Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/Rx1WXEoXHQMpBNByR6D56N7x2Uo.roa
File: Rx1WXEoXHQMpBNByR6D56N7x2Uo.roa (raw, json)
Hash identifier: cDPkgX6C1FbeC1cHjpQAZgyTLlKW00FBl5qWrTOC/Xk=
Subject key identifier: 47:1D:56:5C:4A:17:1D:03:29:04:D0:72:47:A0:F9:E8:DE:F1:D9:4A
Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial: 019422FAFE48EA0F65CD930EF3279698B8AB
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/Rx1WXEoXHQMpBNByR6D56N7x2Uo.roa
Signing time: Wed 01 Jan 2025 17:47:41 +0000
ROA not before: Wed 01 Jan 2025 17:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 176.52.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:fe:48:ea:0f:65:cd:93:0e:f3:27:96:98:b8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Validity
Not Before: Jan 1 17:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=471d565c4a171d032904d07247a0f9e8def1d94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:9e:ca:d4:8b:a7:d5:af:54:de:85:7f:f7:
c3:73:95:0f:82:17:d0:7c:3e:ed:41:21:62:4d:87:
d4:0a:a9:d8:70:17:40:58:f3:11:3d:eb:15:7e:c6:
d3:74:44:a5:fb:4a:8c:90:85:68:b3:a3:24:38:94:
87:78:9d:3c:a5:1b:d0:5c:98:b2:6f:98:1a:b6:a7:
7f:5f:2d:d0:cb:54:2c:f5:08:98:ad:c7:8b:ed:13:
cd:72:23:80:92:45:7a:89:f7:4c:b0:5d:75:19:b1:
07:08:ca:1a:65:b7:a0:ca:93:bd:f0:b4:f3:d8:06:
55:b3:0e:5f:60:cf:e7:1a:0d:65:97:1e:d6:4a:99:
4d:9e:07:31:6a:db:0f:95:ef:00:89:69:8f:d8:ca:
af:66:9e:d2:4f:f0:0c:c4:b3:ea:b7:51:47:ea:02:
e3:6b:dc:40:8a:1c:4d:c5:c6:4b:c0:2b:55:b0:db:
5e:68:f0:7c:16:ac:36:d8:1d:f2:02:9e:a0:f7:48:
b9:25:b3:de:02:bb:09:ac:17:bd:bb:7e:34:39:93:
1e:21:6f:1c:4e:65:eb:c8:70:4e:10:c1:2e:b4:da:
c3:b8:46:1b:d5:91:1e:45:4d:31:48:54:fc:ee:8a:
ad:7f:bd:e2:3e:8c:68:40:2b:d1:92:e6:31:43:ad:
59:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1D:56:5C:4A:17:1D:03:29:04:D0:72:47:A0:F9:E8:DE:F1:D9:4A
X509v3 Authority Key Identifier:
keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/Rx1WXEoXHQMpBNByR6D56N7x2Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.187.0/24
Signature Algorithm: sha256WithRSAEncryption
12:62:d2:f5:ca:2c:63:f6:95:87:a2:72:78:d4:ea:c8:d9:e5:
4d:f4:a9:95:74:1e:ad:7c:6d:a5:53:52:f3:2d:da:c8:6e:7c:
d9:5c:e7:ec:43:e7:4d:a0:00:49:bb:e6:78:45:e8:a0:af:59:
b8:30:ae:2b:c9:c0:71:32:91:56:6f:89:85:78:ef:61:a7:bd:
40:9c:e1:82:e5:55:22:f9:3d:fb:6e:85:14:a8:6e:25:80:eb:
9d:f8:63:d4:c0:2f:47:35:4d:7c:c0:13:3b:f4:a2:d0:ac:6b:
38:12:7b:95:cf:06:9c:dd:29:8d:cf:1d:64:c2:d4:37:a5:09:
b5:4d:f6:6a:5f:b7:75:a4:37:d1:84:0c:9b:dd:49:9d:3a:6a:
42:de:d5:5b:47:71:94:16:b0:63:0c:63:58:52:c2:03:4a:0b:
af:3f:99:33:3d:f9:1f:bc:e5:a9:62:1f:cc:a3:87:3d:4d:ae:
93:19:ee:61:7f:a9:4d:33:37:5d:79:73:13:fd:f5:6c:a4:22:
1c:02:80:b1:2f:2e:e2:ad:73:30:4d:5a:ed:c7:a1:1c:cf:89:
6d:cf:8b:ff:f8:f8:9b:c5:0f:0e:0b:21:2d:9d:f0:ae:b1:0a:
77:db:fe:29:b5:dc:bf:81:d8:8e:04:de:0e:9e:e3:05:43:53:
a9:b6:6d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:52 2025 by rpki-client