Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/06tdkIdoF1YQjbPR5DmsY5XCM7U.roa
File: 06tdkIdoF1YQjbPR5DmsY5XCM7U.roa (raw, json)
Hash identifier: 8ESs1AGuDZmESQJtgqNPRGlyCPe2CHHQrDCooJR+4n0=
Subject key identifier: D3:AB:5D:90:87:68:17:56:10:8D:B3:D1:E4:39:AC:63:95:C2:33:B5
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01964962C0C5C63778263DDC389C821479BF
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/06tdkIdoF1YQjbPR5DmsY5XCM7U.roa
Signing time: Fri 18 Apr 2025 14:52:10 +0000
ROA not before: Fri 18 Apr 2025 14:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215081
IP address blocks: 178.173.240.0/24 maxlen: 24
188.253.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:62:c0:c5:c6:37:78:26:3d:dc:38:9c:82:14:79:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 18 14:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3ab5d9087681756108db3d1e439ac6395c233b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:af:93:ad:fb:e3:e5:a6:f7:1a:f6:0d:f6:
6e:13:85:97:04:52:d2:90:14:06:51:40:0b:92:19:
a7:dd:ec:13:18:69:0a:e1:7f:3d:52:b2:c7:e9:23:
6f:63:0f:a7:23:5d:58:2f:7a:3f:af:58:16:bc:ec:
0d:b7:ac:5f:a7:02:0b:9a:27:31:e4:09:49:59:66:
31:d7:7b:ed:e2:a7:c0:8f:7c:06:9a:7e:9a:2f:57:
fa:03:59:a4:18:72:9d:09:89:f7:c2:b5:49:40:99:
04:2b:6f:22:5b:b7:85:68:cc:c1:30:c4:94:2c:1c:
fe:2d:c5:c6:ed:e1:30:37:87:85:03:e0:49:4f:43:
3e:9c:d7:7e:95:b4:d2:a3:93:63:e5:a9:77:a9:d4:
0d:b9:45:9f:3b:53:83:41:de:de:2b:65:01:a4:16:
dd:4f:35:d3:7b:85:71:b3:b4:a0:44:4d:fe:9b:2a:
93:3c:d4:0f:ee:f3:cc:d8:61:f7:7d:bb:01:6f:1d:
6c:9f:9c:99:dd:08:05:e4:9a:27:84:60:a7:0d:2e:
b0:e6:bf:a5:a7:27:21:cd:b9:d8:25:b1:3e:99:29:
eb:d3:b2:54:e4:ae:56:d9:4a:05:e4:ec:c9:1a:14:
65:bd:89:9e:46:8a:b6:8f:8a:ab:85:9f:0d:be:b6:
c2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AB:5D:90:87:68:17:56:10:8D:B3:D1:E4:39:AC:63:95:C2:33:B5
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/06tdkIdoF1YQjbPR5DmsY5XCM7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.240.0/24
188.253.9.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:f3:6a:2e:9a:36:db:ca:9c:0e:fb:25:1f:03:fd:2d:4f:4f:
e4:d1:ba:0c:a4:d0:60:72:3a:b1:7e:d0:0b:63:13:ab:f7:2e:
95:bd:30:19:9c:a1:15:d2:2b:f7:31:88:4d:0d:df:94:79:ed:
65:71:36:01:4e:b3:eb:60:35:2b:da:c0:65:78:1a:db:36:c9:
6d:4a:00:5a:f2:2e:b3:29:64:18:41:be:c0:5c:a2:8f:ac:1f:
b3:a0:d4:73:46:59:51:f7:e7:c8:88:df:9f:95:49:1b:a0:ec:
3b:ea:0d:29:88:a0:5e:37:a9:56:4c:ea:65:02:de:0b:6a:37:
37:2f:70:fb:5f:99:3b:c3:ad:73:12:6f:04:0f:92:3a:44:33:
eb:f7:3d:ac:ec:af:b5:42:19:05:c2:8d:b4:98:c9:5c:42:a9:
5b:1c:d6:31:b3:71:c7:92:28:cb:d9:a2:3a:35:0b:24:0e:01:
51:c0:07:85:5f:b8:64:91:87:9c:44:b0:f8:a8:83:34:36:28:
20:3b:39:b4:27:c1:47:f4:a4:34:05:d0:c0:b4:2b:26:65:57:
9f:52:2a:34:ef:5a:31:03:d0:12:1c:f3:34:e1:0a:93:eb:3c:
ab:f5:09:03:c1:41:ae:aa:5b:45:a1:be:97:53:c0:1c:85:c3:
0a:1f:ac:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:28:33 2025 by rpki-client