Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa
File: KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa (raw, json)
Hash identifier: v+IFmLklJP0SF039aJ72TNFUXKdUB+t1BQfemj0rrwE=
Subject key identifier: 28:23:70:81:FE:8F:79:52:AE:89:45:21:B8:A7:CA:5E:72:E0:2C:54
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 0194258F893AD7C2C1FFA36903E7F4D89813
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 789
IP address blocks: 193.48.99.0/24 maxlen: 24
193.48.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:89:3a:d7:c2:c1:ff:a3:69:03:e7:f4:d8:98:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28237081fe8f7952ae894521b8a7ca5e72e02c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:50:db:23:50:cd:29:eb:2c:08:7b:29:89:
2b:8c:3a:7e:3e:2b:43:58:a8:90:ad:c7:2b:54:94:
e6:15:c6:f6:76:9f:35:ed:92:68:3f:a5:15:5a:e2:
20:fd:47:08:8e:8b:bf:ff:e0:af:6e:06:f7:f6:fd:
7b:49:9e:53:fc:d9:06:ea:18:8a:86:8e:8b:66:a6:
8e:3d:f5:96:55:23:3f:c6:69:9f:06:1b:e7:24:75:
2a:47:cc:23:50:86:c4:a0:e0:c6:6b:5a:b0:0b:82:
3d:85:d8:8b:56:9a:71:9b:e9:d7:70:93:50:5e:4d:
d1:2e:a0:d0:91:c5:7a:d6:35:dd:d2:6a:96:71:4b:
f5:67:8b:0b:1f:75:66:d2:2e:78:d2:ca:20:fe:86:
52:c7:8d:62:34:49:51:c3:cf:34:3b:db:de:58:7f:
da:3e:e3:c3:04:e3:f6:c4:1d:45:92:d9:b6:35:21:
6d:04:39:19:ac:2f:ea:7c:0b:f1:47:6f:52:68:07:
39:45:2c:8f:c5:d3:70:bb:8f:07:93:f6:60:ce:e3:
3c:05:2f:db:6f:48:d0:b9:9a:9b:05:c7:fd:5e:4f:
46:5c:46:c7:5c:50:a9:c0:01:ff:8f:29:7b:0a:a7:
57:d6:62:d2:c8:15:db:38:06:bb:7b:4c:b9:ea:0a:
04:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:23:70:81:FE:8F:79:52:AE:89:45:21:B8:A7:CA:5E:72:E0:2C:54
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.48.99.0-193.48.100.255
Signature Algorithm: sha256WithRSAEncryption
4a:29:69:34:7f:de:76:39:f0:c0:b7:74:68:c1:de:69:f8:97:
ce:a0:02:f9:00:3c:1a:75:bf:d2:18:fe:2a:71:a0:da:5a:0d:
09:d7:8b:96:ee:f7:a3:1e:d0:16:b4:48:5e:ec:55:78:8f:63:
ed:c2:29:c1:a9:0f:26:3f:2a:82:05:1e:83:48:4f:96:a6:7f:
bd:74:39:bc:5a:9a:f3:a4:38:04:8d:00:86:bd:20:43:a0:dc:
c5:77:98:6a:d1:31:d9:7f:23:cc:93:80:80:37:c5:e8:bd:80:
93:45:88:4f:ef:96:cf:87:f2:e1:4e:e3:e4:a0:11:82:0e:cb:
16:55:ca:aa:ef:9d:9c:e9:dc:58:91:cc:a3:31:d8:3f:8c:8d:
7a:a8:a4:59:6c:f3:cb:72:02:59:10:df:bb:f9:f5:c8:33:8f:
f9:e5:6f:e1:c7:52:ea:12:5f:cd:c6:eb:05:7a:71:39:25:cf:
c4:90:38:32:aa:81:87:be:80:41:b0:22:38:b9:29:51:fc:ee:
c7:ba:19:a4:c2:3e:ce:44:9d:e8:da:a0:26:84:81:91:3c:f1:
c4:e2:94:6b:9c:0f:0b:bc:96:d9:65:54:b5:7c:df:ec:dc:c0:
2f:14:42:63:7a:ea:e3:f5:ac:51:e1:52:7a:51:e3:5f:36:fd:
5b:81:4d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 10:12:13 2025 by rpki-client