Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/KDqp0KJBu-4WRFmlODTZGvtEzMo.roa
File: KDqp0KJBu-4WRFmlODTZGvtEzMo.roa (raw, json)
Hash identifier: sgx3u4OlPaMIX30o9Pw/sWgXitROdXpHDBcbHgo10iA=
Subject key identifier: 28:3A:A9:D0:A2:41:BB:EE:16:44:59:A5:38:34:D9:1A:FB:44:CC:CA
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 01955BABCA55F98426D5C7F647FD8E1DC473
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/KDqp0KJBu-4WRFmlODTZGvtEzMo.roa
Signing time: Mon 03 Mar 2025 11:02:19 +0000
ROA not before: Mon 03 Mar 2025 11:02:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 178.236.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:ab:ca:55:f9:84:26:d5:c7:f6:47:fd:8e:1d:c4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Mar 3 11:02:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=283aa9d0a241bbee164459a53834d91afb44ccca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:78:09:46:d7:fc:cd:7e:b5:c5:47:ca:41:
bf:af:cf:b7:19:9e:3b:8c:b2:e2:e1:9b:77:d3:e1:
3d:8a:08:c0:f6:7a:83:ce:8e:98:ca:8b:b9:ba:13:
07:68:70:58:f4:1e:79:5a:bf:52:4a:cb:c1:83:9b:
75:8d:be:66:66:8b:db:a5:1a:1a:cb:98:73:c8:f2:
19:2c:53:be:10:32:2d:c2:d3:3a:2c:47:dd:c4:07:
df:73:d2:cb:71:c9:0c:48:e2:41:4a:bb:96:53:ba:
a9:b6:39:0f:e3:e4:09:5c:5a:57:11:49:a0:fa:a6:
40:c2:7c:9b:08:07:43:4c:e0:00:09:4f:ec:15:b4:
74:f1:6b:27:5d:0b:63:20:0d:c9:f7:25:d1:93:34:
c2:9b:94:c1:ee:a9:d7:f0:77:9a:3b:34:11:37:47:
13:66:85:22:82:bc:9e:b4:c3:d2:da:25:a0:f5:f2:
b8:5e:31:f3:65:b8:2c:bc:6d:f1:b4:ae:07:87:54:
26:de:28:d8:68:45:6e:12:a2:b2:fc:9d:a1:b7:7c:
d9:0a:4e:e4:ca:6a:83:f5:8b:28:0e:ff:07:6d:34:
c3:f5:e1:78:26:d8:dd:5e:21:0d:09:b9:6f:84:b4:
6d:fe:82:4d:0a:08:be:54:43:75:8b:57:5f:b4:d2:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3A:A9:D0:A2:41:BB:EE:16:44:59:A5:38:34:D9:1A:FB:44:CC:CA
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/KDqp0KJBu-4WRFmlODTZGvtEzMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.226.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:5f:7e:80:f0:b6:f1:5d:9b:bd:29:b3:67:5f:f7:32:68:38:
ab:34:9a:e0:69:16:8b:5f:3f:04:45:98:05:7d:eb:11:c1:c7:
8f:31:3e:2c:78:42:07:19:02:94:0a:80:04:db:74:6c:29:35:
ea:5a:21:6a:6c:45:ba:fb:4a:bd:17:e4:1c:3b:f4:12:94:be:
82:26:fe:b4:cf:05:3b:f8:6c:71:b3:78:36:e1:7e:c9:5f:0e:
d0:bf:ed:e0:46:15:c6:61:19:7b:34:d6:00:b6:1e:2e:15:13:
6d:0d:89:2e:e1:5e:f9:de:ec:3c:6a:77:01:20:b3:d5:0e:18:
cf:9a:68:4a:13:69:87:85:62:74:26:e2:47:ab:43:46:66:08:
ed:6a:26:cf:b6:c7:08:b9:7b:03:45:f6:70:6d:c2:3d:91:dc:
a5:c5:40:af:ea:c2:a6:2d:1a:ef:5e:f0:45:a6:c4:f8:c6:05:
8b:56:61:0e:d8:64:73:1c:e0:c8:8a:06:47:0d:27:bd:35:23:
2d:6d:fc:91:93:e0:52:bb:4e:56:1e:af:5a:c9:6e:2e:72:dc:
6f:b3:31:f9:85:85:d8:0b:5c:e8:2f:74:0c:a3:e1:90:e0:7d:
97:9c:f2:1a:2f:e3:a9:2e:8f:49:7e:ad:4d:5b:92:3c:5f:c8:
28:cd:97:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:21 2025 by rpki-client