Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/KIBPt_IHF6y4uJMTevu1k0aU37E.roa
File: KIBPt_IHF6y4uJMTevu1k0aU37E.roa (raw, json)
Hash identifier: xnu5MWsk10XHvOorhDM/6K8KY5BqTo0pp6Ckq1C4ML0=
Subject key identifier: 28:80:4F:B7:F2:07:17:AC:B8:B8:93:13:7A:FB:B5:93:46:94:DF:B1
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 01971CE675D954438C7C66DA93640E0527DE
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/KIBPt_IHF6y4uJMTevu1k0aU37E.roa
Signing time: Thu 29 May 2025 16:35:54 +0000
ROA not before: Thu 29 May 2025 16:35:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214286
IP address blocks: 2a14:43c0:1000::/36 maxlen: 36
2a14:43c0:2000::/36 maxlen: 36
2a14:43c0:3000::/36 maxlen: 36
2a14:43c0:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:e6:75:d9:54:43:8c:7c:66:da:93:64:0e:05:27:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: May 29 16:35:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28804fb7f20717acb8b893137afbb5934694dfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:06:40:2a:c5:9c:5c:91:08:fa:6b:7b:3a:
3b:c1:bf:b9:9c:8b:f4:85:de:5d:dd:a6:24:f4:04:
93:58:4d:c3:66:95:b3:d3:62:78:0d:88:d4:5c:f5:
cb:92:af:21:83:51:26:db:a5:7b:4f:12:b8:69:ba:
0c:f4:f4:20:da:3a:61:f3:81:e1:bf:db:b8:3b:e2:
90:79:b7:ed:8d:42:79:83:23:94:f8:3f:01:bb:7e:
b8:6f:25:cf:ea:ca:c2:ec:7f:87:67:5e:fb:90:ef:
72:fd:26:c0:39:14:58:42:06:cb:4a:15:84:47:ac:
aa:be:02:7e:af:1d:51:9f:79:4d:bc:4d:fc:ca:98:
9f:f9:3c:95:45:08:c9:48:ca:c5:04:ab:ed:2f:82:
d5:db:82:6c:c7:1e:d0:68:ad:55:40:05:2d:3d:0b:
c1:2a:dd:e6:7f:36:73:26:65:d4:a9:f1:6a:7a:92:
50:bc:7d:64:a4:fa:38:58:5b:41:9b:68:45:5f:ed:
78:68:4c:6e:f0:18:fa:eb:bf:3e:64:fc:d3:34:f7:
f1:59:e5:3d:5f:57:13:49:1e:12:4e:c4:1d:4b:0f:
70:c1:a6:19:bf:50:48:10:af:15:11:a2:e0:ee:bf:
02:63:78:d7:f6:6b:83:0b:75:23:45:a4:6a:82:21:
d1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:80:4F:B7:F2:07:17:AC:B8:B8:93:13:7A:FB:B5:93:46:94:DF:B1
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/KIBPt_IHF6y4uJMTevu1k0aU37E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:43c0:1000::-2a14:43c0:4fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4c:12:42:15:53:ba:9a:24:1f:f4:84:ed:6b:e7:6c:ce:5d:3b:
f7:a3:92:16:6a:4b:75:ba:37:56:ad:4f:65:44:9d:db:07:86:
7a:66:8e:a9:f0:9e:86:b2:78:dc:7c:c1:b4:71:ad:3f:76:6e:
7a:32:56:24:a4:ae:cd:64:a7:20:67:44:b3:9c:d7:0f:dc:6f:
e7:7b:ea:df:d7:a9:b9:6e:37:41:6d:d9:b4:91:91:d7:27:6f:
8e:df:b5:88:29:53:95:c9:86:95:6e:55:98:ef:8c:06:a6:1b:
4c:80:da:ab:1f:e3:8b:45:94:11:fb:0a:58:b7:88:10:ce:16:
d6:45:73:9f:26:eb:9c:6f:da:22:83:1f:4d:26:12:2c:c3:af:
8a:c1:d9:c2:03:98:a0:45:39:0e:5e:63:e7:48:19:ac:c6:64:
b4:d0:3e:87:ad:00:5b:0b:cc:74:4d:3f:14:61:f8:73:51:44:
ba:d2:1b:ef:b7:97:ad:4b:cd:d4:d4:69:11:d1:37:da:55:da:
d8:7f:0b:0f:ed:22:7e:e3:4f:5c:4c:4b:94:3d:c1:39:8d:db:
0f:44:9e:c4:dc:fe:65:43:71:62:91:fa:2c:d6:53:ae:fa:66:
7f:a9:29:87:c6:20:f8:9e:24:46:29:e1:5c:44:60:c0:f5:05:
2e:be:2b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:02:25 2025 by rpki-client