Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/kl2WbCF8iY1s6JmhzyE-DfoqlVU.roa
File: kl2WbCF8iY1s6JmhzyE-DfoqlVU.roa (raw, json)
Hash identifier: RNHIQDgmoNeDynP36HRc36UBOKT5j+Ec+ZMFlX21lk4=
Subject key identifier: 92:5D:96:6C:21:7C:89:8D:6C:E8:99:A1:CF:21:3E:0D:FA:2A:95:55
Certificate issuer: /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial: 01942445351860359034D18BDC576072D29E
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/kl2WbCF8iY1s6JmhzyE-DfoqlVU.roa
Signing time: Wed 01 Jan 2025 23:48:22 +0000
ROA not before: Wed 01 Jan 2025 23:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12301
IP address blocks: 193.178.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:35:18:60:35:90:34:d1:8b:dc:57:60:72:d2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Validity
Not Before: Jan 1 23:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=925d966c217c898d6ce899a1cf213e0dfa2a9555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:c2:49:26:d0:59:79:73:97:43:e4:29:32:
7a:63:32:13:d1:a3:a3:5c:e6:78:55:d4:bb:91:19:
e4:9d:1b:e6:d8:c5:af:3d:06:c1:f4:c9:35:f4:1d:
95:90:f4:1f:ee:c9:6c:4b:e9:f2:1b:75:d7:9f:4d:
22:b2:82:43:a4:ed:cb:4c:13:ca:9d:3a:ef:c3:f3:
f7:63:20:7b:46:cd:69:b9:44:69:68:07:0e:06:85:
c5:39:b4:ea:38:e3:0a:1e:63:29:01:47:27:4f:fa:
50:c5:c7:d4:20:a3:57:7e:44:79:0f:42:05:a3:6d:
3c:c9:a3:3f:16:a0:cf:29:80:ea:51:6d:8e:f3:fa:
d6:0c:80:5b:bd:b7:34:f5:5a:c6:00:a8:85:ef:34:
4b:eb:19:7f:dc:b7:e2:24:36:00:c8:97:6c:0f:00:
4d:76:22:96:19:1c:fd:f0:a5:3e:60:fb:6d:37:1c:
b8:b8:d4:ab:8f:5d:28:ba:82:b6:b4:7e:16:a8:1c:
4b:0d:dd:56:7f:d4:32:e2:70:90:f2:f0:d6:56:32:
ad:9f:e0:1d:1c:fc:26:06:62:e3:83:d9:92:2f:25:
a5:8f:7d:7a:f5:93:4c:e5:35:10:91:3e:ec:88:80:
01:09:90:44:17:d4:c9:4b:ae:94:d5:6c:93:31:13:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5D:96:6C:21:7C:89:8D:6C:E8:99:A1:CF:21:3E:0D:FA:2A:95:55
X509v3 Authority Key Identifier:
keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/kl2WbCF8iY1s6JmhzyE-DfoqlVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.168.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b5:35:b6:fe:0f:1d:e8:00:83:6a:f9:ed:96:b4:2b:4e:68:
c3:1a:35:62:07:2e:69:12:df:91:dc:6b:96:b5:ed:e3:af:6c:
57:70:9f:1d:49:4c:89:88:d4:b2:cd:5a:ba:51:15:94:16:71:
95:52:b1:0b:d6:8f:f5:06:92:e8:3f:f3:66:f9:2d:18:a4:dd:
2f:c2:e6:7d:97:77:0f:e5:0c:32:ca:32:8a:19:7a:38:70:6b:
e2:49:8e:6f:12:c8:b2:1b:bd:d7:e1:4c:da:61:fc:65:33:96:
6a:70:1f:96:38:12:7c:ad:52:64:43:8f:ae:6b:bb:90:ec:c9:
78:b3:cb:d4:8e:9c:4d:fa:41:41:ee:68:05:a7:fb:ff:44:7d:
5c:8b:de:39:17:64:8d:c4:33:73:3e:9c:ba:f6:35:fb:93:0a:
37:a2:cd:49:74:5b:bc:fc:20:21:24:ff:f3:22:09:12:32:0f:
0f:7e:1c:f9:bc:9a:8c:16:ae:13:2f:31:90:87:5b:06:6b:5e:
10:51:a5:b3:7d:ee:9c:06:e8:3f:61:be:40:b3:f6:6d:15:e4:
e0:76:b8:2c:de:28:4b:48:60:48:24:64:58:a3:07:60:5d:11:
5e:d5:a6:b6:8b:d3:62:31:6f:57:11:60:56:1b:25:a7:5b:23:
32:4a:7e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:31:35 2025 by rpki-client