Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/KBS5ODGVPgLIrn_lzCZVpLCuM_o.roa
File: KBS5ODGVPgLIrn_lzCZVpLCuM_o.roa (raw, json)
Hash identifier: tuJiuTZZDp+7DpYOFgzygNPFPeRHjujTGVj2/4ZqQWE=
Subject key identifier: 28:14:B9:38:31:95:3E:02:C8:AE:7F:E5:CC:26:55:A4:B0:AE:33:FA
Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Certificate serial: 019421B1AFC6EEFF85CEF33EADAA7E99BF47
Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/KBS5ODGVPgLIrn_lzCZVpLCuM_o.roa
Signing time: Wed 01 Jan 2025 11:48:00 +0000
ROA not before: Wed 01 Jan 2025 11:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203981
IP address blocks: 178.213.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:af:c6:ee:ff:85:ce:f3:3e:ad:aa:7e:99:bf:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2814b93831953e02c8ae7fe5cc2655a4b0ae33fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:14:9b:57:22:64:21:57:64:67:c1:dd:56:
07:12:1c:b7:e2:4b:33:7d:1f:0b:83:33:10:78:9d:
04:47:00:28:16:95:05:7c:81:3a:fa:40:e6:90:cc:
0f:8b:e9:de:ba:80:21:2f:b9:0e:27:d0:41:dd:be:
95:7f:b1:35:00:70:49:bd:31:ba:f6:e6:2a:35:f1:
d8:75:c2:8e:01:33:df:a6:dd:67:5c:9c:ba:33:79:
52:1d:55:0f:b5:c4:a2:18:1b:23:4f:62:df:d6:a0:
5f:96:89:d5:7d:98:b9:84:33:e9:f3:65:cb:83:69:
e6:58:40:6b:48:8a:02:50:42:49:ea:83:c4:98:c8:
83:32:20:b6:1c:3b:11:3d:ce:c4:82:36:ab:0e:e4:
6d:b8:04:d4:6e:5e:91:f5:56:d6:ee:52:07:03:d1:
ad:56:5a:41:cb:d6:67:58:75:84:43:80:5c:47:19:
82:b0:68:76:f6:83:ed:24:1d:f2:fe:89:01:49:ed:
f0:1e:c5:78:dc:51:e9:3b:32:5f:3e:9b:46:4f:cb:
cf:19:2c:83:97:75:7d:9c:73:a5:03:c3:1c:c6:76:
4e:ce:23:52:0c:cc:24:eb:ca:9c:82:d3:2c:2d:10:
0b:65:4a:2c:ec:53:7e:67:87:a2:c1:5a:fe:65:10:
15:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:14:B9:38:31:95:3E:02:C8:AE:7F:E5:CC:26:55:A4:B0:AE:33:FA
X509v3 Authority Key Identifier:
keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/KBS5ODGVPgLIrn_lzCZVpLCuM_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.75.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ac:50:6a:a8:31:26:c4:1a:84:7e:0f:dd:f4:d3:37:9e:3d:
64:c4:6c:b6:7d:b4:e8:39:ad:44:55:21:a4:6d:e2:83:1e:31:
0e:8c:1e:82:e4:ae:ac:e2:56:d8:8f:dc:de:99:e2:2d:d4:05:
06:36:54:d8:dd:71:9b:cb:d8:8d:21:47:59:b3:b4:1b:ce:0f:
65:94:fb:ca:d0:2e:99:aa:52:e0:8b:eb:f0:0a:bb:b3:94:a2:
bc:a0:a6:9e:27:41:f8:88:3f:5a:de:b6:90:c3:90:c9:48:b4:
02:dc:76:42:84:a2:6b:ba:99:bd:10:7b:3f:66:0e:d8:8a:5f:
1f:50:5c:72:4d:82:34:f0:b6:3b:08:c9:82:57:c7:2a:79:f9:
06:2d:83:c4:ac:eb:79:dd:9d:13:1b:40:cf:f9:41:b2:96:b6:
75:eb:a2:73:0e:53:fc:4c:44:cf:3c:25:85:d5:c3:2f:0b:ab:
f1:2f:49:f0:a2:48:25:f1:7c:fd:2f:f9:56:40:04:ab:9d:1f:
2c:e2:95:94:ed:ef:d0:cf:ca:5e:07:db:d1:d5:5d:41:61:8d:
74:56:8c:c1:78:a4:56:bc:36:68:26:27:18:b5:51:2a:b1:4a:
4f:27:7b:ac:df:c9:6e:47:3a:ec:b3:87:f4:90:30:6d:7e:5d:
6c:83:5c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:38:24 2025 by rpki-client