Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/KvovWdF-jZkzAMEqhUPpJeYTij0.roa
File: KvovWdF-jZkzAMEqhUPpJeYTij0.roa (raw, json)
Hash identifier: btvyHTLXIBe5l5kgEk9szQqhZc5FlnGBNVEJxt67Uxo=
Subject key identifier: 2A:FA:2F:59:D1:7E:8D:99:33:00:C1:2A:85:43:E9:25:E6:13:8A:3D
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D2FF6188E3E241752483CD9B81393
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/KvovWdF-jZkzAMEqhUPpJeYTij0.roa
Signing time: Wed 01 Jan 2025 15:47:45 +0000
ROA not before: Wed 01 Jan 2025 15:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50222
IP address blocks: 84.204.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:2f:f6:18:8e:3e:24:17:52:48:3c:d9:b8:13:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2afa2f59d17e8d993300c12a8543e925e6138a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c6:e9:76:14:63:b8:c4:11:79:d6:e7:2f:c3:
b5:31:69:2c:9b:42:2b:b5:99:cb:65:d6:36:f5:15:
34:7b:92:15:fa:5e:b0:3c:ee:7e:cf:a7:44:cd:68:
ba:16:7e:b6:fb:8d:ac:d8:ef:56:26:45:e2:dc:d7:
39:71:ca:ac:24:73:ca:4f:40:e2:77:73:dc:d2:f9:
9f:9c:a4:94:1d:56:8b:9e:b8:7e:60:14:c7:fe:94:
ad:ec:91:0d:a1:ca:87:f9:83:9f:ad:a2:e8:11:fd:
b3:09:7d:54:14:94:4a:ca:42:97:ce:5a:9c:ab:43:
ca:36:54:a9:a7:32:aa:90:c3:96:ad:5f:e0:c0:0e:
05:46:fd:ca:37:1c:76:ea:9c:f9:19:ef:bd:4b:4f:
70:23:44:9a:a9:7a:57:c9:c9:e6:aa:44:03:41:c3:
7f:b5:98:02:0c:b8:45:b5:49:ab:8b:48:9e:e3:ae:
90:9e:e6:27:cd:14:32:55:72:37:55:7e:05:51:fc:
25:dc:c2:f4:77:44:c0:fa:69:9d:22:17:be:c6:ca:
8f:d7:73:c8:38:31:9a:ce:80:7f:22:69:f5:47:73:
25:46:9b:eb:a5:dc:6b:99:de:64:52:fd:22:d2:3a:
c1:ae:56:32:6e:a3:0d:65:89:ad:ca:60:27:5f:bb:
13:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FA:2F:59:D1:7E:8D:99:33:00:C1:2A:85:43:E9:25:E6:13:8A:3D
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/KvovWdF-jZkzAMEqhUPpJeYTij0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.204.53.0/24
Signature Algorithm: sha256WithRSAEncryption
70:30:ab:c9:55:23:76:90:d8:df:82:c9:37:ee:6c:53:fa:39:
22:35:60:35:73:04:e3:65:4d:2a:12:8f:a1:e4:43:15:bf:50:
3b:82:3f:ba:68:ab:55:9f:02:25:e3:a8:15:82:d6:22:7a:31:
1f:8c:9d:40:46:6d:9c:38:d6:55:b4:29:a8:b6:ea:2f:e7:1f:
b7:b6:a7:5d:1e:ad:26:1b:b2:90:fc:69:33:db:80:f9:22:c5:
fa:00:28:e7:ca:c4:e1:d4:5e:3d:c0:4a:49:db:e7:16:d7:a8:
74:00:ee:8d:64:bd:18:ab:10:ce:17:cd:7b:86:4f:e8:33:a7:
5b:ff:15:b0:4b:ec:26:4d:f9:59:90:14:e7:f7:3a:c1:28:b4:
b6:e8:31:5e:09:0a:31:75:b4:9b:33:a2:82:29:ad:0a:7f:4f:
4c:67:0e:fd:c1:f7:38:72:b1:55:6f:95:83:c7:56:e4:6b:ea:
9c:1b:41:32:5c:2f:2b:dc:df:04:40:3c:de:85:d9:d5:0d:4b:
db:03:7e:b4:90:40:4b:40:40:04:6e:35:ac:ac:8b:f3:87:58:
5f:c6:aa:90:fe:c2:e6:1f:9e:9c:c3:68:66:ff:3d:83:9b:ed:
3a:e3:9c:37:46:f7:fa:c6:db:ac:ac:ea:4c:75:90:9e:82:81:
c7:f7:d9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:32:46 2025 by rpki-client