Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/c5vdRG5UZ5xSyih8lqmCqKsD9Fw.roa
File: c5vdRG5UZ5xSyih8lqmCqKsD9Fw.roa (raw, json)
Hash identifier: vdXhCaB+QUElAatlRVQr5dS8Tdpap0IfNjyLta7QIjs=
Subject key identifier: 73:9B:DD:44:6E:54:67:9C:52:CA:28:7C:96:A9:82:A8:AB:03:F4:5C
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0195FC832E10146EB3AF3DD3AE4B9FE54FBD
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/c5vdRG5UZ5xSyih8lqmCqKsD9Fw.roa
Signing time: Thu 03 Apr 2025 16:36:50 +0000
ROA not before: Thu 03 Apr 2025 16:36:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 83.147.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fc:83:2e:10:14:6e:b3:af:3d:d3:ae:4b:9f:e5:4f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Apr 3 16:36:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=739bdd446e54679c52ca287c96a982a8ab03f45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:89:96:ab:bf:02:36:75:84:1f:8b:b3:75:
da:64:2c:99:62:cd:06:6f:f1:11:ef:b7:ef:6a:8b:
e3:18:d4:b6:b6:20:b2:f5:25:7f:0e:a1:66:e4:94:
d1:11:af:81:ce:4c:b4:0c:2c:d7:0e:1c:81:0a:dc:
af:d2:4d:74:8c:65:f4:5b:07:a3:e8:3c:56:dd:0c:
74:cb:9f:a5:f9:c3:4e:43:4e:05:fa:34:08:af:d8:
8c:ec:71:58:bf:c9:10:9b:36:fd:cb:a5:51:65:c8:
25:58:04:d5:b6:de:a7:fa:87:7a:cd:28:ea:30:de:
c0:36:44:c5:6d:22:f0:3b:5f:0f:8a:5d:53:74:f8:
be:39:dd:6d:23:23:1e:8c:2d:cd:d6:e0:51:a5:cf:
88:47:c9:51:b9:ea:02:1a:ff:cb:c3:89:03:9b:b0:
dc:df:4e:27:43:9c:0e:a4:d0:4d:60:2f:d7:e9:e4:
89:ab:3f:b5:06:61:18:3c:c3:2b:57:62:9d:70:c7:
70:cf:3d:72:9f:8b:93:e4:80:af:8a:79:e7:4e:f1:
4b:e5:44:17:35:9d:5f:c4:b0:c5:a5:78:c2:06:ab:
af:dc:16:b6:7f:dc:0a:39:d7:4d:40:1c:1e:fe:07:
be:3e:94:0f:18:51:a4:5a:39:f1:84:a4:58:63:93:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9B:DD:44:6E:54:67:9C:52:CA:28:7C:96:A9:82:A8:AB:03:F4:5C
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/c5vdRG5UZ5xSyih8lqmCqKsD9Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
74:ee:83:49:ab:f9:c1:42:d1:90:aa:ca:31:f8:0b:df:06:07:
8b:bb:42:7b:fb:25:fa:f6:22:5a:97:e5:8e:12:e5:db:95:ef:
3a:4a:44:f4:4d:eb:19:2d:f3:f8:69:ed:71:8d:93:8b:1b:ab:
c0:d6:aa:99:f3:d2:cc:91:fb:b3:e5:7e:85:c9:75:47:94:8d:
7d:6b:06:ac:4c:38:a3:65:29:fd:53:ce:3d:1d:4b:94:b8:db:
87:33:87:20:1b:da:b5:89:42:aa:7b:da:ef:0e:ed:c7:6d:8d:
96:98:5e:b0:61:30:f2:e7:53:37:eb:7f:2b:04:fa:65:cf:a3:
5b:18:7c:b9:59:b7:5b:a4:e9:0e:47:34:d9:bb:c3:ab:4c:95:
d7:6d:49:7c:c4:56:d1:56:18:52:73:12:31:dc:7d:62:3c:0e:
21:5c:33:cf:89:e9:57:33:0e:17:83:5e:88:f7:d3:16:30:93:
04:44:4a:61:86:2c:6f:30:dc:30:6b:7e:1f:bf:11:3f:a3:fb:
d3:c0:84:af:61:a6:66:54:c2:ac:bc:93:00:7b:12:78:6a:10:
6c:b7:4c:4b:84:f5:3f:01:7d:d2:b9:f4:e6:12:44:46:88:68:
80:2d:fc:56:e2:ce:a1:94:6f:f2:3f:51:ee:e1:58:79:21:82:
e2:e2:59:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:35 2025 by rpki-client