Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/D4PPtKoYzm6TEOaEItnlpLXHHvM.roa
File: D4PPtKoYzm6TEOaEItnlpLXHHvM.roa (raw, json)
Hash identifier: lDsciGTqjNOV2/WKbPe1B6UAqKR1IlIJEKOSyRbTxtQ=
Subject key identifier: 0F:83:CF:B4:AA:18:CE:6E:93:10:E6:84:22:D9:E5:A4:B5:C7:1E:F3
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 019425FD6AB3699A20D328E9230B6D3A6EC0
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/D4PPtKoYzm6TEOaEItnlpLXHHvM.roa
Signing time: Thu 02 Jan 2025 07:49:12 +0000
ROA not before: Thu 02 Jan 2025 07:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138077
IP address blocks: 140.150.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:6a:b3:69:9a:20:d3:28:e9:23:0b:6d:3a:6e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Jan 2 07:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f83cfb4aa18ce6e9310e68422d9e5a4b5c71ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:69:de:18:b3:8c:03:98:3c:17:ee:3d:ce:ea:
98:ee:c9:f4:30:2e:40:c2:3f:89:38:e4:d3:2a:cc:
7d:2f:de:7c:0d:09:da:53:30:98:02:2a:86:92:43:
b4:ba:3f:59:cb:65:34:18:a0:2c:15:25:94:3e:ca:
5d:f0:6e:96:d9:b9:ba:3e:1a:08:62:30:e4:d6:e9:
2a:b7:ad:e0:45:df:d7:d4:c2:eb:30:5d:9f:07:00:
9c:8b:83:0b:de:66:34:34:7e:aa:71:4f:46:12:27:
d5:12:6b:89:ed:00:8b:c3:df:be:96:19:04:06:29:
61:95:5c:22:7a:8b:71:12:94:d2:2f:7a:f9:1d:e2:
84:1c:70:51:56:c9:f4:a4:a7:4a:99:80:41:4e:81:
28:df:6a:dd:9f:cc:78:77:bc:a6:2a:fe:29:6b:e7:
52:9d:6e:f2:a3:ac:ab:61:8d:04:fa:f2:d4:26:47:
5d:b8:a3:20:6f:af:8a:3a:4b:5a:30:5c:1b:d1:af:
8f:e3:e7:8f:54:48:24:18:e9:e0:e8:b3:03:76:3b:
d4:2f:07:38:12:7f:d9:4b:e4:19:4c:69:b3:0a:30:
0a:06:2b:84:d1:c9:8c:d2:0d:99:92:db:98:84:9d:
14:a9:ee:d1:bf:b8:8b:b4:cf:aa:5a:5a:29:89:ec:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:83:CF:B4:AA:18:CE:6E:93:10:E6:84:22:D9:E5:A4:B5:C7:1E:F3
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/D4PPtKoYzm6TEOaEItnlpLXHHvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.9.0/24
Signature Algorithm: sha256WithRSAEncryption
47:2e:2a:e6:91:81:41:e5:77:1c:90:48:ef:63:09:e0:07:41:
03:05:69:cb:ed:53:03:74:ea:29:53:a2:1a:f9:7f:c9:aa:d5:
9c:6d:2e:a7:d9:37:53:aa:fb:06:16:eb:19:cc:52:61:72:5e:
1c:13:01:e3:d0:d4:e8:30:e4:ca:56:24:1f:10:25:85:2a:66:
87:16:9e:11:9f:0e:9c:4d:0c:2d:aa:48:c2:00:17:08:9e:f9:
b1:9c:49:b5:51:5f:5f:37:eb:56:d7:10:da:2e:48:4c:c3:80:
58:71:ca:a8:49:2b:16:38:44:77:c3:32:5c:b2:49:d3:32:5e:
9e:ec:e0:d8:24:d3:2a:4c:2d:87:e8:e8:c7:8c:5a:91:e2:5d:
a2:9f:4d:49:8c:a4:61:85:df:bb:b6:66:0a:52:b9:01:33:78:
e5:6c:85:c7:82:fd:78:00:1e:2b:54:8d:c5:bd:fc:12:bd:d4:
7c:c7:d2:ae:1d:95:7b:f1:24:59:53:1a:a4:97:78:0d:e3:48:
cf:5a:a5:2a:3e:2d:ad:8a:1c:b9:c1:28:9d:68:c3:45:c5:6e:
95:7f:57:15:f5:a3:4c:84:e5:2d:e0:99:14:33:6e:0c:36:b4:
de:b7:c4:4e:69:38:3b:17:de:8e:b6:d8:0e:d5:d3:67:8f:d4:
f4:74:92:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:16:46 2025 by rpki-client