Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/kAhsl83sRH6W4s8jtU8YJb8qwhQ.roa
File: kAhsl83sRH6W4s8jtU8YJb8qwhQ.roa (raw, json)
Hash identifier: +uG81eC9noWL3YdfTYPyy1nu/3IN2ObXCeDG/BCSpTs=
Subject key identifier: 90:08:6C:97:CD:EC:44:7E:96:E2:CF:23:B5:4F:18:25:BF:2A:C2:14
Certificate issuer: /CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Certificate serial: 01942825921C56F4F66CE89B708EE917278D
Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/kAhsl83sRH6W4s8jtU8YJb8qwhQ.roa
Signing time: Thu 02 Jan 2025 17:52:18 +0000
ROA not before: Thu 02 Jan 2025 17:52:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215419
IP address blocks: 194.61.3.0/24 maxlen: 24
2a0f:5840:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:92:1c:56:f4:f6:6c:e8:9b:70:8e:e9:17:27:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Validity
Not Before: Jan 2 17:52:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90086c97cdec447e96e2cf23b54f1825bf2ac214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:61:6d:51:81:b2:e2:81:59:fe:3f:ab:33:
9d:23:dc:5d:6e:fe:f9:9c:c4:eb:08:04:20:bc:f2:
dd:6d:78:dc:fa:01:39:12:b0:33:7d:27:e5:b6:de:
e1:e3:99:88:c5:b9:47:6c:a1:92:3a:41:6d:1c:59:
3b:2e:93:a9:2e:a8:bc:c7:43:6c:be:94:f7:cd:85:
f5:a7:39:e5:24:05:12:3e:1a:70:7f:04:fb:84:05:
4d:1d:bf:23:23:6a:3a:8e:b3:b8:a1:36:28:00:ec:
34:8d:37:21:7a:e1:f4:a5:5a:a2:bc:f7:02:9d:80:
60:80:55:77:14:3a:f3:ef:56:c4:12:71:14:79:16:
9d:77:25:e5:b6:ac:8d:59:b3:0a:bb:7b:09:70:4a:
c6:b5:bd:77:0e:42:77:19:81:23:e6:b3:9f:35:da:
b7:ba:c4:99:a9:d3:a8:fd:67:e3:01:a4:81:a5:3f:
fa:77:da:5c:8f:b5:51:ab:27:d5:64:5b:d8:fb:d0:
46:fa:4a:00:6d:a1:58:b8:bd:82:b5:33:22:ba:2d:
26:a5:ce:ef:de:24:e2:3c:2b:49:de:e1:fb:fa:3a:
87:6c:51:3b:64:df:47:74:c2:5d:18:09:1e:6c:43:
1e:8f:a3:ff:99:a4:e4:34:41:b2:3e:d1:b8:b0:0d:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:08:6C:97:CD:EC:44:7E:96:E2:CF:23:B5:4F:18:25:BF:2A:C2:14
X509v3 Authority Key Identifier:
keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/kAhsl83sRH6W4s8jtU8YJb8qwhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.3.0/24
IPv6:
2a0f:5840:1::/48
Signature Algorithm: sha256WithRSAEncryption
13:b2:ed:1e:a2:d6:58:4e:7d:1e:52:27:87:6b:35:94:30:b7:
56:09:eb:ab:5e:ac:6f:3a:e2:b6:0d:d2:ab:b0:73:3e:95:41:
93:06:14:0a:16:c9:02:9f:43:12:c0:f9:ca:19:36:80:17:d7:
17:45:9e:73:93:97:17:db:27:bd:4d:a4:fa:68:bc:36:33:27:
84:48:61:fb:19:6f:3e:f8:0d:cd:8e:7e:a5:f5:64:56:a5:e9:
a3:3c:6c:14:b1:a1:e2:aa:72:8f:4f:54:e7:6e:02:60:e3:1e:
4f:de:d9:b4:63:69:22:bb:5c:04:d9:5f:d9:03:13:ec:ce:9d:
31:10:24:30:73:14:fa:92:ea:6b:b2:62:37:cb:3f:6c:fd:f0:
cb:06:e5:13:6d:a1:f5:75:1b:8a:75:a7:5f:83:d5:ec:53:3c:
64:36:97:81:bc:3d:e4:77:72:af:e4:67:d7:80:18:ce:d0:6c:
0c:fb:0f:3b:66:1e:05:96:4c:5a:e5:2c:89:fe:ce:c4:1e:f7:
a2:3e:e8:cd:44:3b:c4:a2:ce:54:5f:6e:70:84:16:2d:68:b0:
54:35:33:9e:dd:f3:f5:1e:89:54:c8:6d:d1:22:28:9f:95:52:
20:12:74:df:a7:ae:fc:d6:70:6f:a5:44:f9:a2:fc:d7:e2:db:
c3:1b:ce:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:59:35 2025 by rpki-client