Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/V5gWviiZ2-U-bdUMZ6IiB-DFzpc.roa
File: V5gWviiZ2-U-bdUMZ6IiB-DFzpc.roa (raw, json)
Hash identifier: QCQZA5MTKnem3+fJ+k+YcmhfhWTERBGnKLkTrN+uSlA=
Subject key identifier: 57:98:16:BE:28:99:DB:E5:3E:6D:D5:0C:67:A2:22:07:E0:C5:CE:97
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 0194282561FEAD71A4406CCBD7FD27D4AC13
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/V5gWviiZ2-U-bdUMZ6IiB-DFzpc.roa
Signing time: Thu 02 Jan 2025 17:52:06 +0000
ROA not before: Thu 02 Jan 2025 17:52:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210107
IP address blocks: 193.36.60.0/24 maxlen: 24
193.36.60.60/32 maxlen: 32
193.36.60.80/32 maxlen: 32
193.36.60.97/32 maxlen: 32
193.36.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:61:fe:ad:71:a4:40:6c:cb:d7:fd:27:d4:ac:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jan 2 17:52:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=579816be2899dbe53e6dd50c67a22207e0c5ce97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:fc:d3:aa:d5:01:12:bf:05:3d:15:d2:c7:
6a:6b:a8:d0:e4:01:27:48:22:38:88:4a:15:fb:66:
1f:bc:52:a0:2b:ef:4a:57:e5:d4:ed:0d:6a:da:28:
5f:54:58:19:7b:75:cb:40:01:cd:e2:8a:89:24:ce:
d2:3c:fb:96:4a:a1:b9:d1:9f:35:67:f5:7f:09:7d:
0b:a1:79:d5:16:10:cb:72:da:83:a0:06:cf:cd:ac:
d8:5e:e6:16:fd:87:b3:75:b8:66:52:99:c5:92:47:
a2:a6:db:85:3e:fa:01:6d:49:05:71:7d:12:d8:4b:
9c:8a:86:9a:c8:c0:4e:0c:9f:55:d4:03:00:bb:d7:
aa:2c:d3:a1:8e:22:81:55:39:e3:48:48:59:2b:78:
83:17:aa:8e:cd:16:7d:c1:37:2a:e1:96:2f:20:87:
0d:be:71:fc:aa:c7:3b:d3:28:d4:b6:6b:06:67:dc:
25:06:96:a3:ea:9a:cf:a4:ee:a4:c8:08:ee:9c:b6:
6b:04:ee:86:94:ca:6f:38:64:3d:5d:07:4f:5e:4b:
13:92:5f:a1:2d:e4:53:a5:0f:55:2b:8f:c9:06:11:
00:0c:56:55:93:54:c2:0d:9c:bd:60:eb:38:f6:e7:
0e:e8:18:a4:bb:70:36:a8:11:c2:fa:ab:92:0b:96:
f8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:98:16:BE:28:99:DB:E5:3E:6D:D5:0C:67:A2:22:07:E0:C5:CE:97
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/V5gWviiZ2-U-bdUMZ6IiB-DFzpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.60.0/23
Signature Algorithm: sha256WithRSAEncryption
72:3f:5d:45:6f:14:84:3f:33:1f:a0:21:6e:ba:2a:75:37:fa:
8f:00:7c:ab:ce:d8:a8:86:52:73:d5:79:c0:ed:49:00:24:81:
fa:fa:15:a5:f0:cc:e3:92:1b:59:17:91:cb:38:ba:09:be:ae:
89:78:bd:af:88:b8:b6:ad:c0:e4:19:48:09:76:d5:34:b8:cb:
fd:4a:3c:55:48:9d:d8:60:7c:f6:d0:e6:01:c9:1b:18:a1:d5:
68:67:d2:01:53:0d:b5:05:78:75:c4:38:e7:16:c9:cf:25:9f:
4f:e8:9c:bd:4f:0c:ba:c3:11:a7:d0:87:81:f0:f2:12:cb:71:
73:a7:62:8d:06:6e:34:52:6a:c3:79:c7:3a:55:f6:c9:ba:78:
74:48:be:c1:18:97:cd:d0:52:47:58:55:a7:77:2b:fb:1d:61:
ea:3a:e9:c4:e2:18:f9:f1:04:63:db:2b:e5:70:2d:34:b2:2d:
0e:9d:63:0d:11:6c:dd:79:bb:aa:1d:7a:7b:9c:25:32:f9:55:
81:81:58:13:ec:ba:6a:c3:67:80:17:65:a0:73:81:35:3d:a4:
ed:94:ee:30:8e:08:27:ac:96:8d:2e:e7:7a:55:82:c1:28:22:
a4:24:be:d5:3e:7b:87:e3:71:be:d2:6a:53:40:3c:36:30:da:
b4:0d:4a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:14:20 2025 by rpki-client