Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/kqJKsrZASQy9xjB7FaA-KoQudY8.roa
File: kqJKsrZASQy9xjB7FaA-KoQudY8.roa (raw, json)
Hash identifier: vQnCRMgGVhLMtPMLsspsTBbi23N1aa399srxA6NSARk=
Subject key identifier: 92:A2:4A:B2:B6:40:49:0C:BD:C6:30:7B:15:A0:3E:2A:84:2E:75:8F
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D70E559AF63CC66E6BF8B9B3CEE56B
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/kqJKsrZASQy9xjB7FaA-KoQudY8.roa
Signing time: Wed 01 Jan 2025 21:48:03 +0000
ROA not before: Wed 01 Jan 2025 21:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209474
IP address blocks: 213.238.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0e:55:9a:f6:3c:c6:6e:6b:f8:b9:b3:ce:e5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92a24ab2b640490cbdc6307b15a03e2a842e758f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:df:02:4a:f5:30:4d:06:66:09:ac:fb:cb:
33:9d:01:7f:2d:cd:48:e9:c1:06:b7:8d:4c:97:04:
fc:58:9a:6a:77:b8:3a:1e:2e:2e:80:94:20:a3:fe:
ae:48:33:24:78:73:0a:83:53:3a:c0:bd:1f:34:61:
86:3c:88:15:f8:50:f8:22:93:25:1c:af:f2:ef:00:
1d:d5:47:61:03:dd:6c:a0:b1:0c:97:20:d2:5d:af:
f3:d6:f7:ea:aa:6d:d7:07:14:82:34:bd:c0:1e:2f:
35:8d:48:ce:8a:20:51:cf:58:2a:f3:c1:66:42:36:
84:79:2e:61:9e:58:da:cf:11:f9:1f:d7:6f:92:ef:
89:9e:a4:27:24:3e:6c:86:28:a7:45:b9:8e:15:b0:
f8:00:f6:17:64:89:47:df:15:bc:b2:0a:45:60:b8:
73:c0:36:95:ec:f8:a4:3d:4b:99:6c:40:2e:57:02:
84:d2:4c:b8:e8:a6:44:c9:b9:88:bd:80:06:6f:7f:
3a:a7:49:f0:76:0b:fa:d5:a1:bc:da:41:c0:4f:c0:
1c:54:6f:89:ff:50:77:72:31:06:fb:68:54:02:a0:
3a:da:ba:6a:85:b6:98:c1:e2:4f:fe:1b:68:17:f5:
ec:10:d4:55:1a:f6:c6:99:a7:8b:b1:3a:e7:3d:e6:
7d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A2:4A:B2:B6:40:49:0C:BD:C6:30:7B:15:A0:3E:2A:84:2E:75:8F
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/kqJKsrZASQy9xjB7FaA-KoQudY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.166.0/24
Signature Algorithm: sha256WithRSAEncryption
02:2d:10:d2:53:8b:76:ac:3a:d3:5f:67:48:54:12:fc:05:43:
f0:25:e7:69:62:c1:6e:fa:72:0a:cd:85:56:ed:54:1f:38:f5:
c9:08:04:37:41:dd:72:fb:9a:93:d1:ba:e9:da:88:83:19:7d:
a0:1f:b3:f8:e7:4e:9d:44:29:14:9d:8d:3c:b7:34:3d:55:d4:
33:ab:cd:d9:4d:8c:dd:76:d6:af:69:f9:2e:c1:9f:bb:05:2b:
7f:8b:a1:ea:18:9f:84:7d:1d:e9:9e:c0:1f:b0:c1:4e:02:dc:
b6:16:b1:ed:07:e9:9b:d3:a6:a4:9a:d6:1e:fc:71:16:3a:bf:
3f:eb:62:d3:2a:e7:92:6a:b1:ac:8e:71:ed:16:6c:15:b1:32:
c9:00:7d:21:87:d7:7e:b0:ad:d0:29:2f:72:64:3d:77:66:e9:
a0:aa:1d:a9:44:ec:df:17:87:5f:c5:20:4f:97:58:64:35:9f:
e1:6a:4f:ac:98:29:5e:72:4a:b5:a6:28:6a:9f:1f:58:00:88:
e7:1f:69:6b:80:9f:ad:f0:62:66:d8:1e:b0:74:6d:1e:5d:b5:
e3:99:a6:01:45:29:8a:79:9f:f9:ed:7f:07:ef:14:2f:7b:7c:
d1:e0:2f:44:6b:9d:b6:f6:fd:60:a7:dc:a1:71:60:56:fa:c0:
25:18:7c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:53:50 2025 by rpki-client