Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/ksWoUId71Ta6zaKYKbekW8SN22U.roa
File: ksWoUId71Ta6zaKYKbekW8SN22U.roa (raw, json)
Hash identifier: tv73AIHBejtA7MQn113/2vhoh+psXUpDGtwp+NxnLcI=
Subject key identifier: 92:C5:A8:50:87:7B:D5:36:BA:CD:A2:98:29:B7:A4:5B:C4:8D:DB:65
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 0195DD26EAE92EA4487FC27415D511EAA90E
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/ksWoUId71Ta6zaKYKbekW8SN22U.roa
Signing time: Fri 28 Mar 2025 14:27:50 +0000
ROA not before: Fri 28 Mar 2025 14:27:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50628
IP address blocks: 2.56.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dd:26:ea:e9:2e:a4:48:7f:c2:74:15:d5:11:ea:a9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: Mar 28 14:27:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92c5a850877bd536bacda29829b7a45bc48ddb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:49:a6:37:5a:93:a1:0d:dc:ff:49:46:73:
7f:8c:b4:aa:54:28:2d:33:45:8f:76:39:c6:a4:c3:
12:4a:4e:a2:ea:2a:e7:2d:08:6a:09:a0:6e:dd:08:
a3:4d:8f:79:4b:25:9e:bc:b5:98:ee:b3:62:78:2e:
94:39:8b:c3:09:7c:5e:0b:37:e9:05:f7:9e:35:63:
b7:10:b5:74:ba:b7:3d:6f:21:29:45:f9:e2:1a:fd:
e3:91:bf:d2:ca:9e:d6:23:12:a7:a5:41:65:35:6e:
76:eb:5c:b2:0c:fc:d2:91:47:7f:bd:38:b0:c2:d2:
34:02:fd:63:ee:14:ca:e3:2d:61:77:0a:07:8a:43:
1e:aa:b2:18:f2:39:c4:ab:9d:5e:26:06:96:f0:67:
df:31:40:d7:c1:df:42:2f:89:e4:a5:de:74:fd:9b:
6c:bf:d9:2f:9f:d8:1d:c1:60:e0:ca:b8:85:bc:0a:
11:c7:bb:7b:49:84:55:92:65:33:d0:a9:37:70:4b:
8a:0d:05:13:81:d6:64:43:c2:c3:29:dd:cf:3c:e6:
94:26:ae:e3:96:ab:64:91:ba:ab:28:0a:af:fe:f7:
27:ac:d5:74:da:57:b7:9f:37:c1:ff:4d:1c:c6:ac:
1d:5d:3f:01:7d:2a:4e:32:38:eb:a9:10:fb:24:01:
98:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C5:A8:50:87:7B:D5:36:BA:CD:A2:98:29:B7:A4:5B:C4:8D:DB:65
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/ksWoUId71Ta6zaKYKbekW8SN22U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.80.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:5d:c0:ff:c8:65:4e:73:a9:f2:29:34:d5:5b:3b:01:cc:1e:
e7:46:47:7f:c4:1d:90:ef:1f:83:e5:53:d3:05:37:63:e7:8b:
54:61:f0:35:9f:67:0d:14:ce:a9:01:55:1b:d8:b0:4b:be:ad:
42:a2:90:d8:f5:44:0c:dc:62:85:b5:0b:92:a4:f9:5d:ce:53:
7f:92:76:a6:99:98:f6:4d:89:f5:3e:e7:e4:3d:f0:e6:41:38:
e1:17:0a:32:c2:5b:1f:5a:63:35:4a:24:a1:03:e8:d6:cd:31:
e8:34:1a:63:5f:40:2b:d5:cf:bf:0a:fc:78:ed:2e:3b:89:67:
1c:e9:77:50:ab:ef:11:99:a9:38:3d:bc:cf:47:58:3e:1b:a5:
35:b3:f2:75:b9:b7:34:3e:47:54:73:0e:05:7a:a6:0e:2b:fb:
e8:8e:d2:1d:9a:09:59:c2:eb:da:3c:2c:32:38:bf:45:13:7e:
1c:9f:0a:02:e1:87:a2:84:79:25:18:8a:16:69:76:ed:df:05:
c5:c0:54:a6:f1:1b:b5:9b:b8:39:ba:c7:42:e8:be:20:a7:6a:
ff:7e:69:4e:de:a1:8f:17:6d:33:6d:68:56:3b:11:55:4f:0f:
0d:5a:30:ca:89:ab:27:b8:cb:80:1b:01:1b:ee:74:a3:36:5d:
0d:b6:31:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:14:34 2025 by rpki-client