Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k0KEFHW4fL4Ef8MopdylpfXrtX4.roa
File: k0KEFHW4fL4Ef8MopdylpfXrtX4.roa (raw, json)
Hash identifier: b5DhgBm+P5R0/x6SS6V5aLIs9QaubKbpXVVnCYru10M=
Subject key identifier: 93:42:84:14:75:B8:7C:BE:04:7F:C3:28:A5:DC:A5:A5:F5:EB:B5:7E
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0196B3D6560B9ED071B5E89AD3A3636EF314
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k0KEFHW4fL4Ef8MopdylpfXrtX4.roa
Signing time: Fri 09 May 2025 06:58:10 +0000
ROA not before: Fri 09 May 2025 06:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 217.147.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Jun 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d6:56:0b:9e:d0:71:b5:e8:9a:d3:a3:63:6e:f3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: May 9 06:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9342841475b87cbe047fc328a5dca5a5f5ebb57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:7d:df:09:08:e3:8e:85:f5:fd:6c:1a:ad:
17:4a:bc:fa:c7:51:e8:04:4e:b5:6f:f2:02:61:26:
b4:01:ac:cc:c3:5c:d3:3a:b8:94:18:cf:d6:71:2a:
4b:c0:49:1e:cd:fd:ab:01:de:f4:7a:d2:bb:54:0b:
0b:4e:56:51:09:8e:98:81:ed:f7:66:e7:d1:5a:a2:
a1:a3:68:50:e5:9b:93:ec:6b:01:0d:b6:2c:36:63:
8f:97:87:4a:9e:d3:d6:d0:27:70:b8:2c:24:0f:ce:
0d:af:05:c5:7a:46:a2:ac:d1:d9:26:45:03:1f:9a:
e0:7e:f3:79:d0:cb:37:54:30:c3:dc:a0:73:59:05:
02:db:50:d1:a5:bc:6c:c9:a3:6b:0e:fa:8e:2e:e1:
86:2e:d2:02:f0:fe:25:c3:82:3a:80:fc:13:98:3e:
4c:6d:1e:b0:e9:0f:fa:fa:36:46:e9:04:71:ef:f4:
93:9d:43:e2:65:7a:c7:08:15:6f:f0:4e:0a:d7:ce:
63:34:9e:80:6e:20:c8:aa:6c:d9:da:da:2f:f6:d6:
bf:24:a8:19:32:dc:7b:1c:c9:61:68:2e:00:f4:8a:
fc:18:f3:b7:86:92:2a:e5:8c:9c:6d:61:ed:80:c3:
17:ae:4f:01:31:c6:15:9f:16:7a:61:d2:22:a6:57:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:42:84:14:75:B8:7C:BE:04:7F:C3:28:A5:DC:A5:A5:F5:EB:B5:7E
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k0KEFHW4fL4Ef8MopdylpfXrtX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.14.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:fa:f5:ef:19:7b:0a:75:c9:40:4f:65:5b:be:d6:47:65:6f:
ec:13:9e:b5:f0:5d:9d:db:5c:dd:ef:9c:b2:7e:2b:d2:39:6a:
e7:41:5d:3e:27:9e:5a:4f:26:0f:b4:41:0b:91:8e:60:99:5d:
6d:d6:2c:67:02:cf:42:bd:ba:d0:15:51:44:76:2a:0c:bf:85:
3d:cb:c2:bc:3c:72:e4:0e:50:4e:fb:d6:3a:ff:59:2f:4e:3c:
74:13:ce:43:14:7e:2f:a9:bb:35:ac:f6:09:a6:0b:84:ac:da:
ca:b4:ea:8e:ce:fa:3f:42:8f:69:19:80:17:14:6e:12:0d:3c:
e0:55:59:7b:94:fd:6d:7b:00:b2:de:19:59:6b:67:4b:6d:a3:
7c:49:b3:0c:d9:75:3c:9e:4b:d1:bf:f7:f3:e4:4a:1e:0c:f9:
47:5d:82:2b:6c:1a:47:58:26:bd:1f:96:9b:fd:e0:2b:0a:44:
7d:3d:a8:cf:f4:57:ca:2e:27:18:ee:23:2e:c3:42:a3:87:55:
f8:e7:f2:2f:7c:df:a9:90:4a:bc:b8:90:b0:38:e1:8a:c6:66:
2a:a2:cb:54:9c:76:0f:4a:82:17:09:c0:cf:7d:c8:3b:d4:09:
8a:37:51:2e:19:74:ce:1b:2f:eb:94:7a:70:6f:9f:a5:dc:71:
26:59:ad:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 03:10:40 2025 by rpki-client