Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/K0006sACxq_nagrNWYnaLOPcVvU.roa
File: K0006sACxq_nagrNWYnaLOPcVvU.roa (raw, json)
Hash identifier: PIUj74icnP+TzmqbwAj/PMt3eOc+JvzEBO8p/Vp6pUs=
Subject key identifier: 2B:4D:34:EA:C0:02:C6:AF:E7:6A:0A:CD:59:89:DA:2C:E3:DC:56:F5
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5D0883F59978A882FD0AF86A48CD0
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/K0006sACxq_nagrNWYnaLOPcVvU.roa
Signing time: Wed 01 Jan 2025 07:47:50 +0000
ROA not before: Wed 01 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 185.196.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d0:88:3f:59:97:8a:88:2f:d0:af:86:a4:8c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b4d34eac002c6afe76a0acd5989da2ce3dc56f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:d0:5d:51:60:04:3d:a1:20:ec:27:c5:aa:
53:a8:47:12:58:6d:47:7f:fd:cd:98:c7:4b:23:0d:
0e:b7:61:67:74:f0:a3:c5:e5:f3:ed:96:fb:5b:6f:
75:22:be:03:e8:d2:f7:02:61:ca:e6:de:fd:a5:a4:
d4:a3:3d:3d:5c:26:6b:44:bd:a4:6f:3d:8b:39:20:
9e:16:e6:82:c1:02:ef:c7:1e:9c:e8:e8:9d:4b:aa:
60:a9:3d:3c:55:c4:c5:ac:17:84:10:95:40:bc:88:
b6:70:ab:96:a0:4f:e3:6c:6f:b8:09:4b:08:94:05:
9e:c9:fa:c2:6a:5d:2f:f8:45:78:bc:7b:b0:63:88:
b1:9d:3e:b6:54:c9:62:9c:3b:a0:08:2a:f9:47:1d:
a8:86:38:de:41:48:b8:fd:36:c6:6f:d2:c0:91:1e:
28:c2:c1:18:1a:26:b5:68:88:8a:e6:18:34:41:e1:
ee:81:c7:6d:89:a9:24:69:54:46:67:c2:c6:df:ec:
98:08:ef:ca:c4:98:c4:da:be:08:4e:84:f3:59:2c:
4d:5d:5b:1d:03:8d:3e:df:72:42:b5:79:88:81:b7:
ee:06:af:18:33:48:dd:78:44:14:ee:ac:65:c2:b1:
f0:39:1a:ba:cd:a9:f7:59:8f:06:8c:f7:44:b7:c8:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4D:34:EA:C0:02:C6:AF:E7:6A:0A:CD:59:89:DA:2C:E3:DC:56:F5
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/K0006sACxq_nagrNWYnaLOPcVvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.117.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f5:23:43:d3:15:ab:76:83:c7:64:f2:76:3b:32:5a:4b:12:
ea:d4:7a:3f:ea:f8:d4:f7:6a:3c:d8:54:02:4f:b0:9b:3f:41:
c3:12:a8:8f:5d:8f:f0:bf:ef:34:7f:58:ce:86:46:85:bc:f7:
67:1f:74:8c:3a:7e:73:64:7a:f0:43:84:e0:b3:f6:96:ef:c9:
ac:05:d6:cd:79:57:58:5e:8d:a0:f5:b1:1e:ee:74:64:9f:40:
54:23:6d:d3:87:5d:21:5f:fd:6a:36:79:30:c3:b2:78:83:6a:
1f:57:3a:1e:fa:69:8a:bc:ea:e5:e2:8c:d5:cc:2b:d6:8b:30:
4a:ed:21:2d:67:5e:a0:e9:f6:c8:a5:65:99:ef:dd:8a:5d:e0:
cf:d8:de:8c:4b:59:9f:46:c3:33:f0:0c:58:4d:d8:ea:dc:6f:
d1:0b:dd:da:65:35:f0:f4:e0:63:ee:fe:a8:4e:d6:0f:66:e8:
b0:53:5b:69:4d:8e:23:83:c9:eb:36:ed:42:20:76:8a:90:a7:
51:3c:42:ea:f3:7f:e1:68:3f:ee:a2:31:d3:f3:24:6c:0e:00:
7f:7b:85:9c:d7:09:d2:34:6f:a5:21:68:24:14:89:ef:11:c2:
99:c4:4a:9c:8e:72:8a:1d:ec:52:fc:36:12:ee:fd:b2:41:72:
ac:df:c8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:13 2025 by rpki-client