Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/KLOLVSC8gyi-Sl0Asftyzioggl8.roa
File: KLOLVSC8gyi-Sl0Asftyzioggl8.roa (raw, json)
Hash identifier: 9QBahSVWBCF8elQ7K+YfgOtlNPTp1/yBUOGnwdVPAGI=
Subject key identifier: 28:B3:8B:55:20:BC:83:28:BE:4A:5D:00:B1:FB:72:CE:2A:20:82:5F
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019791D681643ADCB6BEAAE29572E01B0BBC
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/KLOLVSC8gyi-Sl0Asftyzioggl8.roa
Signing time: Sat 21 Jun 2025 09:34:03 +0000
ROA not before: Sat 21 Jun 2025 09:34:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 62.72.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:91:d6:81:64:3a:dc:b6:be:aa:e2:95:72:e0:1b:0b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 21 09:34:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28b38b5520bc8328be4a5d00b1fb72ce2a20825f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:0c:45:79:09:0d:c0:df:72:7c:3f:55:51:
ce:d1:18:ad:62:6a:b0:09:b2:6d:e0:43:15:1b:6b:
75:9d:fb:83:92:6c:c0:a5:ff:c1:44:79:68:c6:0d:
89:21:3e:61:2d:83:5a:b8:e8:7e:ba:f4:79:66:5a:
3e:ea:b9:85:70:5e:e5:55:8d:65:9d:df:c8:e2:8c:
0c:02:bb:6c:e2:5e:85:ba:66:a9:da:c3:8a:ae:47:
7e:7d:64:be:4d:b3:5d:58:bb:c1:f0:da:6a:cd:13:
04:6e:04:91:60:8c:db:3f:dc:07:9d:f2:b9:ff:9b:
8e:1a:58:48:ab:ce:1d:19:77:03:ea:06:ec:50:c1:
fe:c6:c3:bd:03:bf:3d:1c:a3:51:a1:43:67:e4:90:
dd:fa:ed:83:fd:04:62:88:11:29:79:df:a9:9d:cc:
47:1e:78:d2:a3:1d:b3:46:a7:5d:a0:44:32:4c:3a:
f8:56:12:ef:26:95:18:27:b4:96:66:e4:6d:39:c8:
3c:4d:e9:6f:c0:43:38:10:98:40:16:4a:f0:84:42:
42:cc:e0:23:5b:94:bf:52:c3:b0:91:c8:8d:89:ca:
d3:76:bc:df:fa:b5:61:35:e5:6c:57:cf:c3:dc:b2:
17:dd:db:6d:2a:97:7b:1f:53:8f:d7:63:61:8c:d8:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B3:8B:55:20:BC:83:28:BE:4A:5D:00:B1:FB:72:CE:2A:20:82:5F
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/KLOLVSC8gyi-Sl0Asftyzioggl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.191.0/24
Signature Algorithm: sha256WithRSAEncryption
69:05:25:48:df:78:90:7b:20:42:59:f1:bc:d8:7e:bd:b4:c0:
3d:4f:ba:1e:a0:14:aa:e0:a0:de:f7:c3:ee:d2:b5:73:8d:40:
55:9d:50:72:91:14:e3:28:12:8d:e9:fa:87:df:43:ec:b3:9d:
9c:f5:b5:f4:f7:02:99:bd:7b:c0:24:e0:e3:81:38:27:4b:0d:
95:7e:b8:6f:e8:5a:cb:7e:25:43:4d:20:52:49:31:d5:db:84:
ca:59:5e:c7:7f:b4:52:e6:6a:17:84:20:58:3b:c1:96:cc:aa:
66:ca:f4:88:b6:24:52:d4:c0:f7:33:b5:0f:74:d0:17:49:40:
65:e9:cf:c3:ef:c3:95:c2:78:92:af:e1:74:99:73:35:f4:20:
b3:51:20:88:88:e6:a2:92:d8:a6:2b:b5:bd:84:f5:ba:58:3e:
a2:b6:80:37:78:1b:8e:61:6b:35:e3:c8:c0:f3:9b:de:35:cf:
8e:d2:be:40:19:4f:a9:b1:95:84:e3:3a:32:c4:dc:b9:37:4c:
9a:62:8b:49:57:7b:80:c0:3f:30:f0:f5:e5:c0:2d:bb:78:1f:
51:9c:26:27:65:cf:bf:22:e7:1f:dd:68:1d:95:f8:45:f7:75:
77:ec:f1:ec:06:ab:0b:f9:75:5e:88:59:64:4e:60:7c:29:2b:
56:86:2d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:51:26 2025 by rpki-client