Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/Dnpb75XdwM7LxtjkYlloNVMA6rs.roa
File: Dnpb75XdwM7LxtjkYlloNVMA6rs.roa (raw, json)
Hash identifier: EzyV/txDtZvmkY6vt32XISbysVcisfy2gnGp9jREhPs=
Subject key identifier: 0E:7A:5B:EF:95:DD:C0:CE:CB:C6:D8:E4:62:59:68:35:53:00:EA:BB
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 019421439D70E317211DDE817D193FCD407F
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/Dnpb75XdwM7LxtjkYlloNVMA6rs.roa
Signing time: Wed 01 Jan 2025 09:47:46 +0000
ROA not before: Wed 01 Jan 2025 09:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 194.88.150.0/24 maxlen: 24
194.88.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:9d:70:e3:17:21:1d:de:81:7d:19:3f:cd:40:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Jan 1 09:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e7a5bef95ddc0cecbc6d8e4625968355300eabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:7c:47:bf:dd:e7:c4:4c:2f:1c:65:02:76:
01:12:c8:fe:1e:ef:f2:86:c8:cc:58:13:e6:87:83:
38:23:79:04:a5:ec:9c:d5:81:e9:2a:d0:cc:f7:1c:
4f:21:da:2e:60:22:c0:4e:48:3f:f7:a7:83:1e:b4:
56:52:65:12:ab:5d:fa:7f:2e:1e:34:9f:5d:5c:25:
12:0b:02:e6:4b:71:67:de:66:60:11:a5:47:a6:9b:
61:a6:d3:a0:b8:a7:a5:24:ed:4e:30:cd:b3:44:ee:
09:cd:f6:8a:d5:39:d4:92:2f:76:91:f3:d0:ee:ef:
4a:83:67:4b:21:9c:15:20:a2:3c:7b:bd:61:ba:ca:
c7:34:aa:75:a3:62:6b:c2:a1:db:9a:a7:af:01:e4:
0a:1d:17:64:cb:cf:e5:85:e3:01:c5:3a:ec:cf:76:
8b:7e:b9:bd:04:4c:e4:a1:0a:4f:b9:9e:49:23:3c:
68:a4:2b:96:2c:d4:29:39:b8:1b:20:8c:17:f5:e2:
28:5a:b1:e4:a5:39:e3:0b:a5:84:81:43:85:09:cf:
0e:0a:5a:f3:cd:5b:8f:45:50:fb:c6:5e:76:4e:95:
e1:f5:f1:e0:8a:a0:9d:43:ec:25:e7:29:20:c2:7e:
2b:e7:ff:83:a6:e8:b0:70:6c:aa:90:ad:cc:19:2a:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7A:5B:EF:95:DD:C0:CE:CB:C6:D8:E4:62:59:68:35:53:00:EA:BB
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/Dnpb75XdwM7LxtjkYlloNVMA6rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.150.0/23
Signature Algorithm: sha256WithRSAEncryption
64:54:01:13:67:8c:ab:f5:51:58:ca:fc:46:5d:ca:90:2f:79:
dc:e2:15:d0:85:b1:95:86:ac:22:e8:8d:0a:13:10:69:90:01:
c2:ff:33:48:cf:ac:71:65:66:57:5c:81:8e:95:e2:36:0d:b2:
8d:dc:3f:24:7b:77:84:1c:a6:73:c4:c5:f1:b7:96:25:f8:3f:
f2:78:31:a2:53:7b:d3:89:64:a3:2a:85:47:1c:5a:39:de:e1:
cd:1c:e8:d5:44:13:d9:ae:dd:56:e2:f3:23:d3:ae:5f:d5:2b:
6e:a9:77:de:91:b0:ac:24:a0:7e:7f:f5:1e:fa:9e:15:71:b7:
09:5b:40:7f:f0:93:a5:58:d2:66:76:42:24:44:f5:d8:be:d8:
57:87:20:b9:64:4e:84:14:bd:ff:a1:61:23:20:f6:ee:fd:a7:
ae:8e:68:1e:59:9e:7d:6f:10:42:1d:11:67:9a:cb:df:9b:9c:
e8:4c:2e:b6:8f:55:0e:d9:d7:10:18:e2:cc:d9:de:49:4b:e1:
41:b8:a4:4b:84:b0:46:ee:e3:11:8d:1e:50:eb:76:da:e8:07:
ac:2b:23:21:03:b0:c7:9c:85:5f:7a:ee:b5:e0:ae:e4:70:b3:
2b:dc:45:f8:49:d2:79:f6:01:73:2f:da:08:1b:76:22:c2:a8:
1b:84:54:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:29:56 2025 by rpki-client