Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kpqASrON06lmeT5wqJQbN5c5cAc.roa
File: kpqASrON06lmeT5wqJQbN5c5cAc.roa (raw, json)
Hash identifier: nCFF1b1eLmiZ1qijrXjF18+1MALQ16UXUJltPfmtdqo=
Subject key identifier: 92:9A:80:4A:B3:8D:D3:A9:66:79:3E:70:A8:94:1B:37:97:39:70:07
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FE4EA1397CB473AC66D012EB22E44
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kpqASrON06lmeT5wqJQbN5c5cAc.roa
Signing time: Thu 02 Jan 2025 05:49:34 +0000
ROA not before: Thu 02 Jan 2025 05:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197726
IP address blocks: 2a02:128:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:e4:ea:13:97:cb:47:3a:c6:6d:01:2e:b2:2e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=929a804ab38dd3a966793e70a8941b3797397007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a1:ee:38:d4:47:8f:f0:05:79:dd:0c:74:37:
35:21:fe:c1:2c:6e:ef:77:2a:ed:38:0a:32:ad:d1:
a0:6d:94:e7:bf:5c:91:71:79:4b:31:0b:40:9a:8a:
cb:5f:3f:3e:ba:ca:96:63:2e:4f:ca:53:56:c9:6c:
ab:73:58:06:01:e7:63:cb:d7:8f:d0:c0:84:24:04:
df:aa:6a:01:d8:93:c2:23:6a:d9:3d:fc:34:2f:96:
70:a2:56:ee:4a:0a:75:d0:b9:61:28:fe:de:da:85:
f5:e3:d5:b3:41:6f:3f:9e:d8:05:db:f0:da:02:5b:
8f:b4:b7:da:5d:2f:7a:d0:77:b8:f5:8c:4b:32:70:
10:0e:04:3e:31:25:f0:f2:10:98:1d:5c:1f:3e:8e:
fe:e2:89:10:1c:9c:61:ee:4c:2c:1d:ea:83:47:4c:
2c:59:92:a9:bb:09:a9:eb:c5:5e:94:31:02:0e:03:
8e:0c:e6:c3:32:d2:4e:9e:63:e1:9d:f7:2d:94:08:
5c:cb:e6:75:1b:7e:c0:f0:90:bd:d6:94:ed:15:fb:
aa:4a:55:54:50:a6:98:0e:f8:c0:61:5e:d5:34:bf:
b9:fb:1d:e8:f6:0e:c4:fc:2d:29:8c:c6:0f:0a:32:
4e:a0:a2:67:d7:b3:00:18:5e:e2:30:03:0d:67:c6:
8b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9A:80:4A:B3:8D:D3:A9:66:79:3E:70:A8:94:1B:37:97:39:70:07
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kpqASrON06lmeT5wqJQbN5c5cAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:128:2::/48
Signature Algorithm: sha256WithRSAEncryption
55:b9:10:21:61:7c:73:35:cd:dc:00:dd:17:d9:50:6d:de:d2:
a0:d8:6e:4b:72:b3:85:36:87:e4:a7:12:59:61:eb:71:e0:d1:
2f:a5:0d:7d:46:2e:32:ed:64:05:5f:7b:cb:21:4b:b7:81:74:
7b:7b:1f:2e:15:69:1b:d4:1f:5c:62:02:eb:db:00:d2:34:d1:
87:2b:7d:7c:07:59:1e:5e:b3:cf:da:ac:45:46:b7:f7:12:5c:
1f:10:bc:6d:d5:f8:ea:a3:ff:f2:fa:0a:2f:cf:3e:0f:f1:12:
dd:07:6c:b1:bf:aa:e8:70:ec:57:9c:5e:0d:53:90:5e:2c:3a:
19:b9:30:f8:61:5e:cb:4a:32:1d:28:50:65:6d:2e:37:59:ac:
1b:ab:d0:ba:c9:95:f6:92:e8:fb:59:fe:44:24:84:fc:f3:55:
1a:2f:9a:ed:38:b8:53:82:bf:8b:ec:9a:f3:66:33:0c:7b:71:
8b:81:5c:90:30:70:39:53:b5:0a:9e:cd:6c:f5:68:95:6b:64:
bc:8d:13:18:66:e6:6c:52:ad:0d:d2:30:34:4a:31:34:2a:3e:
c3:df:99:81:6c:74:b9:8e:30:82:39:38:e6:20:3c:1c:c8:bd:
f4:92:68:a3:c5:db:f9:0f:aa:91:08:41:98:82:e9:a3:01:f7:
bc:ff:87:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:04 2025 by rpki-client