Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/d--rXUx28GGs_5V-2VNc8uSss5A.roa
File: d--rXUx28GGs_5V-2VNc8uSss5A.roa (raw, json)
Hash identifier: 3qeoImdGWsmWoy8tyEsXT19i9Y5ET0MQ4UKvkQC7hQQ=
Subject key identifier: 77:EF:AB:5D:4C:76:F0:61:AC:FF:95:7E:D9:53:5C:F2:E4:AC:B3:90
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0194282821428F85919C42F5BC42CE81E4ED
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/d--rXUx28GGs_5V-2VNc8uSss5A.roa
Signing time: Thu 02 Jan 2025 17:55:06 +0000
ROA not before: Thu 02 Jan 2025 17:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62418
IP address blocks: 62.204.132.0/23 maxlen: 23
195.34.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:21:42:8f:85:91:9c:42:f5:bc:42:ce:81:e4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77efab5d4c76f061acff957ed9535cf2e4acb390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1e:ac:6e:68:93:b7:9e:9c:e3:c6:6c:c0:9e:
02:ed:11:04:22:12:6c:5e:55:5c:c8:cc:34:cb:6c:
e4:dc:3e:1b:a0:c5:06:3e:2c:52:47:61:95:2d:40:
09:d5:86:b4:37:0c:53:8f:c8:39:24:d4:bd:70:f9:
eb:fa:d1:31:28:72:3d:04:7d:53:27:8c:e8:2d:61:
2a:e5:8a:02:ae:46:1e:4f:33:8a:0a:aa:8b:64:ff:
be:90:3b:47:c8:5a:7a:08:85:b8:8a:4b:3f:22:3e:
3a:63:c9:27:1c:da:d7:76:0a:23:02:84:3f:e1:a8:
74:f3:cb:d4:9c:fd:9e:09:0e:bc:b3:eb:f7:be:28:
14:a4:6c:de:01:8c:59:98:3c:ef:52:7a:05:d9:a8:
15:c3:ed:9e:3c:93:29:ae:90:5f:b2:28:d9:f2:e6:
b6:97:79:82:75:54:dc:d6:09:26:0f:e9:76:42:2c:
22:69:d5:64:21:d4:fd:4e:8a:cf:e4:60:b9:32:4a:
e7:d6:66:01:9c:df:bc:ed:5c:40:8f:80:fd:ed:43:
2b:29:f2:27:ba:0d:26:bd:73:49:b4:11:12:37:53:
51:ff:44:40:a2:da:cf:b8:27:5f:9f:ae:7a:8c:9f:
6b:c3:92:8d:c7:9f:98:38:36:01:f0:bf:f2:f9:19:
52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EF:AB:5D:4C:76:F0:61:AC:FF:95:7E:D9:53:5C:F2:E4:AC:B3:90
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/d--rXUx28GGs_5V-2VNc8uSss5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.132.0/23
195.34.98.0/23
Signature Algorithm: sha256WithRSAEncryption
93:1e:3c:37:81:aa:f3:32:2b:af:b3:ff:6b:1c:3a:0b:e1:f5:
d6:5d:dc:14:e3:44:5c:0a:a5:9f:1d:20:9f:c7:3a:05:4e:d8:
3b:70:c4:a6:1e:c2:0b:f5:d8:ed:e4:48:e0:30:ce:02:29:35:
2c:72:5d:e6:08:15:aa:7b:ff:13:46:53:0c:68:4a:dc:4a:a3:
6e:6d:cc:68:f0:be:26:e5:ba:45:db:8e:ec:e9:a3:c3:42:f5:
40:87:f2:8d:2c:f0:a2:38:0c:33:82:61:3a:1a:bb:3b:4d:46:
64:1c:3f:46:d9:8d:97:57:8f:ab:ca:61:77:9b:f6:e2:58:19:
70:10:ee:47:1b:7f:8a:29:87:4c:19:95:c9:c7:00:f0:fc:c5:
3e:8e:ef:a3:e9:1c:2c:22:a6:65:45:ec:c3:9c:d9:6f:df:21:
3b:7d:19:b6:cd:25:b4:d1:1e:08:97:c0:89:f9:4e:a8:4d:11:
55:0c:f5:2b:62:27:f4:fc:f9:0b:5d:91:d2:98:d6:fc:bc:de:
7c:93:83:d3:e2:0a:94:6b:e4:56:e8:0b:fc:3b:f7:2e:ab:6c:
85:0e:b3:12:fd:0c:76:62:18:60:d1:d1:75:bf:32:9f:c0:cd:
75:0b:d1:10:cc:18:72:82:32:65:b9:75:c5:b4:e1:ca:98:9a:
e8:52:bf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:57 2025 by rpki-client