Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/koi0-CGVFzzCbkI5al5_w7LgOj4.roa
File: koi0-CGVFzzCbkI5al5_w7LgOj4.roa (raw, json)
Hash identifier: Ypeyl95U2AAhobdLkDDvp1F6OHWp8H5ed2csv8B3QLE=
Subject key identifier: 92:88:B4:F8:21:95:17:3C:C2:6E:42:39:6A:5E:7F:C3:B2:E0:3A:3E
Certificate issuer: /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial: 0194266BF5F88826FAC2A5800454FA5C4D74
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/koi0-CGVFzzCbkI5al5_w7LgOj4.roa
Signing time: Thu 02 Jan 2025 09:49:57 +0000
ROA not before: Thu 02 Jan 2025 09:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207045
IP address blocks: 45.154.47.0/24 maxlen: 24
195.96.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f5:f8:88:26:fa:c2:a5:80:04:54:fa:5c:4d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
Validity
Not Before: Jan 2 09:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9288b4f82195173cc26e42396a5e7fc3b2e03a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:23:e9:68:da:66:df:a7:2a:3d:36:63:60:0a:
3f:f5:c9:34:3e:ce:67:bd:26:db:70:03:b0:a7:1f:
eb:04:cd:30:59:54:26:45:ea:59:af:c4:95:14:79:
c0:1e:9a:87:e3:15:9b:3f:f6:eb:21:b0:c3:f7:7f:
3a:45:10:51:7d:bb:3a:06:80:78:1d:f4:48:d9:a4:
0e:61:7a:3b:8e:60:87:9f:c9:ce:90:45:4d:a7:30:
73:e8:c7:d4:e0:0f:0b:91:bc:18:89:ef:6a:88:4d:
da:f4:da:bd:22:83:b2:24:40:82:4b:19:74:b2:de:
69:e6:b1:62:c1:f9:34:88:7e:39:45:28:07:e5:04:
87:fe:bd:32:3f:91:3c:66:0e:6e:4d:36:c5:1b:a1:
cc:3b:fe:3b:75:97:e6:8d:e0:0c:99:62:7c:13:17:
3b:5b:b1:7a:d4:ae:95:a5:00:41:37:6e:0d:9d:dd:
5d:9f:b5:9c:0a:8c:fe:a4:21:ac:11:53:4c:76:61:
3d:02:b3:c2:44:5e:5d:90:d4:6a:4a:90:8c:1a:76:
6b:27:66:92:aa:e1:42:e9:c8:a4:e0:c8:77:c4:07:
4a:3a:24:01:1d:41:1d:04:9f:c0:e2:79:35:b7:e4:
e7:e1:a8:70:db:7b:ff:cd:1c:ac:f1:8c:42:69:e2:
9f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:88:B4:F8:21:95:17:3C:C2:6E:42:39:6A:5E:7F:C3:B2:E0:3A:3E
X509v3 Authority Key Identifier:
keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/koi0-CGVFzzCbkI5al5_w7LgOj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.47.0/24
195.96.158.0/24
Signature Algorithm: sha256WithRSAEncryption
02:68:0b:c0:3f:d9:1d:43:41:c1:58:8e:25:7d:b1:c6:d8:1b:
26:a6:f2:5f:7d:67:54:c3:34:1f:18:90:5a:19:48:5b:8f:ff:
c5:6f:07:b9:87:38:28:6c:66:06:40:78:bf:d4:2c:61:39:cb:
9b:58:b8:12:c4:84:ce:8d:f2:49:7c:86:cd:3c:84:ff:61:69:
35:e1:73:b1:6a:a3:53:e1:e5:b4:1e:38:71:bc:96:b1:5a:39:
11:1b:47:09:da:ad:e7:13:31:7b:27:7b:4f:cc:d1:54:e9:11:
1b:70:e7:d0:db:1f:69:ce:79:92:c1:3f:69:f6:91:a4:68:a5:
42:19:49:2e:b1:88:ae:b3:56:96:12:f0:85:5e:dc:0c:ad:10:
75:27:7f:c3:f1:e2:5e:12:2f:93:4c:a7:e2:c7:68:95:79:3d:
8b:e3:f1:d1:75:dd:4e:20:6e:e8:d9:16:ac:1f:17:a7:69:14:
35:0c:d7:a1:ec:77:52:7e:2f:18:02:54:f7:79:f6:d0:26:b2:
c1:97:ea:48:8e:03:63:9f:e1:36:01:06:b7:0a:18:ed:ac:8b:
df:c2:a3:6f:5a:1a:4c:e1:49:b5:3c:70:55:37:13:2f:b3:01:
51:8b:02:a6:0b:fd:ad:c4:a9:94:31:8a:4d:d5:05:a6:70:2b:
b2:ae:05:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:59:42 2025 by rpki-client