Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/skCVKxk18u8iDsYso8A72bgiHug.roa
File: skCVKxk18u8iDsYso8A72bgiHug.roa (raw, json)
Hash identifier: nn/x2nXxtAw5Z/QReAqKvy2u4x4tQ9QyKaEVK0rkZpA=
Subject key identifier: B2:40:95:2B:19:35:F2:EF:22:0E:C6:2C:A3:C0:3B:D9:B8:22:1E:E8
Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial: 0195B9966D771B6C5F5958C742EB0F2CA0A7
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/skCVKxk18u8iDsYso8A72bgiHug.roa
Signing time: Fri 21 Mar 2025 16:43:18 +0000
ROA not before: Fri 21 Mar 2025 16:43:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204773
IP address blocks: 93.95.210.0/24 maxlen: 24
185.42.123.0/24 maxlen: 24
2a13:3000::/30 maxlen: 30
2a13:3004::/31 maxlen: 31
2a13:3006::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b9:96:6d:77:1b:6c:5f:59:58:c7:42:eb:0f:2c:a0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Validity
Not Before: Mar 21 16:43:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b240952b1935f2ef220ec62ca3c03bd9b8221ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:d1:b6:88:0d:30:e1:a4:ce:35:6e:fd:a4:
82:30:39:68:7b:63:8d:ff:f6:f5:05:d2:08:77:49:
09:77:c6:bd:82:62:e0:98:7d:bc:12:74:38:31:4a:
3a:dd:ab:8e:a8:af:05:97:c7:3f:e6:51:2b:3b:b4:
ab:58:ff:37:d0:a1:d3:45:73:1e:c6:62:a4:5a:ab:
4d:11:55:74:b2:ea:51:84:fa:5d:82:ad:9d:3f:4e:
28:3a:94:65:bc:3d:34:85:62:4d:eb:32:5d:40:8e:
c2:e1:48:d6:46:6a:6e:99:82:ff:c3:68:5a:e5:c0:
db:34:88:fa:00:1d:4c:f7:ce:07:b3:8d:1c:d0:ef:
12:28:3c:9a:28:81:9e:61:32:cf:11:47:a4:c1:29:
ea:5b:0d:59:4f:7a:4b:57:2c:64:26:c7:52:e4:27:
31:5c:3c:c2:ef:38:9a:22:70:b9:12:29:3a:ee:5c:
65:31:00:48:eb:0d:eb:94:08:0d:c5:ed:2d:ae:a5:
c8:2e:a1:25:cf:40:89:c8:31:1e:08:3b:fd:a2:3d:
c2:60:6b:4a:fe:ad:8e:08:70:57:1c:6f:1d:40:13:
7e:d8:a0:eb:60:3c:d6:eb:ce:2b:6d:be:e9:e4:15:
95:5a:a4:09:ba:84:32:82:5d:1b:7d:f2:eb:61:6c:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:40:95:2B:19:35:F2:EF:22:0E:C6:2C:A3:C0:3B:D9:B8:22:1E:E8
X509v3 Authority Key Identifier:
keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/skCVKxk18u8iDsYso8A72bgiHug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.210.0/24
185.42.123.0/24
IPv6:
2a13:3000::-2a13:3006:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0a:c8:ab:48:2d:c9:ae:ff:1e:da:db:30:73:6e:6b:4b:45:42:
ae:62:11:8d:c4:7c:5f:cd:06:8d:86:74:fd:33:d1:da:c2:71:
3e:ba:08:ea:92:9a:3d:8c:f2:e0:72:5f:6f:09:33:8b:aa:39:
24:3f:fb:88:50:d6:74:e7:b5:77:be:4d:bd:3b:bd:8d:9e:41:
11:0b:73:1c:2a:6d:ac:70:d5:15:2d:07:07:39:ed:38:86:5e:
0e:5b:87:b7:67:c6:70:90:c4:06:ae:d5:78:9e:a6:0c:d1:4a:
da:c2:4c:a6:3a:ea:72:8f:3b:62:a8:7a:45:3d:0a:04:31:35:
df:f7:5c:e3:7a:d8:a9:ef:04:dd:53:39:3d:a0:a6:7a:c4:2c:
b5:f0:d8:f2:0d:22:e2:ed:e0:87:09:79:27:24:af:b7:62:0a:
01:9f:3b:f5:c7:36:9b:94:50:cd:c9:a2:2f:ad:b4:6c:56:d5:
dc:2c:a7:78:3b:7a:83:61:cf:af:be:ec:5f:d7:fd:70:86:b6:
8c:e7:6b:5d:4a:04:e3:b7:8b:13:ff:11:e4:46:78:16:28:28:
84:dc:b4:32:37:00:6a:1b:75:8a:d2:c8:93:ed:95:1d:1e:13:
e6:22:8d:2c:e7:7b:7d:60:c4:c6:02:2c:f2:7f:1a:f9:b6:0f:
e3:1e:c9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:52:45 2025 by rpki-client