Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kcxXAbO0yW98tVKID-UtP9nGYmY.roa
File: kcxXAbO0yW98tVKID-UtP9nGYmY.roa (raw, json)
Hash identifier: TD8fmsbp8g+g96lOOWkfL0YigdFgQ4524FtD2pqRsDE=
Subject key identifier: 91:CC:57:01:B3:B4:C9:6F:7C:B5:52:88:0F:E5:2D:3F:D9:C6:62:66
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0195CD215B64A4243D4AFAA34890A2C226FE
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kcxXAbO0yW98tVKID-UtP9nGYmY.roa
Signing time: Tue 25 Mar 2025 11:47:50 +0000
ROA not before: Tue 25 Mar 2025 11:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213896
IP address blocks: 84.32.100.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:21:5b:64:a4:24:3d:4a:fa:a3:48:90:a2:c2:26:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 25 11:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91cc5701b3b4c96f7cb552880fe52d3fd9c66266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:ec:d9:86:6c:7e:2d:fe:9a:15:39:b5:2b:
b1:0a:a6:a8:62:bd:4a:c7:85:40:f5:4b:d9:1a:db:
a0:ec:65:5c:32:85:f4:27:c3:4b:75:e3:7d:8d:e6:
be:97:29:01:e8:91:6c:b4:c0:b9:30:2a:d6:35:07:
d8:8f:6b:d2:87:50:d2:7d:d8:af:ca:c5:a1:dc:a0:
27:66:ec:ae:67:dc:81:81:44:41:70:69:9c:dd:b7:
b0:9c:3a:63:9c:06:0d:8c:66:2d:84:4b:7b:71:71:
89:e2:e3:02:52:45:28:a7:cd:d8:80:e8:af:81:70:
d2:ec:01:74:ce:60:1a:f6:3a:ea:f4:66:5d:62:bc:
ad:d0:a9:91:0c:dd:fb:8e:ed:8a:3b:1e:0d:02:74:
a7:d8:b7:eb:49:ac:0b:e3:c1:56:c9:9d:f9:36:51:
98:fc:de:38:7f:67:c4:1b:fe:46:cb:d7:6e:00:0e:
3c:97:2d:84:66:ba:f3:c8:d0:8c:1f:0c:ed:40:81:
35:49:f4:91:e4:20:3e:b4:2f:d2:16:6d:19:09:64:
87:6b:fd:f2:35:c5:df:89:b1:8d:2c:ea:f0:6d:ad:
f0:ce:e5:c5:55:06:02:86:cf:25:f8:2b:5f:72:e2:
73:3c:7a:48:3c:5e:c8:f9:28:c0:35:d8:75:e4:53:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CC:57:01:B3:B4:C9:6F:7C:B5:52:88:0F:E5:2D:3F:D9:C6:62:66
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kcxXAbO0yW98tVKID-UtP9nGYmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.100.0/24
88.216.220.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:87:53:6c:ed:97:49:ee:8b:c5:c4:af:99:18:d2:d0:72:36:
b6:08:1f:eb:21:bb:e4:d4:57:e1:68:26:6a:28:1c:35:a4:ff:
9b:a1:bb:cf:df:e6:f7:ea:a4:15:5c:98:1a:ff:cc:d7:1d:38:
15:3d:36:c8:5c:6a:39:b5:97:fc:06:26:0a:fb:7e:e8:e2:c4:
59:90:a3:a9:bd:f3:1a:1e:ba:b5:32:ea:47:67:95:d2:59:ae:
f8:c3:b6:84:f1:e8:6f:4a:1f:2f:f8:31:e5:63:6a:c4:a8:52:
08:36:c5:af:52:d1:fc:4c:3f:56:04:9e:26:ef:7b:ab:57:b7:
47:32:8a:6e:48:89:ff:6a:ff:7b:ff:4a:0f:0b:ee:a6:58:dd:
d4:f3:b2:6e:4d:9d:a5:86:20:a8:f2:5d:2e:d2:fd:eb:e7:55:
36:05:c6:3b:a4:e3:de:3d:9d:39:83:24:2a:de:5d:cf:2a:64:
64:e7:a7:97:78:2e:56:21:c7:d5:4d:98:27:30:db:8e:3f:dd:
0e:49:f2:1e:da:5b:f7:e1:b1:0b:d9:a0:29:72:9f:65:b0:00:
8e:f7:30:4e:a0:4b:d7:8e:ee:fd:74:ed:12:35:1b:95:99:e7:
d3:45:8f:30:d4:24:a8:fe:2b:49:71:bd:0e:ec:3e:ba:02:6a:
c8:2f:78:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:24 2025 by rpki-client