Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/KooPuekVUAdlKPtxN-pIrWZJGfI.roa
File: KooPuekVUAdlKPtxN-pIrWZJGfI.roa (raw, json)
Hash identifier: IrfdSHL+ZRO1mnii3eZrt4lHidhpYe4uCjXuV308boU=
Subject key identifier: 2A:8A:0F:B9:E9:15:50:07:65:28:FB:71:37:EA:48:AD:66:49:19:F2
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 01942068079F2D2F77EBEA670F3CBBDBEBE9
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/KooPuekVUAdlKPtxN-pIrWZJGfI.roa
Signing time: Wed 01 Jan 2025 05:47:56 +0000
ROA not before: Wed 01 Jan 2025 05:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6878
IP address blocks: 46.29.96.0/24 maxlen: 24
93.188.242.0/24 maxlen: 24
160.44.192.0/21 maxlen: 21
160.44.200.0/21 maxlen: 21
2a00:da8:fffb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:07:9f:2d:2f:77:eb:ea:67:0f:3c:bb:db:eb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: Jan 1 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a8a0fb9e91550076528fb7137ea48ad664919f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:d9:ee:9b:bc:dd:19:fb:0e:7a:c8:81:e5:
5f:40:f3:05:fc:37:3e:e0:8e:16:c0:52:a8:8b:82:
83:77:75:6d:90:58:02:ac:e6:e8:db:ba:20:bd:4f:
f6:59:f3:2d:98:49:a1:75:b2:ab:86:42:d5:c9:e7:
92:4f:a8:b4:dc:30:38:9c:dc:79:62:cb:74:d4:b3:
68:89:76:9e:66:7f:fc:3d:91:99:6e:11:5f:c1:9a:
23:dd:ea:93:22:f7:74:71:b3:b8:8e:77:43:2e:7b:
00:b9:20:ce:76:11:08:88:8c:cb:a2:19:49:3f:68:
3f:73:1f:4b:b7:7c:2d:99:46:11:22:98:5d:2e:3a:
ee:60:f4:f6:e6:35:47:56:c8:cc:8c:06:a2:fc:7f:
67:24:78:89:bf:6d:4d:71:f0:b7:56:5d:7b:e5:d3:
bd:48:dc:59:25:8a:ce:ad:b7:75:e8:66:30:f6:a5:
ce:8f:9c:44:48:8f:4b:de:46:a6:f6:49:d2:0a:a9:
d6:a8:5b:e9:5c:0c:38:af:dd:35:49:5d:ab:5f:2d:
a2:d8:d4:ae:5b:5e:c2:2a:0c:73:58:ee:33:d2:c4:
6c:e9:a0:2f:53:39:4c:37:5b:78:6d:ea:ef:b5:09:
9e:30:36:3b:ba:26:de:a8:e4:3b:03:5e:8b:3e:ff:
bc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8A:0F:B9:E9:15:50:07:65:28:FB:71:37:EA:48:AD:66:49:19:F2
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/KooPuekVUAdlKPtxN-pIrWZJGfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.96.0/24
93.188.242.0/24
160.44.192.0/20
IPv6:
2a00:da8:fffb::/48
Signature Algorithm: sha256WithRSAEncryption
3b:ef:18:b3:50:e0:ed:d8:1e:05:81:52:50:5b:67:2c:b4:3b:
8c:62:28:89:63:5e:30:23:d7:37:60:33:1f:57:dc:82:c6:3c:
ac:ac:14:44:fb:0c:46:59:e3:32:5c:7b:1e:79:85:56:6b:04:
6d:2a:ec:14:88:dc:cd:2b:2b:ef:5a:5c:b7:0a:94:89:14:75:
ed:bf:ea:d6:d3:b8:f8:2d:08:c2:40:ee:e7:56:06:19:c2:76:
d2:cb:10:99:89:3b:bc:18:03:e6:15:2e:4a:96:30:ab:73:67:
76:05:9c:d4:f8:0e:e6:3e:92:f6:b8:ea:3b:f6:83:c5:d9:28:
9b:ea:be:91:98:8d:07:f4:13:9a:d9:f4:8a:b3:b2:ec:99:f7:
5b:87:87:a5:4c:5c:87:73:96:2f:83:16:82:03:0b:16:48:55:
2d:11:26:0d:15:8c:ec:74:c4:ac:bc:cc:4b:50:01:67:bc:0a:
a7:bb:02:16:7a:4d:35:74:76:de:d2:87:81:35:89:a1:2f:af:
56:f8:58:a4:38:62:10:1a:f0:8e:83:13:46:2c:9d:5f:b9:62:
54:7b:c1:cc:6d:aa:34:9a:6b:94:e5:f9:e9:7f:25:48:e0:b1:
2f:33:8e:f0:d5:9f:9f:18:15:51:4b:7b:35:9d:91:9a:09:ca:
40:ed:5d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:00:16 2025 by rpki-client