Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/K-WcYZp1Vr4DrhTlbDa1XAsuu4s.roa
File: K-WcYZp1Vr4DrhTlbDa1XAsuu4s.roa (raw, json)
Hash identifier: FTkwxwLsNPLRvw7XfELnO2lGIpcQ3JUT+SSorDdEIQk=
Subject key identifier: 2B:E5:9C:61:9A:75:56:BE:03:AE:14:E5:6C:36:B5:5C:0B:2E:BB:8B
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 019425FD98484DFB19C6AB051986E4E23887
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/K-WcYZp1Vr4DrhTlbDa1XAsuu4s.roa
Signing time: Thu 02 Jan 2025 07:49:24 +0000
ROA not before: Thu 02 Jan 2025 07:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13046
IP address blocks: 188.125.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:98:48:4d:fb:19:c6:ab:05:19:86:e4:e2:38:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Jan 2 07:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2be59c619a7556be03ae14e56c36b55c0b2ebb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:94:73:a7:a0:a3:ef:b4:b9:8c:03:f1:dd:
10:e2:6a:52:1c:5f:ff:ca:a1:0a:b9:2c:af:5d:f2:
7c:75:2f:a8:3f:70:a1:cd:25:11:b0:91:c7:b8:0b:
a8:24:66:ea:ef:80:ae:b6:c5:cf:94:fc:52:b8:ca:
fc:7c:b5:8b:ba:15:ab:f0:2f:c3:59:3a:5f:3c:8d:
70:85:22:4a:48:fc:99:a0:a2:eb:e2:0d:28:e3:ae:
3d:a7:ce:1a:f4:c0:79:4f:7d:df:60:0c:2e:60:9d:
81:d3:64:2f:a8:56:2a:9d:59:6a:d3:7e:4c:8f:e8:
8b:bd:14:ec:b9:cd:7a:15:47:a7:0c:c3:06:ad:6f:
b8:84:f2:be:49:fb:6a:7b:e3:fd:aa:4d:03:14:e3:
2e:23:2a:94:b4:af:79:72:50:75:0b:30:56:df:23:
bc:64:fc:06:52:30:cf:1f:32:88:80:04:b4:28:82:
70:ab:06:55:31:32:06:ce:56:5e:45:70:4b:f4:4e:
bb:7d:80:4a:f0:92:d0:c7:31:ff:fd:4a:89:34:2d:
33:15:d8:92:bf:ec:40:1d:54:96:e5:dc:57:f1:48:
32:5f:b1:06:23:5b:76:f2:78:15:eb:8c:8e:95:6b:
d2:d3:5a:db:12:bf:10:86:3c:87:8d:3b:e0:3a:e7:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E5:9C:61:9A:75:56:BE:03:AE:14:E5:6C:36:B5:5C:0B:2E:BB:8B
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/K-WcYZp1Vr4DrhTlbDa1XAsuu4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.15.0/24
Signature Algorithm: sha256WithRSAEncryption
44:04:ce:a1:31:dc:e2:e9:4e:13:28:db:37:6a:6c:9e:1c:b7:
3f:49:68:b9:c7:96:14:9b:99:b2:45:0b:0e:ed:1b:db:76:5c:
47:d1:26:ed:a1:13:5d:46:b5:a6:34:81:03:f8:3e:0b:1a:8c:
15:52:eb:47:87:a9:e9:6e:9d:ee:c3:72:9b:db:82:29:ba:92:
eb:37:4a:19:8f:a8:7e:b0:ff:db:d9:37:9e:6f:ec:fd:fd:60:
e8:a7:35:10:0d:04:9e:49:03:c9:18:48:5f:07:6a:67:9f:a6:
1c:7d:94:e3:d4:6a:8a:ec:93:e1:32:a4:c6:77:0f:cd:ce:17:
e7:ee:44:bd:5d:39:0c:6d:28:93:8c:43:be:49:cf:32:6d:7a:
0f:c2:95:d8:55:ab:79:c6:01:dd:0c:8e:9c:a2:98:f0:52:20:
af:f1:f5:d4:1e:10:79:04:60:0a:21:4e:ac:06:7f:f9:c9:23:
bc:a1:0a:ec:f9:32:01:17:ce:b7:33:35:44:87:6b:92:b2:a5:
88:1f:7b:c3:ef:c7:df:89:09:f4:2a:cf:af:4c:00:9e:5c:6d:
f8:24:83:b4:90:7e:e9:84:fb:1c:25:3c:ac:2c:9f:63:d0:85:
ad:b5:02:46:5f:73:b0:5e:48:48:0d:c2:04:a0:e9:0a:22:75:
98:84:87:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:17 2025 by rpki-client