Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/KhY12QXPgZGvijy8NVkM5-EZS4E.roa
File: KhY12QXPgZGvijy8NVkM5-EZS4E.roa (raw, json)
Hash identifier: CzHA8lyjc+xI7dPqpc2iJoeImIrTVoVteRcgbm8dNIY=
Subject key identifier: 2A:16:35:D9:05:CF:81:91:AF:8A:3C:BC:35:59:0C:E7:E1:19:4B:81
Certificate issuer: /CN=167d54d8cb6a8309c512605657c2563e3a1aaa69
Certificate serial: 0194228DEE42EA1FB5D090423477032F55C7
Authority key identifier: 16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/KhY12QXPgZGvijy8NVkM5-EZS4E.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203503
IP address blocks: 185.132.88.0/24 maxlen: 24
185.132.89.0/24 maxlen: 24
185.132.91.0/24 maxlen: 24
2a06:e140::/29 maxlen: 29
2a06:e140::/30 maxlen: 30
2a06:e144::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ee:42:ea:1f:b5:d0:90:42:34:77:03:2f:55:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167d54d8cb6a8309c512605657c2563e3a1aaa69
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a1635d905cf8191af8a3cbc35590ce7e1194b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:d3:b5:0c:92:95:ee:39:0b:60:d4:67:71:
32:f7:0e:e7:ab:d1:b1:1f:ec:3f:26:1c:d1:64:48:
fd:7f:eb:14:3e:08:7b:f3:c6:a7:5e:fb:55:e6:0a:
1d:7e:17:34:ca:9a:50:fc:15:97:42:8a:bf:b7:8a:
1f:f8:76:ae:2a:02:54:78:d2:79:4f:ef:da:6f:9c:
dd:d6:f9:28:de:6d:fa:ad:fe:0e:e4:98:09:d4:61:
ae:90:35:98:a7:d1:74:86:18:08:f6:9a:6f:e8:67:
2c:3b:22:3c:e1:2e:c3:d0:9a:fe:ec:41:54:f2:e8:
55:87:e6:7d:32:96:c5:33:ae:ae:c6:05:8e:84:33:
5b:ed:44:37:14:5e:18:a2:7a:b8:0e:36:ed:a7:88:
fd:59:db:67:97:73:b7:a0:bf:37:e7:30:78:16:5a:
74:0d:46:f6:be:cd:6d:88:c4:76:da:20:23:28:61:
8f:8a:2e:6a:a1:86:22:ce:e7:60:22:be:75:6b:a1:
bb:23:e5:d4:fe:d5:66:a1:62:ee:1a:a1:1c:ec:1c:
ea:15:83:4e:76:4e:b3:a5:2d:f7:4e:ba:69:2f:c9:
82:7d:07:67:ca:1a:43:55:9f:88:8f:42:21:d7:23:
d0:82:12:47:99:60:06:ef:de:0d:ce:04:18:dc:b6:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:16:35:D9:05:CF:81:91:AF:8A:3C:BC:35:59:0C:E7:E1:19:4B:81
X509v3 Authority Key Identifier:
keyid:16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/KhY12QXPgZGvijy8NVkM5-EZS4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.88.0/23
185.132.91.0/24
IPv6:
2a06:e140::/29
Signature Algorithm: sha256WithRSAEncryption
18:48:0d:a1:57:bc:c9:bb:fd:fd:85:d6:e6:d7:55:7e:35:c9:
93:44:40:7c:c1:e2:18:1a:5f:6d:bb:31:80:9a:d5:34:fd:82:
92:d0:13:44:9f:4c:da:30:e9:86:ff:ce:9a:49:1e:2f:9a:65:
a4:ac:8c:95:54:74:6f:41:0e:4b:cc:8a:6b:84:0d:e9:40:0a:
20:db:04:8b:7f:b8:65:81:96:ab:1a:54:69:b4:68:88:07:18:
87:58:d9:0c:58:00:05:95:68:bc:ab:9d:b5:9f:e7:5d:e2:29:
88:6d:9e:4a:2b:d6:cd:48:44:d8:11:e3:13:92:07:b2:69:1c:
af:7a:42:f4:32:42:c9:33:9c:3c:c0:6b:b3:bf:b1:23:47:b3:
b7:68:9c:c2:e9:d6:9d:04:5b:3a:b0:d0:39:8c:34:97:5f:26:
f0:f0:e8:42:c7:0c:41:f1:9f:36:ac:67:76:c0:b4:9a:4a:32:
22:8f:c4:73:2a:93:58:69:3e:4a:2b:b4:89:9a:19:3f:4f:c9:
ed:cf:be:ab:62:2c:7e:6f:71:df:be:bf:ba:41:35:0c:ed:7f:
50:31:29:8e:6a:82:ee:27:da:ee:18:f0:68:be:40:67:94:76:
5f:e9:98:5c:0b:f9:5e:5a:84:40:ec:ae:03:8b:06:84:9d:e6:
35:17:b7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:44:50 2025 by rpki-client