Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/K3gtWKami_XUUUtVwrQwwcMOVAg.roa
File: K3gtWKami_XUUUtVwrQwwcMOVAg.roa (raw, json)
Hash identifier: 01aEVs3iMb11GEQQScA48mgu1ByLdBE37Eq3V2mjiGQ=
Subject key identifier: 2B:78:2D:58:A6:A6:8B:F5:D4:51:4B:55:C2:B4:30:C1:C3:0E:54:08
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 019634681A23C17C9C29A252C1510F795C96
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/K3gtWKami_XUUUtVwrQwwcMOVAg.roa
Signing time: Mon 14 Apr 2025 13:05:59 +0000
ROA not before: Mon 14 Apr 2025 13:05:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 212.87.200.0/24 maxlen: 24
212.87.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:68:1a:23:c1:7c:9c:29:a2:52:c1:51:0f:79:5c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Apr 14 13:05:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b782d58a6a68bf5d4514b55c2b430c1c30e5408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:22:49:1c:f2:98:31:7e:6f:3e:11:ba:cd:
06:dd:6c:f8:29:7f:47:c3:dd:50:6e:51:b1:91:cd:
0c:49:0c:18:97:2e:ac:7d:0d:c4:46:5f:12:ac:a6:
03:d7:c4:44:68:89:14:e9:d2:30:4f:81:1b:e9:a6:
94:4b:71:d3:8d:fa:c8:b8:2c:eb:3e:1c:d6:5f:2e:
0c:3a:01:c9:bd:7a:11:2e:76:f3:70:0b:5c:a9:5f:
a6:84:22:16:c7:65:01:ee:55:f7:95:5c:83:ed:56:
eb:c1:ab:24:14:c5:fd:12:a3:5c:b8:a1:02:b3:77:
42:50:46:2b:01:ba:a2:49:b5:c7:12:0a:c9:dd:20:
81:4e:d7:80:9c:2b:24:9d:b4:01:84:3b:65:58:80:
48:7f:1b:d6:12:f5:ee:10:d6:18:2e:70:f7:55:f0:
4a:9c:28:49:20:7f:ef:b4:e1:e8:af:16:33:91:f1:
cc:f2:87:74:a1:b3:ff:b7:61:51:54:07:cd:9a:32:
d3:b1:d7:65:24:f3:41:5e:1b:a7:72:bc:38:d8:f5:
a3:01:6e:1d:f9:a6:a9:bf:8f:52:88:a7:58:cb:5b:
cc:09:92:60:c7:9d:c5:ba:ba:36:07:e8:b8:ba:69:
e4:e1:7d:be:9f:14:e8:2d:e6:61:e5:1b:a6:65:59:
fc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:78:2D:58:A6:A6:8B:F5:D4:51:4B:55:C2:B4:30:C1:C3:0E:54:08
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/K3gtWKami_XUUUtVwrQwwcMOVAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.200.0/24
212.87.202.0/23
Signature Algorithm: sha256WithRSAEncryption
68:ca:7c:1d:00:e4:59:27:ec:2b:c5:74:57:df:a3:54:1b:27:
d6:c4:16:03:78:97:25:3e:77:94:e7:e9:d2:eb:83:82:25:ac:
de:b8:32:e9:9a:86:8f:ec:40:7a:6a:d8:45:c9:9c:43:14:d7:
65:bb:7d:fe:bc:34:74:ec:11:21:3f:50:c1:db:58:e0:23:6c:
79:59:b3:0b:5e:34:d1:9e:65:98:03:c6:01:46:e0:06:72:f0:
0f:66:ad:96:38:6f:cf:c4:be:12:2d:9b:37:dc:76:99:6a:63:
c7:e5:c2:cf:ea:f1:9b:8b:39:11:6d:82:e6:d4:97:e8:d6:28:
93:83:0c:3f:f1:48:e5:e2:c2:97:c8:36:08:f4:f6:d1:9e:3a:
cc:be:88:82:0e:56:52:5f:c8:1b:83:97:41:06:f0:61:a7:a4:
0a:85:95:e9:d1:5a:7a:9f:eb:74:29:64:0c:72:97:c2:31:bd:
8e:0a:e2:d8:f4:51:73:3a:af:b1:5c:f8:d6:9b:b3:94:fe:fa:
d2:9b:4d:38:f7:96:25:5b:87:e5:62:38:3e:39:e0:13:32:8f:
54:9e:d0:0d:c2:bc:64:bc:55:8a:36:83:f3:ec:5b:8f:6d:62:
e6:3e:53:33:2f:e0:6b:6b:29:ef:48:10:67:a2:53:62:cb:f8:
99:12:8a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:06:27 2025 by rpki-client