Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/KAJR7Az03SttMk_zWkKXtcY_Zv4.roa
File: KAJR7Az03SttMk_zWkKXtcY_Zv4.roa (raw, json)
Hash identifier: mPYizTtCYKtuALtzDruuWZjX6sFa/cj7Bo/6GSj1GAA=
Subject key identifier: 28:02:51:EC:0C:F4:DD:2B:6D:32:4F:F3:5A:42:97:B5:C6:3F:66:FE
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01967375029838B52190FBFB08E16E5353A6
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/KAJR7Az03SttMk_zWkKXtcY_Zv4.roa
Signing time: Sat 26 Apr 2025 18:56:10 +0000
ROA not before: Sat 26 Apr 2025 18:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198926
IP address blocks: 2a05:9080:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:75:02:98:38:b5:21:90:fb:fb:08:e1:6e:53:53:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Apr 26 18:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=280251ec0cf4dd2b6d324ff35a4297b5c63f66fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:92:24:59:13:74:dd:18:b6:46:f8:97:7f:
e4:b8:18:7f:17:6b:c3:27:9c:10:4d:2d:57:7b:b0:
2a:3b:f9:bc:8d:dc:df:e8:5d:73:a5:8d:da:13:40:
8f:da:3c:f9:b1:7a:af:44:c3:0b:c0:6e:d6:c9:0f:
75:db:58:3c:9f:d9:b2:57:d6:0b:b6:58:22:e6:90:
ea:88:08:4e:72:a0:4f:74:28:98:1a:61:80:db:0f:
da:40:85:6c:11:d6:06:03:d5:98:2d:a5:bb:6c:0b:
61:4e:73:34:8f:38:b5:bb:de:b5:50:f4:f9:0b:24:
b0:fc:08:c9:15:ad:9d:a8:7e:e9:31:3a:78:34:27:
3a:dc:f1:67:da:65:11:8f:6e:32:5a:eb:ef:7a:eb:
a0:0b:48:ae:77:70:29:88:85:a7:50:03:78:ab:29:
b6:7c:f1:9b:04:3e:67:87:82:c6:b9:a4:8c:91:b0:
77:da:9d:c1:51:5e:2e:b9:c6:6d:2c:6f:c1:02:01:
1f:77:02:f8:e0:16:98:6f:a5:30:e6:e0:bd:cc:a3:
23:2e:36:49:ab:b1:c4:68:e2:79:0e:a4:f9:a7:cc:
27:cf:b1:ff:bc:75:18:f8:1d:7d:d4:13:ff:68:58:
fb:ab:c3:c1:fb:83:ae:c4:be:cb:ef:54:d4:3e:e7:
d1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:02:51:EC:0C:F4:DD:2B:6D:32:4F:F3:5A:42:97:B5:C6:3F:66:FE
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/KAJR7Az03SttMk_zWkKXtcY_Zv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:3::/48
Signature Algorithm: sha256WithRSAEncryption
49:42:24:20:be:ce:1d:40:c2:80:ad:ff:e0:be:69:33:0a:d6:
fa:d4:0a:9f:2b:66:86:6c:c7:aa:53:f6:21:71:7f:c0:3b:0d:
e1:e6:b9:dc:c3:81:b4:7b:19:12:4b:10:3b:f7:54:86:45:e9:
fa:1c:e1:da:b1:88:7e:ef:03:cf:5a:be:eb:fd:14:2a:65:2a:
a0:78:10:66:ee:5e:db:f7:e8:03:57:77:f4:71:f1:62:71:7d:
ce:6f:71:80:d8:e4:d2:a2:d2:3e:89:fb:b0:3a:23:66:c2:7f:
14:13:9d:11:1f:02:33:db:59:cb:de:a2:bb:63:fd:7b:13:6a:
b9:61:72:3f:9a:57:c0:91:7b:c4:d0:95:e6:26:e6:da:bf:f0:
26:85:83:ad:a1:a7:e3:dd:b1:e7:70:71:50:e0:d8:e3:51:55:
8b:a1:ee:65:b2:fb:a9:df:c1:8b:12:10:d3:fe:88:f7:f3:61:
83:58:6b:eb:a8:71:18:19:46:7e:db:27:b6:81:61:4a:f8:aa:
06:f4:f8:d6:90:0f:8c:fc:55:2a:74:6f:4f:44:5e:0b:c4:3f:
bb:1c:90:ba:09:13:7b:88:5a:e0:7d:f0:91:cb:06:c2:77:4c:
ee:f5:fa:27:99:a0:68:a1:06:a9:3a:24:06:02:9f:af:d8:73:
04:2d:f5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:31:47 2025 by rpki-client