Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KdmtfbZBYnCy6xTip-SCrV893jA.roa
File: KdmtfbZBYnCy6xTip-SCrV893jA.roa (raw, json)
Hash identifier: omFjiGtQJt3D2f/904p3/kJpVY0gjfR4KRg9xmAR1yk=
Subject key identifier: 29:D9:AD:7D:B6:41:62:70:B2:EB:14:E2:A7:E4:82:AD:5F:3D:DE:30
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0196A0F0B00CD74E5C71E44ADB68B7F6A9D4
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KdmtfbZBYnCy6xTip-SCrV893jA.roa
Signing time: Mon 05 May 2025 14:54:10 +0000
ROA not before: Mon 05 May 2025 14:54:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 212.90.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f0:b0:0c:d7:4e:5c:71:e4:4a:db:68:b7:f6:a9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 5 14:54:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29d9ad7db6416270b2eb14e2a7e482ad5f3dde30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:70:e6:1c:0a:32:51:be:a8:1e:63:81:4c:97:
d1:b8:8e:23:72:49:f5:dc:88:b7:17:24:0f:75:55:
a4:0b:ca:cf:f8:9c:1e:b0:34:38:1a:45:de:0a:94:
59:42:ee:59:8c:09:05:a8:a4:a1:31:17:bf:ba:67:
9c:98:7c:bb:97:69:a1:b6:52:ef:82:ee:8b:16:3a:
6c:59:a5:54:1f:f0:5c:4d:e8:50:0f:ec:d0:f4:ea:
2a:fb:ee:fc:af:43:08:dd:27:8a:68:92:3c:62:e4:
57:22:31:d2:8b:a9:a6:1d:93:f3:fd:34:59:09:f0:
c7:6d:77:42:c5:a8:0a:fd:6d:1a:38:25:8d:87:ed:
58:8e:6d:7c:66:72:f2:30:64:b1:6f:7d:9c:0e:3a:
59:49:5c:3e:97:83:a5:70:c6:4f:92:ba:76:95:de:
1e:ed:a8:5b:50:a1:bd:4f:c0:74:76:9a:c8:59:0d:
71:c5:c8:c5:a9:4f:85:50:f1:8f:85:31:5e:2e:73:
d8:0e:2e:1e:b6:fc:0d:31:50:34:dc:a7:dd:c4:8b:
06:3e:c6:71:45:fd:1b:42:7f:11:71:88:6b:1f:9e:
96:3f:d2:6e:7c:14:fa:5e:bc:77:66:e7:97:b5:0b:
be:2a:29:1f:d4:a6:83:b9:08:f2:28:bd:85:3f:f7:
15:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D9:AD:7D:B6:41:62:70:B2:EB:14:E2:A7:E4:82:AD:5F:3D:DE:30
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KdmtfbZBYnCy6xTip-SCrV893jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:82:14:98:99:db:fa:58:4f:88:8c:8f:5c:c5:ff:eb:05:7a:
96:5d:4d:61:66:a1:5e:4a:01:5d:1e:91:8d:17:ec:4f:de:a1:
88:da:c5:11:af:55:55:a7:30:ee:42:4d:a8:be:36:ee:70:0a:
28:af:0b:97:a1:b8:cd:32:1d:db:cc:9d:19:19:cb:ca:45:35:
d7:d8:b4:ef:57:65:c4:99:f1:a6:5b:44:d8:4b:b8:d6:05:08:
bb:9d:af:1e:6e:22:7f:fa:f8:b6:d5:d6:33:ef:d0:00:8b:cb:
6e:7a:26:52:4f:77:5b:73:5c:78:61:37:34:3e:d6:e8:81:57:
de:42:07:99:4e:76:1c:50:ef:93:4d:ec:a4:05:a4:0b:6e:fc:
cf:ec:b6:88:9f:be:be:8c:f3:00:67:4f:fa:a0:bc:43:ea:ae:
92:50:20:e4:da:28:f3:b7:31:40:6d:2e:07:eb:51:c1:ff:83:
75:08:c0:a8:d1:5b:38:b2:28:c3:0d:e4:5b:e0:fd:ae:a3:4a:
9e:3e:d1:8b:fe:32:d7:9e:c4:d4:2a:08:df:cb:5d:a4:5d:c6:
f7:3f:65:b5:ec:41:c1:82:ba:a8:94:cf:d1:2c:5f:f2:2f:ff:
1b:d4:0a:28:cc:11:0a:ff:a6:a7:fc:8f:ef:74:31:e1:28:28:
19:81:6e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:37:52 2025 by rpki-client