Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/Kk_Nqx-T7Pv-J68aF1UpAxcFsyI.roa
File: Kk_Nqx-T7Pv-J68aF1UpAxcFsyI.roa (raw, json)
Hash identifier: SIEfBbEbGt2Z3RQ6DVZe/KIGqB2xRs2VDt+6m/NBCj4=
Subject key identifier: 2A:4F:CD:AB:1F:93:EC:FB:FE:27:AF:1A:17:55:29:03:17:05:B3:22
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 0194221FCD28DC971B636857F494A4B16A69
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/Kk_Nqx-T7Pv-J68aF1UpAxcFsyI.roa
Signing time: Wed 01 Jan 2025 13:48:17 +0000
ROA not before: Wed 01 Jan 2025 13:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203965
IP address blocks: 185.118.172.0/22 maxlen: 22
185.118.172.0/24 maxlen: 24
185.118.173.0/24 maxlen: 24
185.118.174.0/24 maxlen: 24
185.118.175.0/24 maxlen: 24
2a06:9380::/29 maxlen: 48
2a06:9380:172::/48 maxlen: 48
2a06:9380:173::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:cd:28:dc:97:1b:63:68:57:f4:94:a4:b1:6a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Jan 1 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a4fcdab1f93ecfbfe27af1a175529031705b322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b3:f0:ec:e9:d1:bf:f6:3f:45:82:7a:db:81:
28:e7:49:69:de:14:1a:53:9b:7e:44:42:c0:55:16:
52:a1:0f:9e:e6:f8:d0:bc:de:74:6d:aa:dc:67:c2:
9d:3c:16:17:2e:49:cf:6f:be:94:37:13:4e:98:f9:
f3:93:cd:1e:f7:a2:8a:3e:2f:3d:86:ba:7f:7a:e5:
0c:71:25:f6:d7:de:90:75:8f:c9:e7:63:94:cc:1e:
18:c7:7f:28:b8:5d:35:84:3d:28:a6:1e:cc:f2:14:
85:6b:08:8b:30:f6:04:95:8c:70:89:c7:aa:76:46:
56:5d:2b:fc:a7:33:30:73:d8:14:82:89:d3:c9:00:
47:b2:9a:5f:40:8a:01:18:dc:55:3c:f3:7f:54:65:
75:96:75:32:93:fa:19:31:e6:57:14:8b:e5:49:7f:
52:e6:34:df:51:76:de:4c:16:07:77:1a:8c:6c:da:
24:ab:c1:25:cc:ec:4c:4d:98:17:be:77:b2:03:db:
64:ce:30:71:fa:b7:3c:d2:3f:54:a6:27:59:85:5b:
ad:f3:87:a8:ca:4f:9b:6e:93:d7:27:65:58:21:91:
80:b5:eb:a1:5b:10:5d:89:5d:44:7e:7c:56:6f:de:
f2:e9:8f:55:31:03:01:d3:4a:f7:74:ce:ef:cf:da:
9a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4F:CD:AB:1F:93:EC:FB:FE:27:AF:1A:17:55:29:03:17:05:B3:22
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/Kk_Nqx-T7Pv-J68aF1UpAxcFsyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.172.0/22
IPv6:
2a06:9380::/29
Signature Algorithm: sha256WithRSAEncryption
16:f6:39:17:d6:bc:20:b0:09:42:26:3a:89:01:e5:1f:6a:8a:
3a:38:41:c3:84:48:cd:d1:3c:dc:f8:44:2b:ea:f9:8e:1a:99:
49:91:79:f9:47:8e:80:96:a9:ff:6d:bf:d5:37:d8:ca:c5:74:
43:6f:63:d0:ed:80:be:47:84:6d:50:20:85:4b:3b:e4:a4:d6:
d6:94:6e:18:5d:ec:20:48:c6:ed:33:76:2f:18:a8:ea:a0:df:
c1:4e:1e:7e:5f:3e:9c:3d:20:09:d7:b8:75:b1:42:64:25:1a:
18:a0:a9:1a:b8:6a:75:c3:b4:3f:e9:04:59:b4:b1:89:ca:2d:
90:c0:8b:f8:c5:44:b3:cb:21:bf:47:17:21:fe:c4:fa:3f:2c:
b7:d8:97:55:57:78:22:14:57:5d:f8:4c:13:66:11:e9:de:0d:
25:36:cc:5f:b0:21:8f:d5:e4:fc:2a:3d:aa:d1:81:6d:09:22:
45:d4:3f:db:6e:0e:fb:31:4d:6a:c3:0d:c9:e0:67:59:b3:4f:
cb:a9:de:d3:1c:37:7d:21:af:d1:df:04:fd:a0:c7:ea:bc:d3:
b0:6a:1c:c6:90:d8:69:82:22:5e:4b:f9:12:e0:5d:9c:c2:32:
44:20:3f:b1:4b:1e:13:db:f3:dc:3e:7c:34:46:26:78:1b:5c:
ac:08:b4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:24:37 2025 by rpki-client