Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/T1w2yjTpmwJ1zAyvHyThPVcOS4U.roa
File: T1w2yjTpmwJ1zAyvHyThPVcOS4U.roa (raw, json)
Hash identifier: 2VUmqYcTbyu3BGa2UNYaNxKK9/e/jdNeWFxD6j6APMw=
Subject key identifier: 4F:5C:36:CA:34:E9:9B:02:75:CC:0C:AF:1F:24:E1:3D:57:0E:4B:85
Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial: 0195140B5898C6088722B5A2005ED1BD57B8
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/T1w2yjTpmwJ1zAyvHyThPVcOS4U.roa
Signing time: Mon 17 Feb 2025 13:14:02 +0000
ROA not before: Mon 17 Feb 2025 13:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 159.253.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:0b:58:98:c6:08:87:22:b5:a2:00:5e:d1:bd:57:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d894365b28a082834a751a97771b791124524dec
Validity
Not Before: Feb 17 13:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f5c36ca34e99b0275cc0caf1f24e13d570e4b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:fd:b5:96:8a:0c:c8:e1:97:cf:e2:51:9a:
32:33:9c:8b:c2:cd:4b:17:7c:de:fa:f3:68:78:9d:
74:aa:89:d9:9e:4a:a3:cb:e0:eb:95:02:13:62:ab:
21:56:25:d0:f4:56:82:b6:61:c7:de:4e:c1:07:cc:
33:9c:58:8c:c4:88:24:2b:8f:37:7a:02:e9:a9:38:
9a:2f:d8:43:73:26:3f:78:fc:22:04:e5:16:ba:93:
b4:5e:73:cc:5d:31:37:a5:e8:82:eb:6c:1f:e5:89:
97:8d:0b:ef:53:e0:49:85:8f:ed:93:e9:a7:67:9b:
c2:27:14:94:77:3b:b7:df:ea:df:85:6c:43:bf:02:
8f:8f:6c:cc:e4:d1:1a:d6:62:6c:a0:dd:e5:2d:2c:
54:61:86:b9:9a:57:4d:cb:e1:9c:03:19:63:b9:ee:
76:c7:f3:09:5e:b7:bc:ec:dc:61:3f:6a:51:b8:23:
02:b3:e0:a2:22:ac:a2:dd:b6:af:94:cf:14:72:ba:
6a:7f:cb:13:10:f7:31:9f:74:49:42:8d:eb:38:80:
cb:d8:ae:a8:30:99:c9:b3:14:f9:55:36:5e:54:4c:
3b:94:52:6c:d6:41:d0:7f:ae:9a:3e:45:6c:9b:c8:
97:32:8a:0f:25:5a:33:cb:2e:d8:2e:49:6b:f9:40:
ad:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5C:36:CA:34:E9:9B:02:75:CC:0C:AF:1F:24:E1:3D:57:0E:4B:85
X509v3 Authority Key Identifier:
keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/T1w2yjTpmwJ1zAyvHyThPVcOS4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.164.0/24
Signature Algorithm: sha256WithRSAEncryption
84:19:c9:a4:d4:69:bc:e8:b5:58:c2:bb:32:4e:f6:9d:66:5d:
0a:e0:90:52:9d:90:47:ac:a8:79:e4:fc:e1:c3:76:6a:d9:10:
57:38:78:9a:a2:7c:cf:d4:20:df:95:ad:da:78:1f:93:8c:7e:
91:cc:d8:3b:be:50:50:a9:01:f4:2f:23:94:3b:9b:9f:ea:2b:
ab:f7:7a:b6:ce:a9:37:81:f8:57:20:af:cc:79:fd:a1:cf:44:
c7:29:98:e5:56:e4:36:b8:9f:0b:c4:7a:2b:45:16:c1:1c:2e:
8a:82:23:39:5d:a7:d1:ae:d6:8e:3c:d3:f8:e2:43:5a:f4:4b:
63:50:6f:c4:05:e8:1a:68:d4:9d:05:c2:7a:83:54:aa:95:09:
07:35:96:bc:49:1b:81:d6:b8:38:58:ef:d2:e1:c8:7e:43:5c:
8c:3f:c1:09:e2:8f:7e:5e:01:28:d1:a7:10:00:07:59:ef:13:
3e:78:f4:7c:a2:b8:64:c0:8e:6f:9e:d6:66:47:29:4e:b3:e3:
09:6b:7b:78:d5:a3:fd:65:dc:12:70:3a:a0:34:d2:9f:d8:54:
71:2d:fb:62:57:bb:c6:7b:d9:bb:f6:16:4b:c4:44:53:2e:c3:
38:4c:aa:6c:fb:0a:3d:9f:e6:8b:b6:96:1f:61:ad:41:f6:5e:
76:6f:88:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:11 2025 by rpki-client