Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/cKynaQHnSt381VIcTQApgbYb_ws.roa
File: cKynaQHnSt381VIcTQApgbYb_ws.roa (raw, json)
Hash identifier: 7rx4+e5TenBrpsBT5lxdY3jIzFb2xLdj/6iZmgJIGMo=
Subject key identifier: 70:AC:A7:69:01:E7:4A:DD:FC:D5:52:1C:4D:00:29:81:B6:1B:FF:0B
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 0194282365142B835BDAD211D016E7AD40EC
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/cKynaQHnSt381VIcTQApgbYb_ws.roa
Signing time: Thu 02 Jan 2025 17:49:55 +0000
ROA not before: Thu 02 Jan 2025 17:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8239
IP address blocks: 212.59.192.0/19 maxlen: 19
213.192.196.0/24 maxlen: 24
2001:ac0:c800::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:65:14:2b:83:5b:da:d2:11:d0:16:e7:ad:40:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Jan 2 17:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70aca76901e74addfcd5521c4d002981b61bff0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:91:ba:3e:0c:1f:a8:b8:2e:57:15:53:87:
33:a4:66:ec:0f:74:08:9c:0d:78:ec:b1:2b:86:aa:
63:ad:dc:30:37:c6:52:14:50:fa:78:59:78:9b:49:
8e:81:66:08:0b:b0:c5:93:47:e5:b0:ea:32:f1:81:
63:b0:61:8e:e4:8e:86:0f:8b:c6:dc:67:94:26:e7:
84:be:2a:a0:45:60:07:2c:4b:3e:b3:6e:83:8e:fd:
ed:5e:c1:26:6a:7f:26:8b:a6:f6:49:ee:f6:ef:a8:
2d:0d:65:e0:93:5f:7e:07:80:fe:ab:3c:2f:27:da:
13:1d:97:62:f3:cf:10:f2:e0:4b:fe:f8:98:d4:de:
de:89:0e:7d:a1:05:8a:2b:86:2b:91:e1:eb:36:22:
21:cd:b3:12:3b:2b:6e:7a:42:7f:cc:f4:18:00:b6:
83:72:ed:06:bf:53:84:02:f3:76:4b:2f:ba:86:a5:
9d:e7:70:18:87:35:46:9a:1e:75:12:e8:16:52:19:
dc:57:d7:d0:a2:b3:c8:c4:4f:b8:27:6e:d9:83:c8:
2b:6b:f4:0f:52:cb:28:fd:db:b9:11:9b:87:7f:80:
bf:54:d4:4c:9a:4f:8d:4c:3b:3a:e5:04:e9:02:12:
4b:ba:5a:33:ba:50:76:00:d7:fe:f9:e9:52:7f:6d:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AC:A7:69:01:E7:4A:DD:FC:D5:52:1C:4D:00:29:81:B6:1B:FF:0B
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/cKynaQHnSt381VIcTQApgbYb_ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.59.192.0/19
213.192.196.0/24
IPv6:
2001:ac0:c800::/44
Signature Algorithm: sha256WithRSAEncryption
7c:8a:40:8f:a9:a9:f6:41:9e:8c:99:1f:37:95:58:73:3b:42:
ac:ad:2a:d2:c8:26:ae:51:c2:0b:4b:08:a0:70:e1:3f:25:ef:
0f:61:34:57:36:6e:59:90:a4:53:de:cc:c5:4b:bf:63:27:70:
18:c6:8c:36:3d:5a:ce:e7:10:46:b6:a4:87:0b:78:bf:c3:f7:
16:71:0b:15:8f:38:e9:2b:bf:d1:15:75:35:c5:86:a7:48:4d:
4c:50:9f:f9:ff:af:f9:11:81:e9:84:de:fb:a2:8d:11:b4:69:
79:4d:3f:75:3e:9b:ba:3a:f4:13:a6:f0:b9:a4:36:8d:8b:c0:
3d:29:23:4b:73:a0:59:d2:2a:18:4a:82:66:d1:5e:c7:f8:0b:
59:b4:41:59:b1:44:79:ac:f1:b7:52:98:40:23:19:ac:28:15:
45:7f:a4:09:58:7b:67:50:e1:ae:65:83:01:90:5c:de:91:b9:
55:84:b8:a0:10:04:d3:de:72:6d:53:2f:e7:9e:d6:ef:19:75:
35:37:c7:c9:99:02:93:dd:7c:9b:b6:12:d9:cd:d7:54:b3:4f:
81:19:14:43:ce:ed:66:13:2f:7e:85:ab:41:c6:07:ee:97:85:
10:65:63:65:5c:ac:11:81:b0:54:98:3a:e7:bb:7f:1f:59:d0:
cc:a8:08:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:33:51 2025 by rpki-client