Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/KoejX2pwYLGIDnJMn_cfXo-zpFw.roa
File: KoejX2pwYLGIDnJMn_cfXo-zpFw.roa (raw, json)
Hash identifier: EZwZ1UXG+Sx/lBymXk/XYrR4THrw5DyuELp1sBrJX3o=
Subject key identifier: 2A:87:A3:5F:6A:70:60:B1:88:0E:72:4C:9F:F7:1F:5E:8F:B3:A4:5C
Certificate issuer: /CN=5283cb4b810e6c592e7479afa42118f755c7f87e
Certificate serial: 019421B1E799331F014CC36C4F90C1C28FE5
Authority key identifier: 52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/KoejX2pwYLGIDnJMn_cfXo-zpFw.roa
Signing time: Wed 01 Jan 2025 11:48:14 +0000
ROA not before: Wed 01 Jan 2025 11:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41369
IP address blocks: 194.48.220.0/22 maxlen: 22
2a0c:c6c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e7:99:33:1f:01:4c:c3:6c:4f:90:c1:c2:8f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5283cb4b810e6c592e7479afa42118f755c7f87e
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a87a35f6a7060b1880e724c9ff71f5e8fb3a45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a6:c7:bd:f5:e3:23:a1:4d:69:58:e6:ac:ca:
87:70:da:b7:ba:df:de:ff:c7:6b:02:2a:4b:72:02:
03:ee:f1:35:ae:a7:a4:c2:8a:46:86:9b:32:8a:01:
8d:c4:7c:e7:89:40:62:4f:75:fc:cc:30:b5:e8:12:
d2:56:e1:bb:6b:c9:0a:a1:eb:94:97:1f:14:80:f6:
30:61:3f:94:fb:04:0f:65:2a:a0:20:dd:f8:f7:a0:
1f:08:74:54:6a:36:0d:49:7c:f0:b3:57:20:d8:81:
ec:e1:c2:e5:47:e6:a2:a9:4a:94:0b:32:11:f1:a8:
fd:be:94:e1:02:98:b4:75:70:64:b2:74:1a:47:49:
b0:96:1c:e5:c8:98:41:22:e1:ef:f2:dc:c6:52:b6:
1a:ac:48:0e:88:a8:57:ef:23:15:dd:37:ec:7c:10:
96:47:46:f1:96:48:83:6d:05:2c:41:c0:4a:d8:40:
ea:26:71:ba:48:21:99:d8:b7:77:79:2b:90:71:cb:
7d:35:ca:94:cc:6b:74:ac:ad:12:ca:85:75:3e:d5:
32:3a:d4:c9:59:ad:0b:51:1d:57:b4:aa:83:7f:18:
50:e3:17:85:39:96:d6:75:ac:7e:d5:b2:1a:a1:1f:
24:b1:7e:cc:bc:53:02:ce:9a:15:26:96:2a:b2:9c:
25:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:87:A3:5F:6A:70:60:B1:88:0E:72:4C:9F:F7:1F:5E:8F:B3:A4:5C
X509v3 Authority Key Identifier:
keyid:52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/KoejX2pwYLGIDnJMn_cfXo-zpFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.220.0/22
IPv6:
2a0c:c6c0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:6a:2a:72:ba:f3:57:34:a6:0d:dd:da:8c:13:2d:76:83:3a:
0e:ed:b5:81:cf:de:ac:d3:64:cd:8f:8c:93:b7:9f:1f:a8:7f:
46:02:f6:d9:8b:d5:92:b2:b9:8b:4b:dc:70:aa:a9:40:0d:72:
0c:82:8c:3f:d3:c7:ea:af:69:51:2c:7e:04:82:58:9e:79:7a:
ca:b7:44:94:0e:f3:3c:15:23:8f:fd:40:1a:4a:34:e6:aa:02:
97:1a:e0:f8:90:27:f6:b5:41:35:a1:fd:07:95:b8:f5:54:b5:
93:57:c7:28:14:88:29:af:0a:19:81:de:21:28:61:06:cb:d3:
74:19:4f:d4:f2:33:43:38:60:29:c1:6f:ca:5a:27:0b:5b:79:
b6:ec:2c:7d:fa:8d:b8:1d:90:a8:55:ae:7a:b5:b3:4a:13:04:
a4:57:bb:61:f6:6e:55:07:93:45:b0:d5:94:45:1f:c9:37:c3:
dd:f6:72:4d:bd:ca:1f:ee:d3:56:0c:ae:9c:c7:fa:ab:53:20:
ee:34:97:4a:19:63:a5:b9:df:c9:88:1d:18:c9:e7:59:b3:d4:
cf:e0:28:53:5a:7e:8c:98:fe:f8:11:ae:e6:80:67:e3:57:e9:
4a:8f:ff:a8:0f:d0:fb:3c:d7:e1:f3:7d:e8:34:53:3a:b5:de:
31:e1:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:32:49 2025 by rpki-client