Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/K8JAHLn3KSgfA6BNl7r1JS984KI.roa
File: K8JAHLn3KSgfA6BNl7r1JS984KI.roa (raw, json)
Hash identifier: LSiwfsQXMGZVIf1O+jJBxpxI9iVl0ERczCYHt8w0SU8=
Subject key identifier: 2B:C2:40:1C:B9:F7:29:28:1F:03:A0:4D:97:BA:F5:25:2F:7C:E0:A2
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0195C490AA103527A750915D3A17C5AA929C
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/K8JAHLn3KSgfA6BNl7r1JS984KI.roa
Signing time: Sun 23 Mar 2025 19:52:49 +0000
ROA not before: Sun 23 Mar 2025 19:52:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62390
IP address blocks: 5.56.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c4:90:aa:10:35:27:a7:50:91:5d:3a:17:c5:aa:92:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Mar 23 19:52:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bc2401cb9f729281f03a04d97baf5252f7ce0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:32:94:9f:ed:35:7a:f2:86:9c:86:d5:ac:
53:95:f6:e2:a2:af:0f:1a:6d:cd:b0:3d:aa:03:a2:
93:c0:0f:f1:f4:4d:a3:b7:59:19:a6:11:bd:70:a5:
38:4d:e0:2a:03:a4:fd:cd:24:f1:61:3d:fc:1d:f4:
34:a3:2f:89:02:f9:d1:ec:b5:42:10:1d:5f:fb:d0:
4c:04:b3:fe:b5:f1:8d:f4:e3:7a:f1:88:37:8c:96:
63:ea:e1:88:c4:6d:9a:dd:25:eb:3a:76:dc:94:64:
a8:50:8f:bf:e8:88:9e:c7:f9:0a:98:1d:41:12:e7:
8c:78:2a:eb:16:ad:06:06:20:45:f3:2e:cf:47:9b:
93:82:fd:04:79:11:ae:4e:b0:56:18:80:ad:8e:00:
60:d7:e7:5b:db:73:45:6b:6e:83:77:31:b0:20:6d:
d2:9f:c8:41:4d:48:d3:37:e2:f3:48:47:89:ec:96:
8c:23:37:fe:b4:91:ff:52:00:23:3f:d3:be:c5:9a:
8b:5d:3a:38:52:7d:cf:46:28:77:da:8e:b3:79:dd:
e0:db:ba:10:58:dd:1c:b1:6c:99:04:91:0f:da:04:
eb:57:1f:25:4d:c0:28:cc:a6:9e:17:c6:6e:f4:a8:
11:42:46:29:e6:80:37:91:26:92:8b:13:9a:4b:f5:
44:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C2:40:1C:B9:F7:29:28:1F:03:A0:4D:97:BA:F5:25:2F:7C:E0:A2
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/K8JAHLn3KSgfA6BNl7r1JS984KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.26.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:5b:02:30:77:9a:ec:d7:65:6e:05:0a:43:72:0b:67:80:e2:
95:70:70:ce:d3:03:cb:d4:69:f6:13:cb:99:ad:a6:ac:21:bb:
ee:5c:57:0f:28:2d:cb:65:43:33:b5:16:6b:46:f2:03:bf:f3:
b0:5f:41:0c:76:d8:a7:52:64:88:33:ef:11:ec:86:f1:48:fe:
db:92:60:ba:64:d7:01:8c:e0:c4:f8:91:9f:fe:7f:fa:87:b5:
94:54:fe:00:ba:f2:a0:71:3a:b9:d2:d2:dd:1d:ab:85:4d:d2:
a2:25:95:01:b6:94:c5:cf:48:57:8b:31:79:65:3f:18:1b:d4:
8b:ac:42:58:3f:42:db:e9:d7:66:1d:5d:36:ee:a0:c1:a4:61:
a1:5f:cf:64:97:0b:fd:31:94:98:4d:6d:55:4e:0f:26:e9:e0:
a2:7a:0e:1e:86:86:42:ab:fd:cd:a4:c9:21:c0:12:e6:35:61:
8e:5b:f3:ae:3b:75:a1:3c:b5:a2:d1:f5:5f:4e:73:27:74:c7:
b3:b6:e2:7b:e1:1e:9f:ba:4d:2a:56:7e:f4:0c:40:f4:a7:cd:
5e:bc:ec:75:3e:31:07:31:e0:d7:ee:cf:07:c0:4a:c8:fc:1d:
cd:68:6c:2f:cf:37:43:fd:20:d4:02:f9:9f:38:41:61:50:7e:
54:a2:a7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:14:15 2025 by rpki-client