Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lWhxsmubQCuHIHfr_VfqWGt0xhA.roa
File: lWhxsmubQCuHIHfr_VfqWGt0xhA.roa (raw, json)
Hash identifier: x1zowPWYDpjYFKv9mJaR8lE184pwWlx6KzW2O+IErgU=
Subject key identifier: 95:68:71:B2:6B:9B:40:2B:87:20:77:EB:FD:57:EA:58:6B:74:C6:10
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824BD8FF3E192BBA9B00F7AB6469C79
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lWhxsmubQCuHIHfr_VfqWGt0xhA.roa
Signing time: Thu 02 Jan 2025 17:51:24 +0000
ROA not before: Thu 02 Jan 2025 17:51:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211975
IP address blocks: 5.253.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 12:21:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:bd:8f:f3:e1:92:bb:a9:b0:0f:7a:b6:46:9c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=956871b26b9b402b872077ebfd57ea586b74c610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:d5:eb:d1:ed:3d:35:e1:0c:39:c7:31:91:
ab:1f:59:57:3b:3d:f4:19:7b:51:be:d2:d1:c5:fa:
11:38:5a:39:ec:91:75:f0:86:24:b2:80:69:55:e8:
dd:da:ee:ab:47:0a:bf:f2:46:92:1c:e0:bc:36:73:
45:15:fd:61:bb:44:87:9b:c6:58:75:b8:a8:ee:82:
90:76:c6:19:5a:dd:4e:47:d2:29:f1:ac:f3:ef:44:
c4:ad:d9:08:04:4f:34:ed:18:9b:d6:d9:a2:bd:05:
86:63:01:6d:99:65:3d:40:7b:9a:15:a4:fe:39:0c:
66:cc:41:06:a3:f1:d0:21:72:f4:6a:b5:22:51:12:
4c:e6:39:f6:08:00:c9:5b:25:f8:4a:63:fc:f6:7e:
f2:87:8e:24:8a:ad:51:fc:86:7c:46:b8:fe:61:87:
67:fd:6f:fe:f6:56:b1:c1:2e:10:d6:eb:e1:65:42:
d3:67:57:1f:cd:36:64:87:35:52:21:eb:73:8c:23:
1b:4c:ac:8a:11:01:34:da:76:0f:c9:07:d0:c8:95:
64:dd:24:4c:c2:25:d3:96:8c:64:b9:11:a0:5d:34:
45:e5:d7:dc:63:b8:99:4b:90:55:1a:67:7f:f4:a7:
3a:15:2c:9d:a8:c6:13:52:d6:ac:fc:9d:0d:42:7c:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:68:71:B2:6B:9B:40:2B:87:20:77:EB:FD:57:EA:58:6B:74:C6:10
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lWhxsmubQCuHIHfr_VfqWGt0xhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.65.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:45:ef:27:b7:65:9f:16:d0:c3:b1:91:3c:df:b0:eb:d2:d9:
49:fd:e0:04:a9:cc:0e:df:91:1b:e6:ef:53:93:0e:85:d1:54:
d6:10:6e:f4:23:e1:f8:2a:9a:b3:48:b0:2d:46:91:60:08:e8:
0e:8a:57:8f:56:f8:e7:22:d3:2b:47:c4:16:b5:1c:a4:f8:e9:
46:a5:88:3a:fe:9b:60:87:a3:2a:99:5e:b7:2d:47:e3:5f:02:
d4:4d:43:79:ea:05:f9:6c:fb:d7:41:94:10:8c:ef:7b:2a:9e:
c6:60:f3:0a:44:33:bb:6e:18:0b:41:6b:47:cc:ec:db:07:30:
c7:9d:a8:72:08:86:49:23:8e:30:40:35:04:a3:c9:41:68:6f:
e1:fc:9e:66:2c:c4:3a:2a:2a:30:7c:b0:10:89:35:28:92:a9:
5a:51:61:d8:d9:32:10:8a:45:b2:a8:91:ba:f1:78:cc:e4:c8:
f2:92:2a:09:3d:f1:d0:07:ea:6e:5c:88:e8:44:75:11:97:c8:
5d:92:f1:9a:85:8a:79:b8:22:9b:34:96:53:72:99:9e:75:21:
d1:5d:16:f6:bf:a9:bd:d0:5b:08:66:4f:e3:72:d7:e4:7c:27:
6c:73:ad:2d:b7:5b:27:97:cd:94:c3:14:df:67:68:62:c1:ec:
b1:06:34:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:38 2025 by rpki-client