Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/Kk5_CWcOw8FX9eBR4e-yR575hFQ.roa
File: Kk5_CWcOw8FX9eBR4e-yR575hFQ.roa (raw, json)
Hash identifier: JdaSrsqaMeykVP3ulwsOSL+P8Fnt6sAzR896sY8xpuw=
Subject key identifier: 2A:4E:7F:09:67:0E:C3:C1:57:F5:E0:51:E1:EF:B2:47:9E:F9:84:54
Certificate issuer: /CN=e618eff923e35bf83792353c4633ca2300f75b6c
Certificate serial: 01942445986C975EF08B098DE87442292596
Authority key identifier: E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/Kk5_CWcOw8FX9eBR4e-yR575hFQ.roa
Signing time: Wed 01 Jan 2025 23:48:48 +0000
ROA not before: Wed 01 Jan 2025 23:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 185.218.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:98:6c:97:5e:f0:8b:09:8d:e8:74:42:29:25:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e618eff923e35bf83792353c4633ca2300f75b6c
Validity
Not Before: Jan 1 23:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a4e7f09670ec3c157f5e051e1efb2479ef98454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:96:ba:e0:2c:ef:9a:42:48:9f:29:ee:59:
2b:0f:91:0a:bd:aa:58:06:a3:52:79:60:29:b7:fd:
95:d1:cd:4d:e6:e1:54:8e:0a:25:61:40:5a:4c:66:
ef:6e:11:46:47:4b:1e:85:19:31:ac:a4:4e:c5:7a:
f2:f9:25:a3:3b:dd:45:09:3e:47:e4:69:9a:fa:81:
19:5f:11:cc:c2:69:47:ed:0e:ae:e7:4d:5d:b1:d1:
2a:fc:30:5f:43:0f:66:c1:b8:19:6c:24:1f:8e:93:
e9:d0:ac:13:d0:d4:25:b7:34:4f:89:37:4e:d9:da:
26:2c:a2:f2:bd:8c:0d:fc:13:72:4a:2b:22:3c:bf:
8b:cc:b6:b5:3d:57:d1:26:fd:59:b9:91:96:e2:2f:
94:4e:21:bd:69:65:85:79:bf:f0:07:7b:22:74:71:
e8:0b:f7:8e:3c:c6:ae:5c:b8:34:19:ec:60:1e:25:
69:ed:51:8d:16:88:b5:9c:ce:77:77:52:93:24:31:
38:60:a1:1b:59:61:a7:36:78:5f:e3:b5:e0:11:cc:
96:61:b4:7d:a3:79:45:72:ac:97:d8:f3:6f:94:7f:
b6:92:bc:9b:ad:df:27:be:30:1b:8a:62:c0:29:af:
dc:dc:39:e4:60:d0:56:4c:d0:8f:4c:61:4b:55:a2:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4E:7F:09:67:0E:C3:C1:57:F5:E0:51:E1:EF:B2:47:9E:F9:84:54
X509v3 Authority Key Identifier:
keyid:E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/Kk5_CWcOw8FX9eBR4e-yR575hFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.142.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e2:10:a7:07:4a:2d:25:d5:4d:96:e3:07:7c:39:90:78:be:
20:be:b9:02:77:07:f3:be:ee:c7:c7:bb:17:12:9d:e4:07:44:
45:10:6f:e7:08:d2:bc:f5:5b:51:70:2d:6f:40:fc:64:06:83:
47:1e:15:f5:fd:cf:9e:a9:83:17:94:bd:7e:5a:62:54:40:ad:
a2:7d:8d:97:42:d3:57:5b:0c:2a:78:d0:92:32:8d:4d:bc:93:
74:0c:71:d1:d4:c4:9d:35:9f:4e:39:a3:07:00:7a:a6:30:42:
26:d9:53:d9:02:31:78:de:6d:05:cf:1c:b5:4e:1f:93:47:de:
76:07:82:01:03:c3:a5:94:9a:f0:e7:96:d3:e5:8a:8c:67:38:
a6:a2:33:9f:6d:30:19:6e:f0:27:49:d9:cf:31:b2:d5:78:8f:
c1:0b:5c:5a:36:22:d5:71:fb:29:6d:da:be:3b:24:3c:d6:cc:
04:26:ab:d5:e7:7e:72:64:ee:58:cd:56:d2:57:c9:e5:9e:cb:
03:76:35:b9:3f:6e:ec:fd:df:55:7d:84:06:81:1e:d6:b9:1b:
5d:f6:81:1c:d1:51:24:cc:51:e2:04:72:26:5c:7f:6f:21:4b:
17:22:86:7a:74:2c:18:86:6e:11:a2:33:f5:1f:95:af:ce:0c:
4a:77:45:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:33 2025 by rpki-client