Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/K8eRRFGuJTx3MN_LWZchaRuBzsw.roa
File: K8eRRFGuJTx3MN_LWZchaRuBzsw.roa (raw, json)
Hash identifier: QTD6eqtDhf0badQKR2sMfNEILHkXgR8wOD2RlKJMd60=
Subject key identifier: 2B:C7:91:44:51:AE:25:3C:77:30:DF:CB:59:97:21:69:1B:81:CE:CC
Certificate issuer: /CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239
Certificate serial: 0196ED500402FBCF5842C4CEF5337E2DA1C6
Authority key identifier: 31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/K8eRRFGuJTx3MN_LWZchaRuBzsw.roa
Signing time: Tue 20 May 2025 10:49:26 +0000
ROA not before: Tue 20 May 2025 10:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24918
IP address blocks: 193.110.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:50:04:02:fb:cf:58:42:c4:ce:f5:33:7e:2d:a1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239
Validity
Not Before: May 20 10:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bc7914451ae253c7730dfcb599721691b81cecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:eb:55:12:57:dd:ca:e2:d9:21:be:f3:21:32:
4a:16:f1:8d:7c:ad:1b:89:d7:7b:03:96:52:45:60:
4e:80:52:27:ac:5c:d2:3d:87:d5:15:83:8e:3b:bf:
d3:41:55:28:2a:8b:7c:f2:47:27:5b:50:a7:de:93:
b4:7b:70:77:38:0d:d2:09:f6:74:de:99:41:45:af:
6f:1e:0a:21:7d:22:37:2f:52:f7:29:63:8e:b2:a3:
32:bd:41:13:10:6a:f2:a7:ea:c0:7e:55:8d:54:2e:
90:65:e4:4f:c4:e7:ea:17:ee:a7:81:19:57:53:38:
54:75:9d:20:05:64:a8:c0:e1:f8:72:56:c0:38:0e:
d3:33:71:fe:28:6a:fd:94:76:71:b6:69:ae:d8:6d:
68:05:0c:80:3d:1e:20:5d:42:d9:5c:e0:b5:08:7d:
d2:2d:3c:27:ab:bf:55:ad:cb:42:33:36:a6:86:cf:
8e:9f:80:af:05:31:e2:47:2f:58:84:40:ee:25:e5:
47:01:21:e8:c5:39:8a:9b:a2:05:c2:31:3c:f6:e9:
6a:3a:76:07:0f:b8:c9:0f:a8:e3:0f:7f:56:1c:d2:
8d:8a:30:78:a7:a9:63:d1:48:b5:bc:dc:f1:b5:91:
65:c3:2b:27:01:1d:b3:2e:03:c5:15:f1:03:c6:b7:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C7:91:44:51:AE:25:3C:77:30:DF:CB:59:97:21:69:1B:81:CE:CC
X509v3 Authority Key Identifier:
keyid:31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/K8eRRFGuJTx3MN_LWZchaRuBzsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.98.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:7f:29:85:9c:49:89:00:8d:16:81:b5:b7:0e:cd:70:33:06:
c4:ce:ec:95:51:bb:b5:66:6c:de:65:d3:fe:e9:48:54:a9:3b:
12:15:79:23:e7:d6:3a:94:b5:30:c5:b8:f2:e4:40:dc:3b:3b:
b1:a6:c1:f5:45:dc:35:c9:cc:d6:72:87:1a:f7:af:99:8c:e5:
7e:e7:2c:6c:99:4a:56:35:36:f9:6e:13:25:78:41:a7:a3:30:
59:67:3f:be:15:b8:f7:4f:57:59:d2:31:75:fd:dd:67:b6:74:
76:37:60:94:8f:32:ee:43:31:be:ab:f2:a8:55:45:94:a9:ab:
a8:3e:3b:1a:35:92:76:24:53:e6:b0:27:72:83:4e:bb:d2:02:
f4:09:eb:0d:4e:bd:9b:9a:e5:5e:fb:40:47:8d:1b:25:91:5b:
f8:e9:a6:c9:9f:e6:b6:ce:57:f0:dc:ea:85:4a:f0:bf:b3:7b:
db:9a:b2:ab:1a:1a:b6:78:b2:b7:0f:df:f4:b1:d9:94:7b:94:
e4:db:43:ad:74:a4:61:fa:68:3a:ed:4a:c4:e9:d6:4f:35:bc:
cb:62:90:e7:a9:81:dc:7b:d0:cb:72:1f:91:0f:ce:f3:7d:a1:
41:c4:d8:25:be:5d:24:b0:e6:55:33:9c:48:53:e8:30:8d:ca:
08:cd:94:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:22:39 2025 by rpki-client