Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/RFKSTXwXHx_I0X-jgSyyttokIKM.roa
File: RFKSTXwXHx_I0X-jgSyyttokIKM.roa (raw, json)
Hash identifier: ZJvmGtUNiJYk9+PI2VAh73nS3jxIyV30ghb/19NLU48=
Subject key identifier: 44:52:92:4D:7C:17:1F:1F:C8:D1:7F:A3:81:2C:B2:B6:DA:24:20:A3
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 0195D91D4932AFDFDB674D8F92DECE481D61
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/RFKSTXwXHx_I0X-jgSyyttokIKM.roa
Signing time: Thu 27 Mar 2025 19:38:49 +0000
ROA not before: Thu 27 Mar 2025 19:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47516
IP address blocks: 5.10.220.0/24 maxlen: 24
185.23.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d9:1d:49:32:af:df:db:67:4d:8f:92:de:ce:48:1d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Mar 27 19:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4452924d7c171f1fc8d17fa3812cb2b6da2420a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:29:8a:78:68:2a:15:f6:43:10:70:a3:bf:
92:19:94:52:a8:d8:d1:4e:eb:e7:15:8c:24:4b:11:
b9:2c:c2:ec:2e:ae:d8:9a:37:47:6e:31:79:1d:7e:
54:de:6e:40:45:49:07:91:aa:9c:b7:e1:8a:c2:8f:
7b:c4:f1:60:55:0d:e7:fb:db:5a:a8:6b:18:c1:53:
57:ea:51:8a:9e:83:d6:e2:9f:fa:c6:96:08:bf:fe:
a0:36:a7:1a:9f:39:49:cf:cb:b2:a1:da:5b:d2:53:
df:a2:95:d2:40:29:12:b9:c7:ac:fa:44:68:70:dc:
e3:46:52:d6:f4:45:b2:d7:52:8a:22:ec:47:6a:6e:
65:1c:23:02:9f:9c:be:b6:ff:95:8f:74:3a:6b:46:
f6:5a:83:27:6a:b7:84:85:bb:e3:bb:76:d9:d9:bc:
1b:63:7e:f0:74:83:60:80:8a:78:7e:9a:bd:d2:19:
fc:0f:ef:3f:15:4c:8a:4b:c4:27:84:4a:ce:46:4c:
ec:1c:37:87:73:db:fd:dd:76:a3:f8:da:8b:a1:ab:
2d:85:b3:c7:0e:f6:4e:af:96:15:f2:54:42:7f:dc:
d4:8c:6e:df:5c:d5:65:b6:31:aa:60:cb:b4:24:01:
37:39:99:40:bf:16:61:97:eb:76:5b:9e:94:37:c0:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:52:92:4D:7C:17:1F:1F:C8:D1:7F:A3:81:2C:B2:B6:DA:24:20:A3
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/RFKSTXwXHx_I0X-jgSyyttokIKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.220.0/24
185.23.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:2f:0a:ff:a4:5f:0c:5c:d3:f6:e2:c6:04:ab:32:45:b3:56:
b2:c9:6f:2c:25:5f:68:9e:94:f0:c0:3f:8e:d2:27:2b:80:80:
06:99:54:d9:ed:dd:1d:46:bc:f9:66:08:0a:85:a7:e7:77:4b:
7c:da:03:d1:a1:0c:bb:70:96:6c:df:a0:50:67:d0:c4:09:87:
a5:ff:bc:ea:f1:f5:0f:1e:58:05:4e:c1:c3:9e:53:c3:37:f3:
fa:1b:d4:0b:4c:95:b0:62:c0:01:70:cc:74:a9:83:17:da:ed:
7a:e5:dd:ba:5f:26:fc:3b:54:91:39:0c:46:68:63:86:d0:a1:
a1:89:ac:c6:53:a9:c7:68:9d:47:fa:2b:dc:cd:80:c8:b9:8f:
65:19:7c:a3:99:39:65:c4:44:4a:93:81:61:42:a5:72:3f:0c:
49:63:e9:2c:52:89:1f:27:4b:f6:c2:f3:72:d7:b4:7d:e8:cd:
4e:ce:a0:1e:ca:bb:ad:11:6a:1f:0c:26:47:96:0c:a9:2d:47:
02:1c:d1:46:ca:89:4b:89:01:01:17:34:92:bd:0e:45:bd:1f:
7a:4c:60:2c:79:a7:2d:ad:7b:91:2c:72:3d:01:49:47:bf:cb:
90:13:d1:0a:2f:bb:e4:40:3a:f2:b2:19:ae:1a:d5:33:bf:13:
19:5b:1d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:35:29 2025 by rpki-client