Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/khdNE-TXPiQU7_zhseWvcPNxKjs.roa
File: khdNE-TXPiQU7_zhseWvcPNxKjs.roa (raw, json)
Hash identifier: Y6s3dJ3krWnGKL8gHHrqA2GAVorou6mJqcyj5OaAz3U=
Subject key identifier: 92:17:4D:13:E4:D7:3E:24:14:EF:FC:E1:B1:E5:AF:70:F3:71:2A:3B
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 01965D6CF34F5F682D26E36403283EBE5B02
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/khdNE-TXPiQU7_zhseWvcPNxKjs.roa
Signing time: Tue 22 Apr 2025 12:15:43 +0000
ROA not before: Tue 22 Apr 2025 12:15:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47975
IP address blocks: 178.72.128.0/18 maxlen: 24
2a03:2300::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:6c:f3:4f:5f:68:2d:26:e3:64:03:28:3e:be:5b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: Apr 22 12:15:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92174d13e4d73e2414effce1b1e5af70f3712a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:74:35:38:61:1d:aa:50:5a:38:01:7f:00:7e:
ad:35:e1:97:bc:f6:92:45:d7:ba:a4:a3:14:f7:b6:
aa:86:1d:ae:cf:c6:a0:7f:5e:39:f0:f1:69:15:9c:
af:8d:37:1d:c2:16:77:60:9e:f3:6f:eb:17:d5:bd:
b7:01:92:80:79:23:9e:99:20:d8:f1:01:41:64:aa:
4d:42:0d:f1:b3:5e:d2:43:46:c2:58:14:93:5c:ee:
c0:2e:7a:3a:e0:92:0d:42:96:d6:4b:0c:05:35:b0:
02:d4:d8:c5:a7:fb:62:fd:40:9c:3b:dd:d5:c9:fd:
aa:d0:4d:5f:7a:0d:77:36:1e:6f:66:51:52:58:c1:
9a:75:85:a9:34:81:3a:5f:32:33:90:d2:30:ac:15:
d2:e2:a3:4f:db:90:33:20:73:8d:89:10:22:aa:69:
54:a5:4f:f1:87:d4:c9:e4:dc:01:e7:f0:c3:ed:11:
ae:00:82:23:88:3c:6c:c0:48:ed:a2:49:05:00:60:
63:e1:b0:29:6f:55:fe:c5:4b:b4:ec:51:7c:72:7c:
c9:9e:e6:2c:45:37:83:41:6b:09:67:4d:92:11:0f:
a8:0f:7d:e6:95:d9:f4:a1:f7:ab:f1:cc:14:14:d8:
27:bd:4f:3b:cd:f3:fe:92:86:c7:7e:c3:97:0e:6b:
3e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:17:4D:13:E4:D7:3E:24:14:EF:FC:E1:B1:E5:AF:70:F3:71:2A:3B
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/khdNE-TXPiQU7_zhseWvcPNxKjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.72.128.0/18
IPv6:
2a03:2300::/29
Signature Algorithm: sha256WithRSAEncryption
bc:9a:9a:59:0b:2a:7a:dc:86:14:86:71:ca:97:c2:41:78:e1:
9f:7e:06:1c:d2:70:35:a1:f7:c8:10:4b:0f:42:c9:03:bc:3e:
5a:c6:32:58:0a:9d:bf:88:f2:02:9f:c0:da:81:c0:ed:dc:7d:
34:ae:c7:d0:0a:da:57:50:0e:19:fa:c9:6c:6f:5d:d6:41:30:
cb:8a:ac:77:0c:0e:86:fb:a3:93:8d:57:62:6b:78:c7:fb:42:
b9:e5:4d:40:3a:5b:91:9c:9c:a3:11:60:a9:29:25:79:a5:50:
52:d8:ef:a1:28:30:a7:35:2f:81:ce:d6:7f:e2:43:71:67:4b:
6f:ca:82:43:48:42:4f:c5:0d:d8:96:2f:21:1a:2a:11:1c:06:
21:97:ec:4a:af:34:a2:54:dc:20:34:d2:7a:c8:b5:76:0e:78:
33:8b:aa:26:52:e2:62:9f:73:34:6c:ba:6e:b8:9e:d0:71:05:
ff:94:31:be:40:b4:d5:0e:96:a9:c2:c2:e7:11:33:db:e8:9b:
51:75:05:c7:fc:72:c3:11:b8:9c:94:ba:96:af:a4:2e:5a:a8:
df:3e:e3:94:e3:b2:12:e3:b8:b6:03:87:06:e2:d3:1a:1a:f8:
dd:38:08:a1:84:eb:ca:10:87:1c:cc:6c:22:ca:43:61:d1:de:
6e:bc:f9:d7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZZdbPNPX2gtJuNkAyg+vlsCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NTk3ODZmMjI2Y2I2ZDQ5MGJmYjU0Mjk0ZTYxMWE3ZDUx
YThmMWUwHhcNMjUwNDIyMTIxNTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjE3NGQxM2U0ZDczZTI0MTRlZmZjZTFiMWU1YWY3MGYzNzEyYTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93Q1OGEdqlBaOAF/AH6tNeGXvPaS
Rde6pKMU97aqhh2uz8agf1458PFpFZyvjTcdwhZ3YJ7zb+sX1b23AZKAeSOemSDY
8QFBZKpNQg3xs17SQ0bCWBSTXO7ALno64JINQpbWSwwFNbAC1NjFp/ti/UCcO93V
yf2q0E1feg13Nh5vZlFSWMGadYWpNIE6XzIzkNIwrBXS4qNP25AzIHONiRAiqmlU
pU/xh9TJ5NwB5/DD7RGuAIIjiDxswEjtokkFAGBj4bApb1X+xUu07FF8cnzJnuYs
RTeDQWsJZ02SEQ+oD33mldn0ofer8cwUFNgnvU87zfP+kobHfsOXDms+XQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJIXTRPk1z4kFO/84bHlr3DzcSo7MB8GA1UdIwQY
MBaAFAhZeG8ibLbUkL+1QpTmEafVGo8eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZsNGJ5SnN0dFNRdjdWQ2xPWVJwOVVhang0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82ODRlZTMtZmJlZC00MjI2LTkxYWQt
NTJmZTQ0MzQzNTBlLzEva2hkTkUtVFhQaVFVN196aHNlV3ZjUE54S2pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC82ODRlZTMtZmJlZC00MjI2LTkxYWQtNTJmZTQ0MzQzNTBl
LzEvQ0ZsNGJ5SnN0dFNRdjdWQ2xPWVJwOVVhang0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQGskiAMA0E
AgACMAcDBQMqAyMAMA0GCSqGSIb3DQEBCwUAA4IBAQC8mppZCyp63IYUhnHKl8JB
eOGffgYc0nA1offIEEsPQskDvD5axjJYCp2/iPICn8DagcDt3H00rsfQCtpXUA4Z
+slsb13WQTDLiqx3DA6G+6OTjVdia3jH+0K55U1AOluRnJyjEWCpKSV5pVBS2O+h
KDCnNS+BztZ/4kNxZ0tvyoJDSEJPxQ3Yli8hGioRHAYhl+xKrzSiVNwgNNJ6yLV2
Dngzi6omUuJin3M0bLpuuJ7QcQX/lDG+QLTVDpapwsLnETPb6JtRdQXH/HLDEbic
lLqWr6QuWqjfPuOU47IS47i2A4cG4tMaGvjdOAihhOvKEIcczGwiykNh0d5uvPnX
-----END CERTIFICATE-----
Generated at Wed May 14 06:58:49 2025 by rpki-client