Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/KcYlnGP6yIvrKOMRqD7oEqxDvGw.roa
File: KcYlnGP6yIvrKOMRqD7oEqxDvGw.roa (raw, json)
Hash identifier: VQ4PtIkFLjPYEens6AN4AiFyTZP+DZxBHxkVPHw5znI=
Subject key identifier: 29:C6:25:9C:63:FA:C8:8B:EB:28:E3:11:A8:3E:E8:12:AC:43:BC:6C
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0196C9349BE0E4B7532A39A645CCDCF82DEB
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/KcYlnGP6yIvrKOMRqD7oEqxDvGw.roa
Signing time: Tue 13 May 2025 10:33:10 +0000
ROA not before: Tue 13 May 2025 10:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 46.243.7.0/24 maxlen: 24
91.200.12.0/24 maxlen: 24
92.62.119.0/24 maxlen: 24
94.232.248.0/24 maxlen: 24
109.69.60.0/24 maxlen: 24
2a06:ddc0::/29 maxlen: 29
2a0b:8040::/29 maxlen: 29
2a0c:f642::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 15:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:34:9b:e0:e4:b7:53:2a:39:a6:45:cc:dc:f8:2d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: May 13 10:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29c6259c63fac88beb28e311a83ee812ac43bc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:08:e9:43:c1:c1:45:69:11:4b:8b:e7:84:0b:
c6:e9:2d:ab:48:f4:c5:d3:e5:cd:66:c9:8b:69:ee:
8e:1a:4b:78:2c:59:0a:87:a8:d0:8b:cf:ed:1f:cb:
8e:c6:fe:7f:2f:c9:5b:08:a1:3b:a9:0e:7e:6c:6f:
17:6b:32:00:e6:9e:45:ef:df:10:55:db:f9:18:42:
9a:26:fc:ae:1f:ce:42:e2:07:fd:74:d0:ef:3a:f6:
2a:d9:11:e8:93:68:ae:ce:1a:bb:e0:0d:95:bb:19:
f1:42:b9:80:b9:ad:e6:d6:55:de:e2:80:f0:97:dc:
97:b6:96:6d:55:a4:a2:e2:74:05:db:cc:d3:23:93:
ba:04:97:e1:c8:50:94:ed:29:49:e7:04:e5:8f:d2:
8c:67:65:0d:ef:8b:5f:c4:11:70:92:f8:82:2d:c9:
ae:02:8a:13:36:04:aa:fa:50:cb:e6:d2:70:61:66:
d1:2b:ae:2b:0d:12:16:7d:35:db:f3:c5:a9:7e:f4:
4a:b0:43:fb:38:04:d3:5d:61:94:07:f6:de:d8:c8:
91:81:35:50:ab:ff:b1:f9:57:5f:ec:85:5f:17:16:
65:a8:5e:ad:a3:b2:6a:b0:e0:82:b0:9b:17:59:7d:
d9:7f:30:85:6b:83:89:ef:96:40:c0:90:4d:58:9f:
9a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C6:25:9C:63:FA:C8:8B:EB:28:E3:11:A8:3E:E8:12:AC:43:BC:6C
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/KcYlnGP6yIvrKOMRqD7oEqxDvGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.7.0/24
91.200.12.0/24
92.62.119.0/24
94.232.248.0/24
109.69.60.0/24
IPv6:
2a06:ddc0::/29
2a0b:8040::/29
2a0c:f642::/32
Signature Algorithm: sha256WithRSAEncryption
a4:76:6b:ab:8b:cc:4e:4a:84:51:c5:a9:89:c4:f5:db:a2:c7:
16:85:89:7e:96:c5:10:64:6b:c1:52:67:94:fd:3c:a3:6c:fc:
a4:09:ea:a2:50:d1:b8:45:f3:28:e8:08:76:eb:1f:cf:e9:70:
9f:df:29:b1:7f:b6:2e:f2:67:35:62:71:0a:46:4b:54:55:87:
cb:0c:b2:b4:2f:5e:cc:c3:8c:ab:8f:ec:f1:c6:b2:ee:2e:06:
89:49:29:59:ec:97:1d:d1:b6:a0:76:db:9c:b3:e9:8d:8c:37:
f1:95:ab:4e:3e:99:84:3e:69:14:5e:db:9b:aa:70:e3:3b:44:
21:45:02:8e:b5:89:ff:0e:27:70:c7:0d:f0:4c:9d:68:f0:7b:
b0:62:81:ac:5b:e0:b8:4b:72:c9:b3:06:a5:85:6e:fd:ad:52:
62:e9:fd:be:74:d9:ad:5e:46:85:14:96:1f:41:ad:65:9f:b9:
6b:b7:ed:08:e8:e9:ab:65:02:30:f7:e6:ac:aa:71:9b:d8:43:
bb:e0:16:c7:8d:01:f5:94:74:2b:40:9b:55:20:f5:4c:50:5e:
e9:a7:13:86:1c:84:65:33:08:9d:e7:43:28:c0:0e:40:84:df:
2f:90:4f:be:8e:23:31:a6:dd:db:ae:f9:49:0e:c1:32:5a:2a:
a8:09:88:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:44:08 2025 by rpki-client