Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/KcbbqyI61Dpc-ygL7AHKa_usOSo.roa
File: KcbbqyI61Dpc-ygL7AHKa_usOSo.roa (raw, json)
Hash identifier: kkFxtw4PwJG2Z7JLMkiTQPzGH8OwxuhglTuN4vJkL+8=
Subject key identifier: 29:C6:DB:AB:22:3A:D4:3A:5C:FB:28:0B:EC:01:CA:6B:FB:AC:39:2A
Certificate issuer: /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial: 019425FD8AAFC963A99C5935ACA02C1E5F0A
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/KcbbqyI61Dpc-ygL7AHKa_usOSo.roa
Signing time: Thu 02 Jan 2025 07:49:20 +0000
ROA not before: Thu 02 Jan 2025 07:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8851
IP address blocks: 194.207.0.0/19 maxlen: 19
2a00:4901::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:8a:af:c9:63:a9:9c:59:35:ac:a0:2c:1e:5f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Validity
Not Before: Jan 2 07:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29c6dbab223ad43a5cfb280bec01ca6bfbac392a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:f8:b4:9d:98:ab:ea:93:20:85:13:6e:d3:
44:04:05:72:9b:76:0b:64:b7:22:90:72:20:00:2d:
82:7f:93:dc:c0:84:7b:43:f8:c4:d7:24:23:ca:4a:
6c:09:f1:e4:6a:8d:3e:2f:d2:3c:6e:2c:c0:3e:95:
83:fe:9b:7b:d8:39:2f:c9:07:86:cf:95:96:b6:01:
a8:4c:d9:49:5d:6a:49:c5:3b:ee:a5:f0:16:87:3d:
dc:b9:e5:c2:7a:a1:01:4b:b4:c2:44:d3:5a:fd:c8:
fd:29:5c:fb:b7:5f:86:ee:58:b8:b6:39:b5:47:15:
93:55:42:f5:c5:6b:67:ad:ce:48:08:7f:e6:2c:86:
e3:a0:7f:40:e8:65:8b:60:ec:ba:a0:2c:54:5f:c3:
47:b4:2e:a9:a5:4e:55:45:25:86:11:73:1f:f9:ee:
af:81:08:54:a7:06:26:26:cc:5a:fb:9c:97:65:7b:
e8:95:3a:1b:0c:93:ea:c5:91:fd:3c:55:6b:d4:46:
7c:16:4c:5b:6a:1b:3a:a1:ba:cd:41:97:c8:57:0a:
c4:53:d7:33:3e:c5:8f:32:38:aa:6e:62:20:e2:81:
5c:48:01:d1:1e:39:b6:21:c4:e7:0b:dd:d2:78:11:
83:6a:76:a1:55:b9:bf:eb:1e:51:e2:b8:00:89:6a:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C6:DB:AB:22:3A:D4:3A:5C:FB:28:0B:EC:01:CA:6B:FB:AC:39:2A
X509v3 Authority Key Identifier:
keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/KcbbqyI61Dpc-ygL7AHKa_usOSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.207.0.0/19
IPv6:
2a00:4901::/32
Signature Algorithm: sha256WithRSAEncryption
52:4b:c7:6f:ab:17:07:e0:14:ae:62:bb:2c:fc:35:af:f8:2e:
d6:5b:03:77:3b:64:36:b1:7c:be:e1:05:80:19:d3:1b:0f:3c:
c5:a1:c3:a2:9e:8f:7f:a1:e4:38:54:8e:2f:33:de:40:0b:b1:
e5:e8:ae:7a:53:8e:c4:67:57:3a:2d:56:55:3a:9c:9e:d5:30:
29:52:ce:8b:47:d9:ac:06:95:46:a8:90:ce:1e:87:f6:96:25:
c2:3c:96:24:b1:09:57:2c:ec:13:58:5b:8d:04:c8:1b:d1:46:
59:99:8c:04:37:0b:df:bf:bf:f8:e9:36:61:49:04:d5:f9:d9:
e1:d3:a4:f0:9b:5e:dd:bb:b5:5a:73:0e:04:3f:37:f5:83:6a:
e9:5b:e5:ba:7e:28:8b:86:a9:63:6f:27:30:60:3a:22:a2:d3:
35:8a:97:29:38:b4:96:2f:53:1f:af:de:54:59:09:19:77:3c:
7d:50:76:bb:f8:18:be:d4:19:98:78:12:19:c3:6d:c1:41:7d:
9c:01:a5:e4:5e:aa:a2:eb:08:9a:ce:ee:55:21:61:cf:87:69:
8a:e2:9c:1c:02:12:f5:1e:88:18:e1:ac:7e:43:5e:73:3c:89:
04:f8:28:90:83:d7:2c:b3:a5:10:94:18:2f:d9:e6:22:26:c7:
92:09:e2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:07:40 2025 by rpki-client