Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/KvT2aD-Nq99_oM197F2X-Rw9L6I.roa
File: KvT2aD-Nq99_oM197F2X-Rw9L6I.roa (raw, json)
Hash identifier: z15bd9Fqf6jzglQODAptaKPS3RXs1Yi0RA0HfH1lDmU=
Subject key identifier: 2A:F4:F6:68:3F:8D:AB:DF:7F:A0:CD:7D:EC:5D:97:F9:1C:3D:2F:A2
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 0194258FC39E4426EE68CC04F62787767FE5
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/KvT2aD-Nq99_oM197F2X-Rw9L6I.roa
Signing time: Thu 02 Jan 2025 05:49:26 +0000
ROA not before: Thu 02 Jan 2025 05:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 45.13.124.0/22 maxlen: 24
185.96.40.0/22 maxlen: 24
2a03:fd80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c3:9e:44:26:ee:68:cc:04:f6:27:87:76:7f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Jan 2 05:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2af4f6683f8dabdf7fa0cd7dec5d97f91c3d2fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:82:cd:6a:00:b3:4f:2c:55:1f:a9:1a:00:bc:
63:45:da:eb:f5:6d:05:d6:b9:af:92:4d:d1:20:eb:
4d:e8:a0:ca:3c:ba:2c:29:fe:e0:6c:9d:22:78:3b:
25:da:ec:f4:2c:f6:cb:9e:f2:c6:ee:d7:e1:d0:2a:
d5:f3:6b:d2:1d:6c:df:c1:83:d8:46:79:07:45:d7:
2c:89:12:2d:40:48:8e:6e:c7:40:41:26:10:d6:2e:
d5:1c:bd:3a:3d:90:10:06:ed:1b:50:79:e5:3d:e0:
8d:7e:62:41:b4:98:94:bf:09:0a:28:46:72:02:cb:
c2:86:f3:25:53:9a:03:1b:1a:c2:53:a1:93:20:ca:
6b:10:dc:aa:41:32:86:78:4b:95:20:05:7f:5c:64:
97:37:f3:d0:55:97:66:d7:da:9b:26:44:85:ce:a7:
5c:34:4e:c0:12:14:68:73:27:f3:1e:a6:98:c7:d5:
e8:5b:36:99:1b:2a:5c:2f:b8:91:98:c2:bc:b3:ef:
7e:05:4c:61:8a:83:1d:78:87:69:83:7a:5f:d2:d6:
d7:38:dd:20:c4:d2:a7:38:7f:cb:d5:67:a6:38:25:
ce:a2:cb:a0:52:1d:2e:b2:31:fa:27:80:c4:e5:ae:
b0:d1:73:62:86:bf:52:4f:02:c7:7b:14:32:05:20:
6e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F4:F6:68:3F:8D:AB:DF:7F:A0:CD:7D:EC:5D:97:F9:1C:3D:2F:A2
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/KvT2aD-Nq99_oM197F2X-Rw9L6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.124.0/22
185.96.40.0/22
IPv6:
2a03:fd80::/29
Signature Algorithm: sha256WithRSAEncryption
c4:45:23:7e:e5:0c:2b:38:77:33:af:c7:76:35:b0:3a:7c:74:
f0:56:ae:a2:d6:07:f9:05:64:d6:9a:17:3c:93:56:3a:38:4e:
8b:85:04:4a:84:0f:3c:91:43:51:06:51:8c:65:16:e2:8e:11:
78:0b:b1:15:70:91:fb:3d:2a:c1:57:0d:48:d8:9c:92:ba:bf:
1e:7a:2c:44:57:d0:16:36:0a:08:1b:77:b9:ea:88:1b:29:cf:
54:d6:c1:73:e2:da:e5:0e:86:a8:2f:4e:fe:27:eb:74:c0:18:
f4:1c:79:85:c4:d8:2b:e8:66:a4:c4:57:ad:09:35:4c:42:95:
c2:04:0c:43:de:4c:ce:02:0b:c6:a7:d3:e5:bd:91:0f:73:ea:
db:00:f4:6d:a6:8a:d6:78:da:7e:b6:eb:9f:c0:d3:18:80:04:
0d:df:6b:92:95:b2:0b:38:11:74:2a:0c:e6:e0:ad:6c:4d:ae:
ad:3a:54:dd:03:04:02:dd:15:5b:a1:bc:44:b8:95:c3:b9:e5:
00:7f:db:b1:2a:10:37:86:99:47:f5:eb:88:39:58:8c:94:c6:
fc:92:8c:eb:5a:c9:3d:54:5a:71:85:df:bc:52:ed:03:39:8e:
2f:91:df:56:42:a9:dc:6e:ff:a5:bd:16:c4:75:55:dd:c6:51:
56:2e:88:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:28:49 2025 by rpki-client