Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/1-KS-11GCop4jdIEBghE-M8_v_g8.roa
File: 1-KS-11GCop4jdIEBghE-M8_v_g8.roa (raw, json)
Hash identifier: EqC/3yl9y80XofTy0F138kTU+PwB4qz9tGO9qfDtpgk=
Subject key identifier: F8:A4:BE:D7:51:82:A2:9E:23:74:81:01:82:11:3E:33:CF:EF:FE:0F
Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Certificate serial: 019428270ECB595F9775A888D56737CB9841
Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/1-KS-11GCop4jdIEBghE-M8_v_g8.roa
Signing time: Thu 02 Jan 2025 17:53:55 +0000
ROA not before: Thu 02 Jan 2025 17:53:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205510
IP address blocks: 185.215.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:0e:cb:59:5f:97:75:a8:88:d5:67:37:cb:98:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Validity
Not Before: Jan 2 17:53:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8a4bed75182a29e2374810182113e33cfeffe0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ee:53:31:82:bd:d6:02:4a:1b:31:4c:55:bc:
0d:2c:9e:c2:1c:bf:78:44:2a:96:08:8e:1c:ce:a7:
d9:f7:cf:fc:4d:7f:e4:5f:20:62:58:2a:a0:8f:89:
af:74:fc:54:2d:85:7d:74:d1:c0:71:da:b8:90:42:
84:e6:27:1b:f1:45:c8:ed:0c:ea:fd:1f:78:d0:1d:
c1:27:73:d7:3a:9b:71:13:d8:77:2c:1c:78:02:9d:
da:a5:89:85:7f:dd:41:38:70:8c:2a:f1:0e:3a:15:
40:bd:60:e2:1e:53:19:13:cb:29:fd:25:24:02:de:
56:db:f9:e1:ac:51:82:2f:af:8a:e3:09:1f:30:34:
47:c8:12:f4:e8:c1:c0:db:af:aa:88:0d:69:f6:ff:
57:34:a6:35:be:de:fb:1a:c4:f7:25:b4:a9:81:e2:
80:69:a6:d3:60:10:8d:1d:78:7b:4b:c3:08:5f:0f:
a4:6b:74:ed:f2:64:36:7e:13:46:0f:35:ac:2c:17:
2b:cb:75:b6:df:72:0e:04:98:68:86:cb:f4:66:99:
c4:de:29:75:48:7e:9c:16:2c:98:6b:49:3f:95:53:
30:c1:c4:70:05:52:de:5b:a5:90:6e:3b:95:b0:bf:
fc:5d:0f:87:b4:55:5a:ac:04:ac:45:66:14:4f:89:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A4:BE:D7:51:82:A2:9E:23:74:81:01:82:11:3E:33:CF:EF:FE:0F
X509v3 Authority Key Identifier:
keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/1-KS-11GCop4jdIEBghE-M8_v_g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.248.0/22
Signature Algorithm: sha256WithRSAEncryption
99:d4:f2:b0:9b:33:33:9b:5d:de:86:77:53:2c:6b:30:60:09:
26:2d:a4:1c:5d:93:6f:44:70:d4:8d:9d:7e:be:fd:fb:a5:86:
df:b0:8f:5b:6e:a1:43:52:d4:c0:23:8f:3b:c6:45:b1:30:b8:
53:a8:81:d1:29:9c:ba:2d:da:25:44:5c:e3:91:19:5f:4c:2d:
46:08:6f:d8:b1:0c:d3:b2:34:73:1d:fb:9c:ba:76:ec:f0:9f:
8a:8d:30:ef:df:d3:88:2d:e7:ce:6c:ab:ba:ac:78:9a:05:3c:
bd:bc:95:57:81:1e:66:73:13:cf:e4:d9:70:3b:78:26:b8:5f:
84:63:25:9a:a0:81:fc:3d:ef:81:eb:b5:32:79:de:56:14:59:
60:f8:29:7f:8f:3e:ee:e0:ca:1e:6e:4a:89:27:5f:cf:b1:ed:
d7:62:d1:8e:39:4c:97:32:a2:a6:b2:ab:97:a6:f6:b6:15:cb:
63:9e:0f:ca:16:35:1f:0d:5b:0f:d4:86:2f:08:d7:6f:70:7a:
5e:0a:e9:2e:f9:9c:64:6c:e1:a0:ea:84:7d:6e:b9:88:31:dc:
38:e3:76:62:60:fd:b2:ac:5c:e3:4c:59:a0:82:47:be:30:9a:
ed:e1:fd:9b:28:40:db:04:b4:ac:3f:fd:d0:47:1e:5a:4f:1e:
b6:18:51:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:46:18 2025 by rpki-client