Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/kpF9qPJxNFMnxwBLEMVnxkLPTlM.roa
File: kpF9qPJxNFMnxwBLEMVnxkLPTlM.roa (raw, json)
Hash identifier: sP+YzMpu1yvXIExVMF+qz5VNW7hPHjzYBXRJgWww/jU=
Subject key identifier: 92:91:7D:A8:F2:71:34:53:27:C7:00:4B:10:C5:67:C6:42:CF:4E:53
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 019425FC76C299527F6352835B1428537F8B
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/kpF9qPJxNFMnxwBLEMVnxkLPTlM.roa
Signing time: Thu 02 Jan 2025 07:48:09 +0000
ROA not before: Thu 02 Jan 2025 07:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203526
IP address blocks: 194.76.122.0/23 maxlen: 24
2001:678:e28::/48 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:76:c2:99:52:7f:63:52:83:5b:14:28:53:7f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Jan 2 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92917da8f271345327c7004b10c567c642cf4e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:33:84:8f:a4:b1:40:45:b0:54:6a:9d:1f:
28:ec:07:d8:aa:52:b4:33:b5:b0:60:73:86:74:ae:
cb:7c:ff:ee:1b:07:51:1d:13:29:27:f0:3c:9d:ea:
21:11:c4:bb:d5:ce:4b:48:a8:90:df:a2:6a:d7:dc:
de:1d:32:cc:48:32:8b:67:ed:5b:93:89:9f:d2:c7:
5e:7d:70:16:ed:21:b9:12:e1:f2:d1:3c:a4:0d:51:
6c:ed:1f:fd:6d:68:0b:51:77:37:e3:70:c2:dc:40:
33:67:9f:2f:63:49:c0:de:2a:fe:e4:e8:ce:80:aa:
05:9d:51:61:70:70:6f:ce:e3:d3:e9:32:93:70:e9:
b0:3d:6e:e4:81:e4:7b:d8:23:30:1e:a7:ff:ad:3d:
97:b5:2e:9d:0d:e1:d0:96:21:be:3e:85:7a:08:8a:
e9:80:83:4f:43:1e:7b:50:02:0c:97:32:ea:70:15:
0e:35:17:bd:f0:4e:37:77:2e:57:6d:b3:a1:4e:eb:
f9:36:30:ef:90:1e:4f:2b:31:60:b4:1e:d1:94:f1:
4e:b2:fd:a7:78:a8:38:ed:21:84:6e:27:79:94:57:
c1:2f:42:c4:c5:81:74:8a:1b:91:e5:5b:2a:27:4f:
d7:82:53:b3:7f:96:35:41:db:bf:36:1e:d1:97:19:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:91:7D:A8:F2:71:34:53:27:C7:00:4B:10:C5:67:C6:42:CF:4E:53
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/kpF9qPJxNFMnxwBLEMVnxkLPTlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.122.0/23
IPv6:
2001:678:e28::/48
Signature Algorithm: sha256WithRSAEncryption
82:2f:0b:30:6a:02:e0:14:b6:a5:da:c1:ad:b2:ff:4a:0c:08:
fa:d0:8e:db:d1:ce:45:c9:9d:5e:86:3e:46:0a:39:07:82:ab:
b4:ad:b1:c4:4b:69:d7:65:3d:25:2c:85:7d:f4:bb:d1:6d:76:
c0:a0:2b:93:cd:75:83:36:0a:1c:20:24:17:45:b6:ed:47:09:
1a:2d:76:73:5f:f3:5e:cb:09:35:08:fd:95:47:31:b5:a5:2c:
5f:01:05:28:bf:66:9d:ba:b3:fd:9c:80:33:8f:e6:e4:28:b3:
5b:5f:06:c7:a1:0b:bf:70:84:03:9e:25:e8:03:d1:4d:0f:80:
3c:2d:84:76:0e:4b:3e:82:98:bd:14:10:76:92:e4:70:1e:70:
23:f6:18:c1:5f:71:e2:50:19:c9:71:58:b7:63:86:38:61:dd:
b0:21:23:8b:6a:9d:16:6f:4b:81:c4:e1:0e:94:22:76:a0:5b:
7e:0e:09:64:9b:c8:4f:08:5d:4d:78:d2:1a:3a:e3:9d:d6:51:
56:fa:2b:16:30:d1:25:de:c7:90:34:ad:0d:bd:b8:44:a5:ff:
6b:0c:00:72:74:d2:b9:7b:46:b3:e7:9b:d3:c6:e9:a9:fd:b9:
fa:26:24:cd:43:3a:b2:89:ce:b7:d5:f4:0f:c3:5a:4c:7d:c7:
30:c7:15:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:04:03 2025 by rpki-client