Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/kc-RSMe4Oew5F8NEK8PnK5Ztook.roa
File: kc-RSMe4Oew5F8NEK8PnK5Ztook.roa (raw, json)
Hash identifier: RrPN8D12kwMiREonpEUwGrZPp2WKXYrir6fymPU5Gvs=
Subject key identifier: 91:CF:91:48:C7:B8:39:EC:39:17:C3:44:2B:C3:E7:2B:96:6D:A2:89
Certificate issuer: /CN=50a88f9a834101adf877037a51c81d133aa946ec
Certificate serial: 0196ED9BC32231140C66D7BF6F725AB50B06
Authority key identifier: 50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/kc-RSMe4Oew5F8NEK8PnK5Ztook.roa
Signing time: Tue 20 May 2025 12:12:10 +0000
ROA not before: Tue 20 May 2025 12:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47468
IP address blocks: 195.242.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:9b:c3:22:31:14:0c:66:d7:bf:6f:72:5a:b5:0b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a88f9a834101adf877037a51c81d133aa946ec
Validity
Not Before: May 20 12:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91cf9148c7b839ec3917c3442bc3e72b966da289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:ca:bc:af:00:86:25:93:55:fd:28:f9:05:
29:86:c3:43:0a:ec:b5:9d:89:51:de:1c:91:2a:e5:
5d:b3:08:ee:b2:6e:14:95:56:9b:07:3f:26:3e:12:
bc:16:91:1e:d5:71:5b:6b:f4:c0:25:6c:37:2b:99:
3d:60:5b:92:4a:c9:85:54:fd:85:ed:b9:24:08:a3:
23:13:94:3a:58:c5:69:14:59:78:64:fb:dd:39:ec:
32:82:4b:aa:0f:af:70:13:ba:a6:22:1e:ee:22:3c:
58:b2:a3:6d:fc:5a:a2:6b:05:89:6a:6f:e8:cc:21:
bd:04:53:ff:ff:eb:52:fa:b7:93:37:b7:94:a2:a0:
96:dc:dc:ef:3e:26:5f:23:d3:46:e3:1e:dc:1e:8b:
0a:48:84:f4:6f:11:7a:a4:03:99:0d:c8:47:42:07:
a7:cd:e2:e5:68:c2:bd:a4:d8:68:e7:65:ff:85:5e:
d3:82:e8:5c:65:81:44:e9:ab:b2:28:53:52:62:03:
a1:04:b5:87:68:bc:0d:5b:b3:62:17:c4:99:75:0d:
a8:6c:53:ab:30:69:58:bf:20:c7:fe:5e:97:c1:b9:
20:34:16:7e:0f:ab:62:b2:7b:4d:16:6a:9b:e3:f3:
ce:42:b3:9d:19:2f:3e:ee:29:1b:a7:a8:f6:ad:a3:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CF:91:48:C7:B8:39:EC:39:17:C3:44:2B:C3:E7:2B:96:6D:A2:89
X509v3 Authority Key Identifier:
keyid:50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/kc-RSMe4Oew5F8NEK8PnK5Ztook.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.176.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1e:76:da:08:99:dc:ac:be:b3:b4:35:f3:63:7c:03:06:00:
91:7c:bd:ef:a9:76:d2:34:c4:31:70:6f:89:fb:77:3c:a9:29:
07:b7:c0:5c:79:ac:f0:3f:05:2f:ea:81:88:56:4a:ff:0f:30:
5c:77:13:66:8d:ac:2a:11:fe:2f:0b:f6:a2:b7:45:86:8b:7a:
ed:7e:1d:61:be:9e:b7:c6:7a:d1:3a:dd:49:8b:1d:33:7b:88:
8f:bd:71:d6:62:2a:ba:40:47:c1:f4:73:e8:c0:b9:56:fa:d9:
06:e7:6b:ba:ef:f8:e0:6b:51:22:22:03:50:61:d8:9c:d3:78:
48:5f:d6:c3:ac:79:ed:1e:a6:b7:f4:02:07:16:9d:e9:25:66:
5a:61:ad:cd:ab:63:8a:8c:dc:3b:4e:ba:88:cc:6d:d7:9a:6b:
6d:26:bf:84:73:f5:5c:32:f6:54:5b:9e:5f:98:95:3b:8d:46:
f4:72:c2:2a:27:ba:c0:fc:d3:75:6a:a3:95:9c:f3:29:cf:ce:
5b:ed:dd:c2:84:06:62:f8:a4:fd:7c:16:4a:b4:7c:dc:76:9b:
1d:1d:db:8f:6b:22:50:88:3c:ae:87:73:54:18:2c:16:54:4f:
44:24:c6:6b:75:ed:65:51:42:f4:97:b8:e2:a6:f3:ed:30:5b:
ac:89:9e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:21:55 2025 by rpki-client