Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/KBsglg50VnBjy9Xee9AnTSsSWz0.roa
File: KBsglg50VnBjy9Xee9AnTSsSWz0.roa (raw, json)
Hash identifier: JULv9OfxIDfj0c2onHjWDCZz1IO7FAUIfrutSZKhREo=
Subject key identifier: 28:1B:20:96:0E:74:56:70:63:CB:D5:DE:7B:D0:27:4D:2B:12:5B:3D
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019722517D187C742F1D91D980AE04EC8470
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/KBsglg50VnBjy9Xee9AnTSsSWz0.roa
Signing time: Fri 30 May 2025 17:50:55 +0000
ROA not before: Fri 30 May 2025 17:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 14.102.227.0/24 maxlen: 24
77.111.96.0/24 maxlen: 24
89.106.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:22:51:7d:18:7c:74:2f:1d:91:d9:80:ae:04:ec:84:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 30 17:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=281b20960e74567063cbd5de7bd0274d2b125b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:87:cd:5b:fa:41:a1:a9:22:3a:31:17:8a:
bc:25:a6:5b:33:03:2d:fe:96:25:dc:0f:55:af:da:
a9:dd:87:e5:82:68:1e:3a:bd:2f:16:dc:df:82:2e:
63:4e:04:79:81:9e:1b:32:cb:5e:4a:27:d1:10:e6:
28:2b:eb:38:6c:0f:71:1e:d4:3f:08:0f:5f:33:e5:
59:4b:10:de:43:3c:4a:c7:37:73:9b:df:48:6e:92:
05:f7:24:d8:2c:aa:df:40:25:bd:8e:55:56:42:7a:
79:df:e2:a3:58:10:b6:e1:25:80:a0:78:36:d9:54:
db:a9:a4:1b:a6:c0:4a:4f:5c:94:ce:ac:13:0f:04:
3d:b7:47:f4:f6:7f:ec:eb:1f:c1:47:1d:4a:9a:40:
18:bf:f0:44:0e:10:a7:3f:bb:59:8a:0a:07:99:64:
2b:39:b3:63:e8:11:80:a0:f8:ec:49:6f:8d:75:5c:
a8:cf:33:6e:18:f5:56:7a:ee:e5:0f:84:04:b3:ed:
73:4f:62:23:2f:30:c6:2b:2b:e5:b7:3d:61:b3:f3:
90:5a:4b:cc:02:e5:dc:07:a9:93:07:8c:42:25:87:
ac:96:b2:fc:45:56:c4:af:a5:ad:60:e8:1a:f8:9d:
32:f9:f1:6a:51:ec:44:bb:9f:0b:28:4a:27:65:99:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1B:20:96:0E:74:56:70:63:CB:D5:DE:7B:D0:27:4D:2B:12:5B:3D
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/KBsglg50VnBjy9Xee9AnTSsSWz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.227.0/24
77.111.96.0/24
89.106.14.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:3f:bc:11:f0:a8:65:c4:ca:c4:01:95:0c:c0:47:32:56:0b:
40:73:d0:e5:96:6d:6e:c4:35:72:b7:18:da:01:09:2f:e4:6e:
df:25:4e:7f:6d:72:e5:db:cf:49:ca:8d:70:3b:1c:2c:82:b6:
dc:6f:02:f0:e3:ef:88:26:32:a2:52:9b:c7:ba:aa:f1:dc:84:
df:30:b5:92:02:f7:a6:7f:d5:48:95:68:0b:e9:5f:d8:cd:96:
7e:c4:6f:35:3f:87:b9:33:31:cf:58:60:1a:5f:36:a3:70:70:
34:dc:41:44:e3:c6:f4:66:5b:16:12:5f:25:f7:95:f1:16:c9:
f4:45:20:11:93:79:ea:56:62:99:6e:e8:4b:0b:58:3b:01:75:
a5:7b:f6:dc:81:53:85:3a:a5:e4:e5:55:92:1e:e8:d8:0c:ec:
3c:e1:f8:e2:08:7a:ec:77:24:a0:ca:55:43:8a:53:ec:d7:67:
4a:db:38:22:a4:c0:3c:9c:b0:1b:fe:02:ae:a4:13:02:7c:8c:
4d:fe:e5:0a:e3:ef:01:0e:12:f1:6b:ae:92:44:b7:19:62:71:
e3:2b:19:59:5c:2b:5e:78:b5:62:53:a5:df:27:45:8f:f1:fa:
51:86:18:03:f1:75:e7:41:85:91:9f:10:76:82:3a:c2:50:a7:
95:4d:02:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:55:22 2025 by rpki-client