Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/KEBG9HtwPAiyfhMW1BHzBOEQsho.roa
File: KEBG9HtwPAiyfhMW1BHzBOEQsho.roa (raw, json)
Hash identifier: 78rv3Da7bTF6HfuCNKmV5VRd7sZeE3pzvCeGqFZf1eg=
Subject key identifier: 28:40:46:F4:7B:70:3C:08:B2:7E:13:16:D4:11:F3:04:E1:10:B2:1A
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 01953D9E94A2CC8A603780EF91A41511510E
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/KEBG9HtwPAiyfhMW1BHzBOEQsho.roa
Signing time: Tue 25 Feb 2025 14:59:17 +0000
ROA not before: Tue 25 Feb 2025 14:59:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29286
IP address blocks: 128.140.128.0/20 maxlen: 20
185.23.96.0/23 maxlen: 23
185.23.99.0/24 maxlen: 24
213.180.225.0/24 maxlen: 24
213.180.226.0/24 maxlen: 24
213.180.228.0/24 maxlen: 24
213.180.229.0/24 maxlen: 24
213.180.230.0/24 maxlen: 24
213.180.247.0/24 maxlen: 24
213.180.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:9e:94:a2:cc:8a:60:37:80:ef:91:a4:15:11:51:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: Feb 25 14:59:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=284046f47b703c08b27e1316d411f304e110b21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:fc:ff:b8:22:96:31:6c:cd:63:f4:5c:13:
f8:0a:5d:78:2e:70:8f:da:4d:9e:29:aa:01:7d:8c:
48:68:12:0b:9d:34:7d:c4:4e:8d:48:b5:fb:4e:be:
7c:12:51:10:58:1c:dc:d0:bb:05:a0:c0:e6:2b:c5:
4a:72:ae:07:61:68:55:9e:07:34:f0:15:9e:f9:6f:
52:f4:44:79:81:ef:e2:68:43:b3:37:08:f2:2c:a8:
e6:1a:5d:10:57:31:5a:ea:3e:85:43:b8:17:64:9f:
71:cd:14:7c:1b:d1:67:f0:73:dc:9c:b6:57:38:53:
69:bc:39:07:fe:12:d8:1a:5f:e9:c4:09:ae:63:42:
7e:b2:a5:c4:ed:0e:c0:2a:7a:b7:87:69:b1:06:6c:
54:dc:93:18:e0:ba:81:c0:ab:82:8b:c1:a3:07:67:
81:42:9c:0e:95:f0:ff:5b:1f:98:54:ee:86:ae:50:
a5:00:e0:3f:ca:f9:f2:35:1e:7b:25:d4:69:4c:0c:
34:86:e3:5f:b0:c9:8e:65:dc:74:62:07:1a:98:9c:
93:5d:0d:54:37:f2:91:80:c3:81:b0:89:28:4a:56:
9e:16:d0:94:3f:cb:cb:ae:d1:29:84:2c:cc:15:b9:
8a:d0:22:c1:ff:c3:71:5b:7d:50:32:5e:85:be:0c:
fb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:40:46:F4:7B:70:3C:08:B2:7E:13:16:D4:11:F3:04:E1:10:B2:1A
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/KEBG9HtwPAiyfhMW1BHzBOEQsho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.140.128.0/20
185.23.96.0/23
185.23.99.0/24
213.180.225.0-213.180.226.255
213.180.228.0-213.180.230.255
213.180.247.0/24
213.180.252.0/22
Signature Algorithm: sha256WithRSAEncryption
be:6d:c7:6b:69:d8:d6:28:8a:25:f6:ee:1a:54:83:90:af:87:
14:92:98:60:c1:b0:77:a4:17:bf:eb:78:39:51:17:8f:26:ac:
d3:02:90:ad:55:d5:2c:b0:59:ea:64:3b:b4:b0:c8:bc:67:10:
cf:ea:d1:aa:b1:60:67:a4:bb:a3:ea:49:26:20:c9:55:77:b5:
3e:46:a1:c6:bc:b9:4c:fc:6a:85:1f:89:4e:3d:9b:e2:47:0b:
9c:d9:13:81:34:39:42:26:9b:de:bb:6c:ba:b7:5b:9e:0a:8f:
3c:84:8c:69:65:18:79:61:a2:ea:32:2d:c4:d5:69:53:f2:c9:
78:1a:b6:4e:cf:08:08:a1:55:79:b4:92:88:4c:b9:5f:01:33:
6b:34:75:d0:3f:b0:07:75:3c:01:45:84:84:1c:10:f7:98:d4:
5d:8f:c6:0a:a0:c9:e7:a2:c6:80:ea:5a:fe:7c:11:7f:6f:7e:
93:f0:8a:ba:d0:84:81:85:31:e3:48:b7:87:11:03:63:40:f1:
93:e7:72:f9:2c:44:31:d2:05:d8:95:8f:f9:28:7f:4b:95:05:
73:16:28:e3:79:54:dd:10:40:f5:32:11:b9:da:77:62:07:dc:
a8:45:b6:b5:1f:57:06:92:aa:f4:42:41:25:54:56:29:c1:83:
57:d5:a3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:19:38 2025 by rpki-client