Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kvsAEwWhc9aecD8ZmJXereph2GE.roa
File: kvsAEwWhc9aecD8ZmJXereph2GE.roa (raw, json)
Hash identifier: AYT0RdqiAGBnu/mVN0imHU3x0ohd/dxzGgPuquhTBV0=
Subject key identifier: 92:FB:00:13:05:A1:73:D6:9E:70:3F:19:98:95:DE:AD:EA:61:D8:61
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0196237FFBEB0F6A9DF9C900D042E6E645F2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kvsAEwWhc9aecD8ZmJXereph2GE.roa
Signing time: Fri 11 Apr 2025 06:18:32 +0000
ROA not before: Fri 11 Apr 2025 06:18:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9087
IP address blocks: 88.216.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:7f:fb:eb:0f:6a:9d:f9:c9:00:d0:42:e6:e6:45:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 11 06:18:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92fb001305a173d69e703f199895deadea61d861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9e:f6:38:4a:ed:b0:5c:bd:02:92:7a:1d:6e:
a8:ce:a5:5b:57:f6:01:52:b4:fc:b1:00:12:28:b4:
4a:5d:bd:69:62:49:1c:70:b5:c8:11:4a:8d:5f:38:
00:80:89:be:be:22:e5:ee:0f:38:0b:18:4e:c4:bf:
f9:61:b4:f2:8c:08:0d:e6:ad:04:9b:0f:13:39:94:
5e:87:90:41:34:54:08:d1:31:c9:82:b9:2d:22:73:
6e:c9:b4:68:84:40:77:d3:d8:de:12:fc:19:f9:e4:
ff:ba:83:c0:a1:97:e2:3a:85:e5:c9:a7:92:d5:0c:
ce:58:3d:91:de:bc:61:07:a1:51:21:c2:9a:6e:ed:
50:c3:87:fb:02:2b:04:88:38:a1:e9:09:f2:3d:36:
23:e8:9c:9e:84:1a:3c:53:1a:dc:d8:cd:d0:62:66:
8c:11:3f:98:7c:d2:6c:e7:46:16:4a:6f:8c:33:bb:
d2:44:74:b3:98:8a:eb:d9:b4:f0:d0:41:ac:89:77:
03:70:14:3d:93:87:20:5a:3f:13:c1:fa:25:39:d4:
fb:3f:c3:f4:04:0a:d9:e3:36:bd:98:6c:5c:ee:7f:
fa:8e:0a:a4:e5:40:bc:14:32:9a:89:64:93:35:07:
7c:b8:9a:4d:83:09:cf:46:a6:38:10:66:b4:74:b7:
de:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FB:00:13:05:A1:73:D6:9E:70:3F:19:98:95:DE:AD:EA:61:D8:61
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kvsAEwWhc9aecD8ZmJXereph2GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.182.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:a5:e1:0c:ac:34:25:f6:cd:cc:f5:b4:a5:b1:2a:01:2f:ca:
82:b3:79:8e:8a:0f:13:3e:30:b6:d2:0b:0e:af:0c:1c:ad:d2:
4d:32:76:c2:1b:f1:53:b6:74:b0:55:b4:10:f0:c0:7e:13:4c:
c3:fd:08:a3:0d:9b:27:1e:fa:a2:96:eb:f2:da:6e:b4:da:72:
83:f1:8a:05:42:fb:b7:9e:1c:db:d2:cf:7b:cc:44:21:af:78:
f7:1b:eb:0f:fa:d8:96:64:74:33:58:52:a8:75:dd:45:42:99:
4b:4a:3f:05:1f:19:e6:a4:c8:62:f1:47:b6:3e:cc:e2:e0:f9:
15:bd:5c:32:7c:5d:93:b2:71:7d:48:cc:07:81:80:b4:23:7f:
87:ea:6a:91:0c:30:e9:95:43:3c:f6:bf:eb:00:82:8c:83:dd:
f5:11:5a:0b:fd:fc:ea:cf:ff:3a:92:a4:0f:f2:6d:c3:7d:33:
2d:f5:90:e5:e0:b8:66:be:56:e4:12:57:bf:56:cb:75:72:bb:
35:94:3c:e5:4f:3b:87:56:d9:ad:fa:8c:7a:e3:79:ce:16:7b:
5f:2d:1e:17:43:d1:aa:80:e4:fa:ec:3c:8b:eb:7f:d9:4a:23:
6a:30:63:30:c6:9d:08:62:b1:35:38:91:68:a6:56:5b:1e:b3:
fe:7c:89:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:27:19 2025 by rpki-client