:
87:36:38:95:f8:32:9e:2a:d6:5c:87:ec:79:03:c0:
3c:71:45:4d:5a:45:f1:43:e3:72:53:aa:03:e0:a4:
9f:79:c8:33:a4:e6:c1:1a:96:85:23:64:ba:dd:7d:
88:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:62:83:85:28:06:32:30:64:C4:89:2C:6A:15:1F:8D:70:01:43:E7
X509v3 Authority Key Identifier:
keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/kWKDhSgGMjBkxIksahUfjXABQ-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9c04::/32
2a0f:9c07::/32
2a11:68c0::/32
2a11:68c2::/32
Signature Algorithm: sha256WithRSAEncryption
7a:03:ad:fc:2b:74:ab:a4:5d:ff:df:ba:d3:22:36:f1:6e:5c:
9a:e7:4f:aa:ef:bf:6e:f1:b8:e6:fd:d1:5b:1e:9e:36:2c:65:
f3:79:ca:a3:2f:f3:00:66:aa:c5:87:e7:82:ca:2a:1e:1c:93:
f5:b3:e0:85:7b:e1:76:a5:c9:0c:64:55:26:10:87:b9:ba:48:
e8:03:d6:32:ba:7f:e7:28:8a:ef:60:7a:23:9b:e8:84:bb:8c:
73:67:08:a2:b2:9a:92:ff:a6:73:6f:6f:ec:f3:03:8f:a6:a8:
cd:0e:47:d3:71:9c:83:c8:3f:4a:e7:01:b3:0a:3e:ec:78:a2:
9e:da:0a:02:00:f5:9a:b7:a7:8e:0e:f1:89:fc:e1:6d:41:ca:
31:07:19:e7:bf:11:b4:8f:71:1a:19:31:a1:54:88:05:66:06:
93:a7:b1:17:a9:a2:2a:d6:bb:c4:a5:95:bc:46:fb:6e:cc:a4:
a9:c2:da:4b:d1:c6:85:ce:34:a2:e4:13:de:d9:81:78:21:bd:
2f:69:97:86:b1:de:95:8e:f6:29:b0:61:fe:f2:60:20:63:37:
2a:0f:f8:3d:e8:88:65:2d:c4:95:7c:52:1a:48:17:80:6d:a3:
97:53:98:ae:49:a9:dc:e4:a5:5b:bb:8c:94:01:a1:b1:53:23:
4f:d1:0f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:09:23 2025 by rpki-client