Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/KZpkhLSygow8v2JeRm5l6FtwdnM.roa
File: KZpkhLSygow8v2JeRm5l6FtwdnM.roa (raw, json)
Hash identifier: kEG8Taeqqp1OFVs4WldwYvtT3+8GrXdXaDIEP4OfOTY=
Subject key identifier: 29:9A:64:84:B4:B2:82:8C:3C:BF:62:5E:46:6E:65:E8:5B:70:76:73
Certificate issuer: /CN=a750263823402b83c11c5014d32666dcab111447
Certificate serial: 0197308A2D24D08411AA70B4DBF8A65A9393
Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/KZpkhLSygow8v2JeRm5l6FtwdnM.roa
Signing time: Mon 02 Jun 2025 12:07:31 +0000
ROA not before: Mon 02 Jun 2025 12:07:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 89.28.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:8a:2d:24:d0:84:11:aa:70:b4:db:f8:a6:5a:93:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750263823402b83c11c5014d32666dcab111447
Validity
Not Before: Jun 2 12:07:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=299a6484b4b2828c3cbf625e466e65e85b707673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:e0:25:57:52:e3:da:da:c5:fe:22:9c:b7:
8b:52:96:64:a3:36:c4:c2:87:92:93:2e:29:a0:92:
2c:fe:6d:93:a9:95:48:68:ca:0e:d6:65:51:a9:36:
83:67:7a:26:82:53:30:c5:cf:b4:b3:5c:bf:61:28:
fb:84:7f:34:5d:32:cb:64:07:c9:10:1b:5f:53:e8:
a4:26:30:c0:2f:8c:9d:05:73:30:00:66:c0:16:7e:
5b:65:ce:8e:1c:43:6f:89:b3:17:53:4a:f3:c1:ef:
a7:86:ee:11:31:bb:1e:ab:39:ef:1c:99:50:eb:2b:
8f:4c:45:42:9f:93:3c:c0:34:14:cb:a7:31:24:09:
4f:73:c7:c3:9d:06:49:d8:43:da:64:f9:7d:be:fd:
ba:fe:30:65:d6:02:a7:43:7d:bc:52:d2:ea:d9:2d:
84:02:4d:7d:a5:a5:14:d7:61:5a:e6:b5:b2:a8:6c:
d8:6f:af:fe:9b:de:3b:7f:4f:ac:e7:eb:4e:0b:f1:
1e:ef:ee:5d:51:c7:51:b7:e1:cb:2c:ac:14:5d:2d:
c5:0b:56:1f:95:0b:05:09:27:9b:b4:f9:77:43:33:
e1:4f:55:cf:73:80:46:35:b8:aa:25:ed:6e:4b:80:
ec:d1:ca:5c:2a:b2:b4:09:7d:64:a0:10:13:62:3f:
e4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9A:64:84:B4:B2:82:8C:3C:BF:62:5E:46:6E:65:E8:5B:70:76:73
X509v3 Authority Key Identifier:
keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/KZpkhLSygow8v2JeRm5l6FtwdnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.187.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f4:f5:98:89:9f:e6:23:56:31:83:2b:5f:83:5e:fb:ef:b5:
b2:78:a1:16:8f:d1:b3:bf:38:53:cf:41:13:0a:a9:71:2a:16:
b6:35:cb:e3:47:90:00:e0:0d:02:4d:6c:53:84:10:64:ca:a4:
a7:78:0c:ff:a8:47:36:e1:44:58:2b:6d:c4:eb:8c:23:07:6c:
e8:c8:b9:a7:c2:fd:de:c3:25:4d:22:9e:d4:28:b4:ff:e4:b6:
da:99:9d:b1:06:ac:ae:c9:77:75:dd:a6:27:60:b6:95:7a:6c:
47:b6:58:6b:f2:4d:a2:95:c2:6f:e4:6c:61:d5:c4:2d:9c:7b:
7f:62:76:b4:7f:e0:0c:68:e3:e5:88:df:f5:a9:a7:13:b7:ac:
e2:b1:e8:53:21:13:f7:c4:8a:2c:0b:ff:46:9a:3c:53:17:4a:
27:b9:e6:78:20:87:0f:50:7a:35:c4:b3:72:ba:a5:63:6f:9c:
b4:d5:63:9f:3c:23:81:db:30:43:1c:37:11:89:1e:c0:dd:34:
49:2a:ff:a2:5d:aa:a4:18:33:94:32:5e:df:b8:53:53:94:1d:
07:07:ff:60:54:a6:15:e7:09:83:db:33:56:6c:de:e8:d6:a9:
39:78:c9:c6:ef:b3:21:43:d1:bf:52:9a:ad:c5:95:ac:0f:60:
b2:65:59:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 21:16:33 2025 by rpki-client