Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/KLa7TX2IPYzEpk7blzBsczujOtY.roa
File: KLa7TX2IPYzEpk7blzBsczujOtY.roa (raw, json)
Hash identifier: gp3Dmji9yLEEk/w3H4Tm0wD6pmbfrtxKW2ni/s4SoNg=
Subject key identifier: 28:B6:BB:4D:7D:88:3D:8C:C4:A6:4E:DB:97:30:6C:73:3B:A3:3A:D6
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0196359ACDD32679D2CB6CB4CC257141A8C9
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/KLa7TX2IPYzEpk7blzBsczujOtY.roa
Signing time: Mon 14 Apr 2025 18:40:59 +0000
ROA not before: Mon 14 Apr 2025 18:40:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199052
IP address blocks: 2a13:bec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:9a:cd:d3:26:79:d2:cb:6c:b4:cc:25:71:41:a8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Apr 14 18:40:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28b6bb4d7d883d8cc4a64edb97306c733ba33ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:ee:3d:d4:2b:28:25:7c:9c:92:9f:05:35:
88:a0:54:32:57:6d:57:b5:ae:63:3a:9c:49:67:04:
c3:a6:da:d1:e0:03:4d:05:2b:fb:05:32:06:a0:ec:
0c:cc:6d:cc:d2:24:ba:02:92:b5:00:15:d1:12:4b:
c7:76:29:e4:9f:d5:d1:74:8f:e6:7c:9e:45:7d:f1:
12:b5:7d:f7:de:fc:1e:90:1a:b3:72:d2:0f:4f:ec:
4b:a2:a4:c9:ce:0c:6f:34:7c:a7:b5:24:c3:ae:71:
b6:26:13:ac:ef:bd:0c:06:20:ea:e3:40:15:10:73:
3f:7b:3f:8b:d9:75:d6:fa:3c:11:cc:96:6b:e6:da:
61:43:e1:d5:8f:6c:47:53:5c:0d:b8:51:bb:9e:36:
13:19:b3:1e:b3:1f:2e:44:ed:d5:d6:e1:3f:57:a9:
f1:95:48:e4:29:3b:44:70:fc:84:31:a9:8d:aa:bb:
25:f3:3a:88:2e:29:da:57:ff:28:f1:25:18:88:fe:
ca:f6:01:8f:fd:22:7f:b0:92:59:d1:c2:7e:f9:da:
41:01:7b:f1:96:6f:db:dd:c7:bc:9b:2c:49:89:0a:
03:b2:ea:a9:33:7a:3e:d9:7a:98:bb:5c:6d:55:d4:
7d:6f:a3:c4:37:6d:35:90:65:37:09:04:27:a6:40:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B6:BB:4D:7D:88:3D:8C:C4:A6:4E:DB:97:30:6C:73:3B:A3:3A:D6
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/KLa7TX2IPYzEpk7blzBsczujOtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bec0::/29
Signature Algorithm: sha256WithRSAEncryption
38:eb:cb:21:b9:c4:24:eb:1b:75:d0:47:19:14:e2:59:1b:cb:
25:f1:34:a0:95:e4:84:2e:1b:d6:6f:45:1c:d0:9d:03:29:25:
03:e7:0c:e9:a9:ea:c0:12:a4:76:a0:29:45:98:37:8b:c8:45:
6a:c2:6b:f3:35:72:48:f1:0e:b2:f2:7f:92:27:d0:71:ba:3e:
98:07:88:74:99:0e:82:66:ae:6f:1c:c1:18:6a:31:2f:e6:7a:
9d:f7:a8:42:ba:9c:22:e6:73:2e:1d:b8:ba:c9:e1:aa:b3:d5:
18:89:d4:38:83:ca:36:06:3e:48:22:2c:21:50:8d:59:55:31:
9d:66:58:96:5d:65:b8:94:a5:ed:be:88:79:70:e3:94:59:0a:
c0:9c:9e:22:b4:32:72:a8:bb:4a:a2:05:e9:1c:f4:a0:84:6f:
f6:6b:a0:6d:93:81:07:c9:85:f1:bc:a7:ca:0f:cd:fb:a2:58:
1f:45:22:20:a3:54:a3:55:de:66:47:ab:8c:8a:b9:44:12:6c:
f1:21:cb:57:e5:f1:62:b7:e8:44:2c:d8:f0:ad:04:04:64:fe:
1d:ef:e1:57:b7:87:11:16:51:50:25:2d:01:39:27:81:e8:3a:
62:17:c4:3c:4f:5d:56:3c:42:fe:15:38:4f:b2:cd:40:0e:78:
76:2e:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:31:22 2025 by rpki-client