Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/KKuykAsgSlfU2_ah3gPApjpa_bY.roa
File: KKuykAsgSlfU2_ah3gPApjpa_bY.roa (raw, json)
Hash identifier: lDZxYhBz6e/2Gw3mx1uSU5ra67aA2s9x9ASpcPzvb6k=
Subject key identifier: 28:AB:B2:90:0B:20:4A:57:D4:DB:F6:A1:DE:03:C0:A6:3A:5A:FD:B6
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01942747968CB5AA22A677A23F0616FB262E
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/KKuykAsgSlfU2_ah3gPApjpa_bY.roa
Signing time: Thu 02 Jan 2025 13:49:50 +0000
ROA not before: Thu 02 Jan 2025 13:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 582
IP address blocks: 2.179.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:96:8c:b5:aa:22:a6:77:a2:3f:06:16:fb:26:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 13:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28abb2900b204a57d4dbf6a1de03c0a63a5afdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:bb:85:53:e4:b1:94:27:37:8d:d6:ad:ea:
86:19:45:6d:19:26:29:90:55:b3:26:99:1b:e4:80:
cc:c7:57:e3:c3:1c:d7:c7:2d:59:b2:fe:d1:2e:53:
3c:2a:37:85:fd:ed:c5:34:17:af:e2:84:d5:42:94:
49:4c:b0:3d:50:d6:50:2f:02:21:ef:77:09:7b:03:
cb:74:3f:f6:c2:98:58:26:e3:58:b8:ec:76:17:87:
57:34:1b:49:6c:14:64:77:a9:e4:1c:f4:46:d2:6c:
ad:4c:85:d8:98:d6:77:97:c1:b0:bb:25:f6:85:11:
37:b5:3d:85:6a:92:c0:a6:ff:9b:92:d2:9f:1d:05:
3f:14:1b:60:b9:1c:66:71:4d:a6:bc:0b:1b:38:51:
38:e9:15:f9:7a:d6:c1:34:25:db:e3:02:dd:e7:4e:
4a:10:f3:58:4f:89:21:53:ab:24:f6:55:5c:6b:70:
df:1b:f4:d1:78:ae:d4:38:7b:1b:11:49:6a:1b:33:
fe:98:ae:c8:59:b0:ca:c4:8a:79:18:42:ab:16:ec:
8f:2b:af:2d:e4:36:96:ca:d9:4b:ea:d2:50:9d:83:
da:bd:a0:b0:63:de:a2:dc:c2:7d:1b:c9:f3:fa:4b:
41:46:96:20:6f:ea:f6:a1:5c:60:72:f8:fb:12:fb:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AB:B2:90:0B:20:4A:57:D4:DB:F6:A1:DE:03:C0:A6:3A:5A:FD:B6
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/KKuykAsgSlfU2_ah3gPApjpa_bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.179.16.0/22
Signature Algorithm: sha256WithRSAEncryption
81:06:7e:54:3e:81:57:ca:2e:5e:11:05:9f:07:79:49:3d:13:
f3:b2:55:b7:83:2a:05:65:a3:62:5e:0b:73:d2:e9:35:59:39:
a7:3d:c0:04:47:90:bf:09:85:a2:1d:78:03:f3:62:75:72:15:
07:1d:b8:e5:77:0d:a8:46:de:a9:c3:84:cf:0c:d5:43:49:68:
d8:2d:df:ab:b9:ec:00:51:79:d5:7b:e9:98:f7:5d:20:41:5c:
10:2f:80:f1:0e:0a:51:26:fe:5b:de:18:49:ee:8e:b4:ca:19:
7f:24:49:a3:76:03:03:5e:5e:d3:ff:f3:09:e8:13:f8:d6:41:
4d:2b:fe:88:3d:33:5e:b0:d0:fd:6d:6f:9d:a4:ff:60:29:47:
85:dd:a0:49:e2:d7:fb:1d:5c:ba:5f:33:4e:b4:23:5e:fa:b9:
15:64:9e:da:44:7f:93:16:66:95:dc:9b:57:f2:0e:ad:80:bc:
73:e1:19:ed:7f:fa:61:e5:c0:94:bf:9e:e0:13:be:4e:a3:a0:
7b:e4:ff:c7:8c:97:2c:0c:cf:9d:6f:e9:69:d1:b3:c0:de:a0:
89:7e:68:0e:63:90:c8:ac:89:20:0d:1e:f9:3e:f8:fe:a5:5f:
a2:bd:ab:a2:61:ef:02:93:df:94:5f:b5:e5:0a:4f:aa:73:49:
ee:f2:24:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:16:44 2025 by rpki-client