Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/kc_pAgwEMNSsLD08APOQDGvFE2M.roa
File: kc_pAgwEMNSsLD08APOQDGvFE2M.roa (raw, json)
Hash identifier: r5V1K4scPTshGUo0mmQh0b/PvpghTBmlsV1I1dOUu6Q=
Subject key identifier: 91:CF:E9:02:0C:04:30:D4:AC:2C:3D:3C:00:F3:90:0C:6B:C5:13:63
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 0196E8A997266FF72E03839EA23DA361AA94
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/kc_pAgwEMNSsLD08APOQDGvFE2M.roa
Signing time: Mon 19 May 2025 13:09:10 +0000
ROA not before: Mon 19 May 2025 13:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212985
IP address blocks: 2a13:a5c7:3300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e8:a9:97:26:6f:f7:2e:03:83:9e:a2:3d:a3:61:aa:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: May 19 13:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91cfe9020c0430d4ac2c3d3c00f3900c6bc51363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:84:6c:56:40:17:c5:5b:64:4a:94:5a:7e:bf:
ad:99:58:eb:e9:7f:81:65:95:23:30:bd:23:29:5d:
a7:d2:6f:c6:fc:cc:15:36:6b:be:71:03:6d:f8:d1:
bd:58:e0:fe:e0:d7:b9:c4:a0:c6:ab:c0:65:b1:eb:
ea:63:4d:5b:a6:f6:5b:41:06:11:ab:ce:8b:6f:5c:
fe:1d:ac:58:b8:ae:62:64:d7:54:31:37:b9:56:98:
ac:35:84:66:a8:54:4a:b3:7a:42:41:1e:90:eb:9c:
d8:ea:4e:89:c1:0a:c8:85:44:a9:db:59:c7:50:6d:
4d:27:b2:05:e1:5b:6b:73:2d:94:44:bb:0d:30:33:
7d:72:0f:54:58:26:23:7f:c0:89:3f:0f:b1:03:78:
8f:1d:c4:e3:0c:98:29:15:c4:02:04:ef:66:c8:96:
88:1d:a5:b9:7f:1d:b0:6f:aa:77:05:fd:ec:a3:58:
4c:1b:95:ad:1d:cd:b4:ac:7a:03:b5:22:58:a0:fc:
75:a6:cf:9a:5f:6a:b2:3f:6a:72:51:bb:a4:d4:d2:
1a:9d:dd:4f:ab:ca:99:c5:48:57:77:08:cb:42:7c:
91:5b:3e:b1:ac:38:63:99:4d:4e:80:f7:89:d5:f6:
f9:84:ce:0a:6d:30:d7:d1:cd:f1:19:4a:eb:fa:31:
4d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CF:E9:02:0C:04:30:D4:AC:2C:3D:3C:00:F3:90:0C:6B:C5:13:63
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/kc_pAgwEMNSsLD08APOQDGvFE2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:3300::/40
Signature Algorithm: sha256WithRSAEncryption
a2:9a:9c:0e:9a:d8:06:1c:59:e4:11:08:ad:bc:be:00:49:af:
88:22:6b:1a:de:1e:37:d7:b5:ca:6a:39:0d:98:bf:1d:61:4c:
61:6c:2b:c7:38:9c:6b:bf:48:7f:00:61:95:30:c0:a1:5a:b9:
e2:11:1b:ed:7b:c1:29:7b:20:83:2d:a2:98:ca:42:8d:16:ca:
1e:cd:bb:a2:56:7b:6c:c4:32:6c:d7:ac:61:7a:d1:8e:db:98:
23:1b:01:71:34:a3:b7:1a:e2:f6:53:12:ee:b9:49:1b:d9:12:
03:ae:2a:ff:a4:2b:59:17:5e:65:9f:49:47:0a:ff:36:16:fd:
a2:d8:d8:73:f4:77:88:df:db:bf:11:91:ce:a1:db:af:58:60:
20:61:6e:ca:7b:52:db:bf:ef:48:41:2e:17:6d:ef:93:80:bf:
1d:19:40:b4:3a:34:91:fc:17:e2:b7:7a:ec:07:87:64:4c:1e:
34:b0:39:f9:a1:cb:7b:c3:9a:cb:e7:86:5c:12:72:70:3f:86:
a7:a9:be:bd:86:c8:d7:21:22:9a:c0:ef:58:db:c6:a0:c4:e7:
a2:62:24:ed:06:d9:6c:c9:68:5b:8e:8b:9c:45:bf:8a:25:c7:
54:b0:1a:4d:19:b4:4f:1f:dc:82:3a:68:e8:c9:04:2e:29:e2:
f4:a1:0a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:31:01 2025 by rpki-client