Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/kJBSs2f5pbNQK-DKD3joYbiYwjQ.roa
File: kJBSs2f5pbNQK-DKD3joYbiYwjQ.roa (raw, json)
Hash identifier: TG29lyv9BLESLBcriUYqukiRiQu+8dXmu4FYgZnLRaA=
Subject key identifier: 90:90:52:B3:67:F9:A5:B3:50:2B:E0:CA:0F:78:E8:61:B8:98:C2:34
Certificate issuer: /CN=1954e32570bbfb9af11c2381e81c797c2f40087c
Certificate serial: 0194206815A40B715B58EAF506E6D2271E4B
Authority key identifier: 19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/kJBSs2f5pbNQK-DKD3joYbiYwjQ.roa
Signing time: Wed 01 Jan 2025 05:47:59 +0000
ROA not before: Wed 01 Jan 2025 05:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 144.2.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:15:a4:0b:71:5b:58:ea:f5:06:e6:d2:27:1e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1954e32570bbfb9af11c2381e81c797c2f40087c
Validity
Not Before: Jan 1 05:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=909052b367f9a5b3502be0ca0f78e861b898c234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:40:15:6b:2d:ee:c3:25:18:a7:e5:a6:08:
92:8b:74:30:2d:40:1e:5b:a4:f2:38:b4:ba:11:62:
87:b7:cd:34:78:bc:f8:4e:f1:39:ba:21:66:90:66:
e0:19:07:99:4c:8b:d0:00:6a:5d:ce:a0:81:30:cb:
6a:99:b8:de:9d:9b:05:f8:7f:a8:68:63:5d:43:b5:
a5:9f:ff:28:97:88:59:f8:53:54:7f:e0:e7:ea:3e:
61:61:f6:30:b4:d7:2a:09:20:5a:fc:43:fe:60:08:
d0:e8:08:35:53:7a:5f:0e:4c:33:86:ce:8a:bd:46:
c7:ed:d4:ef:d5:cf:07:66:29:fd:dd:d7:48:86:24:
25:7b:29:32:26:bc:cc:df:c8:b7:bf:f1:4d:30:6c:
8a:66:d4:ee:ff:67:d5:a0:48:4a:4b:02:2d:f8:d8:
04:55:52:7c:61:88:44:6b:3f:7c:e3:5d:6b:59:d6:
27:5d:83:5a:b9:ec:95:ed:08:ef:a0:c5:43:ce:d0:
e2:b3:5f:dc:85:f9:bd:6e:69:aa:aa:43:fe:50:bc:
48:c7:0f:8f:ca:08:40:d0:ff:07:83:20:26:ec:3a:
83:a9:fe:58:83:e5:28:68:12:a4:d8:f2:1a:06:31:
b3:e1:4e:3c:62:9a:b9:b9:6e:1f:10:48:3e:a3:4f:
72:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:90:52:B3:67:F9:A5:B3:50:2B:E0:CA:0F:78:E8:61:B8:98:C2:34
X509v3 Authority Key Identifier:
keyid:19:54:E3:25:70:BB:FB:9A:F1:1C:23:81:E8:1C:79:7C:2F:40:08:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/kJBSs2f5pbNQK-DKD3joYbiYwjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/5c7c7d-4d2e-483c-89cd-26816ca92ca0/1/GVTjJXC7-5rxHCOB6Bx5fC9ACHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.170.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:3f:4a:1b:f0:ac:11:0b:98:3a:97:d9:2d:73:da:f8:82:d2:
b6:2a:2d:8a:03:8c:ca:7a:1f:c3:46:87:3f:c9:0a:49:c7:70:
34:f6:55:11:9a:a0:51:27:90:1c:6d:ac:08:0d:96:51:06:db:
55:42:4c:80:da:dd:cd:f7:d1:22:a7:4b:3b:69:4e:50:bf:89:
19:25:27:c5:dc:b5:99:69:77:7b:1b:b6:48:c0:f8:cb:cd:e4:
25:96:77:13:95:4d:8d:b0:04:bd:77:76:04:74:a7:f3:13:4f:
4a:92:0f:f5:98:91:3d:43:0c:ca:3a:30:1f:37:6d:06:06:25:
88:06:40:84:63:9d:d6:c0:38:12:66:b5:58:87:0b:9a:bb:df:
a9:4d:42:23:02:8a:af:33:fe:14:80:dd:5b:0f:68:1b:05:7b:
5b:87:3d:81:f5:34:76:c3:fd:65:d9:b1:90:e0:47:28:45:e6:
0c:70:87:c7:bb:b3:29:3d:c9:e5:25:91:e4:91:f9:45:60:37:
46:f7:ab:98:49:84:eb:5d:bb:95:5e:15:27:e5:3d:9e:b9:f0:
9f:2f:2f:4b:7b:b7:2a:29:f6:52:42:ab:70:e9:d1:4c:ee:26:
0a:89:68:d7:8f:d9:61:0a:29:e4:1a:b0:2a:af:71:42:a7:d8:
fe:0a:30:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:55:32 2025 by rpki-client