Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/0kP7QawaDykIu2n6jExAEsOCXMc.roa
File: 0kP7QawaDykIu2n6jExAEsOCXMc.roa (raw, json)
Hash identifier: DrIxeYyOLVknU21yiJrBY1u2e7Kvc6S4OpbT295PIv4=
Subject key identifier: D2:43:FB:41:AC:1A:0F:29:08:BB:69:FA:8C:4C:40:12:C3:82:5C:C7
Certificate issuer: /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial: 01941FFA058BB68517FC3013FA4CB4DF99EA
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/0kP7QawaDykIu2n6jExAEsOCXMc.roa
Signing time: Wed 01 Jan 2025 03:47:46 +0000
ROA not before: Wed 01 Jan 2025 03:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203923
IP address blocks: 185.119.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:05:8b:b6:85:17:fc:30:13:fa:4c:b4:df:99:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d243fb41ac1a0f2908bb69fa8c4c4012c3825cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0d:cb:9a:d9:cf:42:8b:e6:17:2e:8a:74:53:
37:72:7a:f0:c1:62:e0:a0:af:11:ac:34:4f:d2:28:
6d:ea:ff:71:3d:73:7b:9d:31:25:51:96:01:79:c1:
a0:0b:0f:29:2a:74:06:01:c4:cc:3f:d1:0a:97:c1:
79:f5:2b:64:ec:4b:c0:21:11:f4:47:28:69:6b:ef:
03:a9:dc:09:54:a0:c8:a3:4f:90:16:1f:d0:1a:d8:
76:c0:89:fc:37:57:3f:f4:0a:e1:97:d8:e3:34:63:
2d:2a:a4:a2:9e:5a:4b:9a:e3:0f:95:25:f8:93:77:
9c:e6:84:84:e2:28:bc:99:53:e1:18:65:a4:da:af:
fd:0d:b6:08:87:21:6c:30:f6:8d:81:6b:aa:a6:69:
0b:5a:53:90:5b:f1:52:f2:8b:b1:72:7a:15:34:e7:
ca:a9:4e:81:27:3a:cf:9f:30:0e:be:4c:df:de:18:
0b:fe:48:3f:21:53:e2:96:b1:ad:fc:0c:c4:a2:42:
2a:34:59:91:78:22:f4:1b:4a:89:15:21:37:48:2e:
c5:a5:36:8f:6a:9b:93:ae:2d:e6:c3:d5:c0:47:9d:
41:56:31:ef:9b:18:24:bd:1c:98:73:a6:08:40:e0:
f5:78:01:fd:9a:8a:e2:0d:88:89:7d:b0:01:c0:74:
df:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:43:FB:41:AC:1A:0F:29:08:BB:69:FA:8C:4C:40:12:C3:82:5C:C7
X509v3 Authority Key Identifier:
keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/0kP7QawaDykIu2n6jExAEsOCXMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:6d:dc:8e:5b:21:b4:3e:d9:eb:0c:a2:10:f4:b5:f1:96:9f:
51:7a:ba:ea:32:05:a6:8a:0c:42:39:62:e2:d7:fb:05:45:96:
16:22:bc:8f:f3:c6:f3:76:a0:23:02:66:ae:4e:99:ca:18:a3:
3b:15:94:2f:02:2d:d7:f3:99:53:02:a4:28:a2:6e:43:8d:38:
3a:85:26:59:7a:be:90:d1:36:66:5d:e9:43:21:4e:d0:e6:73:
e8:23:86:84:2c:5c:57:89:0b:45:f9:84:5e:ae:3a:a2:ce:92:
a0:2d:5f:0e:b1:3a:00:a6:2e:0b:61:42:ee:0d:c5:2d:e6:e0:
c5:39:72:f0:2f:f3:93:57:ed:55:7f:35:9e:04:53:13:f5:d0:
57:ba:76:b0:be:a3:89:ef:1b:32:12:bb:bf:22:04:6f:6c:c3:
63:30:dc:5a:3c:c6:88:e7:5e:74:0d:fe:8d:78:cb:a5:3e:0a:
e3:13:3a:44:ba:cf:29:02:c4:fb:8f:91:88:c3:63:e1:08:96:
47:31:97:bd:fc:9c:76:49:73:d8:e6:4b:8c:8c:52:a4:96:c3:
64:bc:bd:71:46:3e:29:08:63:51:d4:c0:fa:c3:44:bb:95:f3:
cd:e1:c6:cb:86:ff:a7:10:ac:4f:e0:2d:57:bf:6e:8a:47:39:
f6:2a:08:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:27:27 2025 by rpki-client