Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/k2s2EXXue87AwVhiVnYseQNYDag.roa
File: k2s2EXXue87AwVhiVnYseQNYDag.roa (raw, json)
Hash identifier: 8D3v0GqaDjL3+shEUIFjC6Ws4nrmcZEaoCOyVnppJZE=
Subject key identifier: 93:6B:36:11:75:EE:7B:CE:C0:C1:58:62:56:76:2C:79:03:58:0D:A8
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01968BD7157421128016FCCC54C81CE869FD
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/k2s2EXXue87AwVhiVnYseQNYDag.roa
Signing time: Thu 01 May 2025 12:34:10 +0000
ROA not before: Thu 01 May 2025 12:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134176
IP address blocks: 45.138.109.0/24 maxlen: 32
185.190.81.0/24 maxlen: 24
194.49.108.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:d7:15:74:21:12:80:16:fc:cc:54:c8:1c:e8:69:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: May 1 12:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=936b361175ee7bcec0c1586256762c7903580da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:b5:c9:c4:e7:87:d2:0e:4e:84:4d:7d:5e:
eb:40:59:ec:13:84:3e:65:d6:2c:54:c7:49:06:85:
1d:7b:14:59:3c:5c:9e:c7:ca:a4:16:d2:df:f7:1c:
e4:a8:bb:76:12:ba:ff:01:53:e4:b5:72:bb:dd:f5:
cc:43:9f:3d:8c:09:bf:c6:df:e3:f0:0e:62:24:c5:
2c:e1:f2:ad:65:2d:16:f3:d4:73:53:3e:35:ef:3b:
74:70:55:b7:8d:50:3a:f3:ed:c1:55:12:d2:1a:de:
3c:f5:e0:d8:1b:36:a4:2e:c4:f7:5d:18:9a:a8:f8:
87:c1:51:e9:12:60:d3:79:88:a1:96:d4:64:84:3d:
73:08:74:bb:e1:24:de:bd:56:26:74:ce:9e:d5:f9:
59:3f:0f:2c:c7:52:39:f6:43:f1:e3:b5:3b:71:69:
e5:b1:86:df:31:a0:bb:33:34:78:dc:da:35:f7:d0:
0a:75:1e:b4:b4:6d:6f:d6:02:61:64:24:d1:80:69:
1a:51:9c:67:0c:c9:25:57:3d:29:18:53:04:d1:b0:
fe:26:d0:02:73:fd:29:e0:f3:e6:4c:06:47:70:ec:
51:14:03:19:f7:aa:cd:ed:cc:f9:fb:0f:da:09:e4:
75:1b:c9:6a:c6:62:41:d7:f8:46:8e:e5:47:46:96:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6B:36:11:75:EE:7B:CE:C0:C1:58:62:56:76:2C:79:03:58:0D:A8
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/k2s2EXXue87AwVhiVnYseQNYDag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.109.0/24
185.190.81.0/24
194.49.108.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b9:e9:7e:cc:b9:0a:aa:35:10:dd:91:75:e3:db:f0:27:86:
92:50:c4:89:7c:68:6d:93:84:6d:14:67:4d:56:43:ce:5d:bb:
c6:e0:2d:85:ac:1a:0f:2b:e0:a8:33:51:60:d7:97:a3:d9:99:
39:11:f6:2c:2d:df:de:e1:44:b9:05:d6:6a:69:b9:0c:d9:b7:
eb:df:f3:93:ff:1e:2b:f5:f3:9b:39:e1:bf:ec:ad:2e:2a:d7:
8c:a3:cc:d0:18:50:27:8a:2f:f9:d6:03:f0:d0:75:ae:79:c5:
ca:37:1a:d3:de:f0:15:20:de:c2:88:96:54:6e:f1:e6:99:ab:
53:f8:3c:87:47:01:5a:28:fd:cd:e0:7c:d8:e6:f9:78:ce:41:
3c:22:36:79:8c:ab:03:dc:c9:8e:2f:e4:18:bc:da:20:ce:62:
a0:cf:8d:be:ac:94:1b:12:7c:16:ec:3c:a5:04:6c:c3:b4:93:
70:22:86:9c:52:d3:3f:32:ce:31:f7:de:0c:c2:ab:78:c2:d0:
80:21:f6:54:33:20:00:05:6d:0f:3c:eb:ad:11:62:fd:4f:69:
3c:57:39:70:1d:e7:65:48:97:f8:50:8f:9a:98:3b:1d:18:7b:
a7:cc:d8:e0:f2:d1:e1:43:30:17:e1:1d:85:8d:f0:c2:e8:59:
0f:3a:22:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:09:43 2025 by rpki-client