Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/kc25BoJspPKTOOkNnEplO6IRLo4.roa
File: kc25BoJspPKTOOkNnEplO6IRLo4.roa (raw, json)
Hash identifier: RtdZTGgpc5NlcoTD91UKpw5ujr0ISlSCALvjRZoHuQU=
Subject key identifier: 91:CD:B9:06:82:6C:A4:F2:93:38:E9:0D:9C:4A:65:3B:A2:11:2E:8E
Certificate issuer: /CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Certificate serial: 0194228D5DF02F8F1EC43A02D802CAB306D9
Authority key identifier: E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/kc25BoJspPKTOOkNnEplO6IRLo4.roa
Signing time: Wed 01 Jan 2025 15:47:57 +0000
ROA not before: Wed 01 Jan 2025 15:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213009
IP address blocks: 194.150.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:5d:f0:2f:8f:1e:c4:3a:02:d8:02:ca:b3:06:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Validity
Not Before: Jan 1 15:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91cdb906826ca4f29338e90d9c4a653ba2112e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:73:44:4c:24:0c:f7:d4:82:c8:a3:8f:69:b8:
6f:73:6c:82:a8:fe:48:e9:1a:c7:d8:f3:43:a4:61:
ad:fd:c8:c4:76:8a:0d:96:67:8d:07:92:94:8c:b1:
bf:fd:64:ac:e6:9a:48:db:1c:8a:0f:00:cd:6a:b8:
ed:88:db:29:49:3e:94:7d:f2:a0:82:b6:6b:a8:20:
1d:e9:ff:3e:ab:6d:15:99:30:9b:68:67:0b:68:32:
41:a4:d3:fc:9c:f0:d8:08:3d:e3:9c:f7:15:a8:ee:
81:3e:10:b5:55:e1:72:b0:6b:fa:d1:a3:ab:c6:64:
c3:3f:5f:47:ba:44:7e:7b:04:53:4c:dd:7e:4c:31:
06:3f:b0:54:ef:87:df:ac:9c:70:4e:12:60:e5:31:
9a:e7:5a:de:de:34:9d:84:38:f5:44:fb:0e:1e:5e:
89:9f:b4:d8:04:d3:25:b5:73:89:60:c7:44:11:c5:
e0:93:97:2a:44:a0:34:f4:a2:f3:6f:3d:c4:9f:11:
ba:03:c6:e1:60:bf:76:b2:43:49:83:f6:45:3f:6a:
c1:78:6b:85:e8:0c:f6:d0:f4:f7:ae:c7:7f:b1:66:
b4:5a:e7:40:87:34:83:87:50:1b:28:e9:06:6b:e8:
6d:b4:ea:26:39:e9:6c:f3:99:d9:a7:96:49:f9:e9:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CD:B9:06:82:6C:A4:F2:93:38:E9:0D:9C:4A:65:3B:A2:11:2E:8E
X509v3 Authority Key Identifier:
keyid:E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/kc25BoJspPKTOOkNnEplO6IRLo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.107.0/24
Signature Algorithm: sha256WithRSAEncryption
25:33:10:21:9e:5a:bf:b5:28:a3:34:cb:7c:8f:e5:78:1a:10:
23:9f:cc:bd:78:94:8f:c9:f1:5f:94:21:cb:4f:38:62:f5:34:
37:b5:e7:dd:b4:de:7a:52:12:d0:35:ed:c5:d5:0d:dd:f3:62:
25:af:ad:0e:12:91:e1:1f:dd:92:33:70:8c:eb:0d:96:cd:66:
d7:3f:eb:51:9b:4b:82:64:db:98:3a:21:fb:2a:f7:b9:5f:4b:
53:90:c1:d0:f6:40:bc:25:b7:2f:5e:17:ac:32:95:30:af:0b:
be:27:92:6d:c9:5e:c4:9e:c4:3c:30:a3:d2:3c:ad:71:bf:69:
a5:5e:00:8c:8f:02:7c:f0:1b:8a:b8:5e:fd:b4:b1:e0:f5:44:
80:95:44:9f:77:d6:be:90:43:c6:86:28:8c:dc:1e:0e:0d:66:
b3:7a:f4:a6:f0:32:08:81:02:b2:85:ae:55:58:54:07:67:44:
6c:47:8e:30:d7:c7:49:ac:d3:26:b6:95:ca:50:01:c1:c8:74:
73:4a:74:29:27:31:53:df:6e:d4:f0:e2:39:68:08:af:b8:bd:
0b:b2:a2:1e:65:1c:a4:29:54:49:0f:6a:8b:91:e8:ac:d2:0f:
14:b4:bf:3d:4a:64:09:4e:bf:69:1f:6e:78:b7:f2:f8:d3:98:
5c:7e:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:32 2025 by rpki-client