Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/KHEz-UIy1itbvqjSN-exHkznw7M.roa
File: KHEz-UIy1itbvqjSN-exHkznw7M.roa (raw, json)
Hash identifier: mV8K8D3yuT/lnpk/k3Efi2aUQNdC5dfkApy2KMYktWo=
Subject key identifier: 28:71:33:F9:42:32:D6:2B:5B:BE:A8:D2:37:E7:B1:1E:4C:E7:C3:B3
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0194266B5FBB6B7EF775303607F0C1C5AD17
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/KHEz-UIy1itbvqjSN-exHkznw7M.roa
Signing time: Thu 02 Jan 2025 09:49:18 +0000
ROA not before: Thu 02 Jan 2025 09:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210058
IP address blocks: 93.175.247.0/24 maxlen: 24
212.21.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5f:bb:6b:7e:f7:75:30:36:07:f0:c1:c5:ad:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 09:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=287133f94232d62b5bbea8d237e7b11e4ce7c3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:ad:03:8f:c5:9a:f0:89:ab:d8:ef:ea:d1:
dd:af:27:be:a7:8d:c2:69:1c:f3:41:4e:20:78:7e:
87:a2:67:cf:94:11:37:a8:26:bf:20:36:99:3c:ef:
e5:59:8c:d3:89:7a:5a:39:fd:0c:5d:fb:13:20:ae:
6e:23:8d:ed:e1:c4:e1:13:f5:7b:af:e4:38:41:3e:
38:03:92:8e:c4:38:c2:ee:70:a8:ed:83:0f:d6:4c:
07:26:98:04:59:8c:7a:34:32:ba:c2:0d:96:34:fd:
c3:7d:c5:0e:e9:eb:5d:95:73:5f:65:f1:85:03:eb:
3e:67:61:2b:7f:de:50:85:57:66:fc:9d:b0:4d:26:
83:25:32:76:fc:e7:5b:20:82:03:37:a3:6e:2c:e0:
a6:49:ba:76:27:a8:44:22:ba:ab:ab:a0:be:c8:87:
7e:75:83:c2:ff:e1:c7:a1:8f:d2:65:6e:33:5d:b0:
e6:41:c9:e5:d8:5e:ca:b0:4f:68:47:cc:b8:28:06:
a8:73:94:a7:a1:51:ad:3e:b5:ef:4f:0e:9b:e3:8e:
32:d6:9d:bc:59:08:68:21:3d:8b:66:2e:07:64:f4:
9e:46:fa:f4:39:0d:fd:1d:e7:aa:50:d5:1a:1a:ba:
e8:b0:dd:79:fa:7e:6a:74:1d:4b:3c:ea:df:a1:18:
60:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:71:33:F9:42:32:D6:2B:5B:BE:A8:D2:37:E7:B1:1E:4C:E7:C3:B3
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/KHEz-UIy1itbvqjSN-exHkznw7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.175.247.0/24
212.21.135.0/24
Signature Algorithm: sha256WithRSAEncryption
61:04:b7:18:3f:3c:21:e5:90:ce:f5:7b:3f:f8:39:81:04:30:
43:9f:ee:55:5b:ea:b7:7a:18:b3:e4:0d:74:64:77:d8:54:1d:
1e:7b:2f:26:2b:4a:92:57:f2:88:47:3b:76:53:a8:08:9b:e1:
7b:52:fd:17:60:44:27:4e:59:a6:9f:37:a7:4c:31:d8:cd:f2:
d5:8d:d6:12:48:7b:e4:74:dd:45:93:ac:9f:c0:16:63:99:7d:
5d:cf:6f:ed:b9:f0:52:63:b2:03:a1:87:06:3a:4b:3d:e7:96:
41:2c:bf:e6:74:68:7e:69:4c:da:26:60:8f:0c:44:d0:12:1c:
8c:9f:ad:fd:2c:b8:b8:21:6c:96:e1:99:82:30:2f:d2:6a:2a:
9d:23:18:28:c3:ec:b2:94:47:1c:4b:2a:c6:24:13:8e:ec:0d:
91:2f:51:67:d5:2e:09:4e:a4:15:8d:27:57:d7:5f:b3:2f:44:
58:ea:b2:df:58:dd:bc:1e:41:5e:db:37:91:d7:7c:ae:ad:18:
d6:0a:42:2b:94:6c:8f:aa:db:80:e9:b9:a2:c3:19:71:ff:d4:
dc:5d:fe:f8:ca:61:01:a6:a4:7c:5f:14:ba:cd:ae:ed:7c:50:
41:99:7d:07:0e:1e:89:d1:45:a0:0c:7c:3f:ab:b1:30:a7:c4:
35:43:93:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:52:28 2025 by rpki-client