Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/kHqbkYzy2N_MvKidS6WKnrLjzKo.roa
File: kHqbkYzy2N_MvKidS6WKnrLjzKo.roa (raw, json)
Hash identifier: Lsb5tSxssp8PgXcP5UVUoohVhgT3hjqFGDFUde7zABc=
Subject key identifier: 90:7A:9B:91:8C:F2:D8:DF:CC:BC:A8:9D:4B:A5:8A:9E:B2:E3:CC:AA
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01942827BC437BAC4E2503D4BF77036C2429
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/kHqbkYzy2N_MvKidS6WKnrLjzKo.roa
Signing time: Thu 02 Jan 2025 17:54:40 +0000
ROA not before: Thu 02 Jan 2025 17:54:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42371
IP address blocks: 213.181.199.0/24 maxlen: 24
2a02:730:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:bc:43:7b:ac:4e:25:03:d4:bf:77:03:6c:24:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 17:54:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=907a9b918cf2d8dfccbca89d4ba58a9eb2e3ccaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:76:1d:b7:1a:6d:d3:c7:dd:b6:03:4f:ed:
c6:2c:55:51:d7:d1:1c:43:e8:ae:3a:af:b2:ce:2c:
19:bc:f7:8a:f4:8f:c5:85:b0:90:bf:75:e1:37:a4:
c1:a4:0a:a7:54:4f:d0:71:1f:32:d0:01:6e:c7:db:
ba:97:8d:01:99:db:1e:a5:dd:a1:72:a6:95:22:c6:
d2:7f:11:9e:26:f9:45:35:7a:d3:bf:b4:1a:6b:74:
9b:fd:80:08:aa:a5:bf:5c:10:d7:f3:4b:49:6f:85:
78:16:6b:b2:7c:5d:da:53:63:5e:d2:5c:b8:c3:f9:
72:2f:f2:a3:18:32:80:e7:fc:ce:52:c9:f6:68:2d:
60:65:76:48:fc:8d:2b:47:e3:54:e6:a6:9b:5f:38:
18:1d:29:4e:72:78:91:4e:f1:5b:05:58:f8:13:1c:
86:8e:d6:f2:f4:d0:bc:ce:66:1c:3d:66:51:fc:67:
c7:63:4f:e6:d8:8a:15:6d:4a:d1:2f:7e:fe:b0:6d:
10:ef:8a:38:ed:2c:19:e4:44:ee:8d:94:c8:e8:72:
fe:d2:30:81:80:35:f5:1f:53:04:50:4f:29:c9:f6:
2f:95:f9:05:7a:c4:19:81:df:87:52:b9:83:83:f2:
04:fe:9d:49:22:5a:98:bf:da:ac:f7:1f:68:9c:16:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7A:9B:91:8C:F2:D8:DF:CC:BC:A8:9D:4B:A5:8A:9E:B2:E3:CC:AA
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/kHqbkYzy2N_MvKidS6WKnrLjzKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.181.199.0/24
IPv6:
2a02:730:4000::/48
Signature Algorithm: sha256WithRSAEncryption
12:26:33:73:a1:07:e4:3c:6c:41:fb:32:ff:36:24:e9:91:fa:
1f:b7:37:a7:ed:4d:04:b2:78:e5:86:4d:f8:e5:f1:79:af:c3:
4b:d7:42:d2:df:d9:b9:75:47:74:e1:c2:cc:6a:04:4a:6c:6b:
8f:d2:77:dc:e4:f1:91:82:71:10:2c:78:de:93:a4:36:90:fa:
13:22:f6:b6:f4:04:3f:b1:2c:26:d7:75:b8:48:5c:8f:57:a3:
ad:99:c3:82:a9:3e:14:a4:20:0d:4f:9b:ed:18:04:bf:dc:0b:
2b:cd:08:f0:3b:23:df:cf:32:84:5b:c2:6e:fc:d4:5a:38:68:
76:c4:5d:17:8d:74:b2:76:5d:a2:a7:13:45:08:87:bb:be:97:
54:c0:68:c3:8c:6a:15:9c:de:b9:55:03:81:e6:79:9e:d6:49:
70:3a:af:60:db:4e:55:84:3b:12:b2:87:94:d4:b5:2e:76:3e:
01:20:91:16:66:79:7a:95:da:26:9d:15:80:9a:3d:43:c7:1a:
c2:f6:fd:e2:c4:79:58:85:7a:a4:f9:50:3c:86:11:0e:90:19:
3c:a2:54:be:37:f5:b2:37:e8:77:81:8f:82:0e:19:39:1d:6c:
cd:d0:41:25:09:0a:a9:cb:d8:fe:f6:4c:20:03:28:9a:dc:80:
e0:1e:97:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:12:53 2025 by rpki-client