Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/iaY4-sKPZAI4sa8A4dCGAsexgng.roa
File: iaY4-sKPZAI4sa8A4dCGAsexgng.roa (raw, json)
Hash identifier: X4HTuJ/zPifJYecfSZ0AfwS9euYWiebVE7HyuaMNTeI=
Subject key identifier: 89:A6:38:FA:C2:8F:64:02:38:B1:AF:00:E1:D0:86:02:C7:B1:82:78
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01942828305EE4784AA5EC61081A9B11D311
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/iaY4-sKPZAI4sa8A4dCGAsexgng.roa
Signing time: Thu 02 Jan 2025 17:55:09 +0000
ROA not before: Thu 02 Jan 2025 17:55:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210646
IP address blocks: 151.251.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:30:5e:e4:78:4a:a5:ec:61:08:1a:9b:11:d3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89a638fac28f640238b1af00e1d08602c7b18278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8a:bb:e4:7b:36:d8:b9:dd:01:f9:f7:1a:d2:
b7:3c:57:62:61:cb:3d:70:73:35:69:7e:0a:98:08:
3b:c5:9b:a6:36:0f:4e:52:79:df:44:ed:a1:1f:87:
7c:d6:8b:41:4a:ce:58:14:51:e3:80:ad:b7:d2:bd:
b0:85:bf:22:d7:60:ae:a7:73:ea:bc:84:3d:47:79:
e4:f0:a1:aa:e7:37:60:e1:b3:77:af:a8:e3:d5:cf:
b3:93:41:9c:fc:a8:a8:cf:9c:c7:5c:89:ed:9d:1c:
d1:a9:fb:11:06:64:b8:c4:a7:f1:57:dd:fd:d9:1a:
cb:ad:8c:f1:17:48:d7:3d:d3:65:60:1a:4a:5e:21:
0e:85:b1:48:61:2f:1d:54:54:bc:d6:9d:fb:22:ec:
e6:c5:38:5b:4e:69:58:47:99:27:78:b0:0e:ab:2e:
02:18:8e:e1:9e:78:24:1d:0d:bf:8e:75:99:6e:be:
33:ea:55:c1:b9:4d:4d:0b:3e:41:b5:14:ff:be:0b:
02:1c:0d:aa:82:44:28:db:64:9c:19:4c:95:d9:06:
6d:52:a2:dc:30:eb:cb:8d:0f:c6:e8:aa:e5:17:6e:
73:65:d4:e8:45:72:82:26:11:4a:09:d8:5c:91:f1:
53:50:e7:f3:01:02:f6:78:a9:f6:81:4f:1a:1b:83:
8b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A6:38:FA:C2:8F:64:02:38:B1:AF:00:E1:D0:86:02:C7:B1:82:78
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/iaY4-sKPZAI4sa8A4dCGAsexgng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.251.66.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:e0:55:8c:d7:10:1e:bc:da:7f:d9:4f:19:31:f8:7d:70:5e:
43:4f:7f:7d:a5:6f:96:56:f8:d0:a3:c9:e5:e8:be:45:a7:81:
44:08:ab:1b:fa:48:b9:ac:c8:44:ac:31:3a:77:c0:37:ce:55:
38:64:8d:d0:70:9c:54:81:71:35:4d:71:30:aa:36:2a:b5:71:
08:3c:70:6c:de:56:b0:1e:18:84:80:b1:15:3d:97:db:e3:12:
2e:20:e2:f1:e8:54:31:c0:41:2f:7f:8f:30:ac:65:cd:e3:a0:
96:de:cd:e4:86:63:e3:ae:9b:e9:85:3d:49:99:59:04:0b:f9:
84:ac:97:0e:10:00:b3:d3:02:b3:b1:dd:4f:19:89:af:48:ac:
6f:7d:6c:52:6d:6e:35:03:1c:c6:3e:71:2c:0d:be:a8:bb:a2:
f2:53:14:e0:04:57:cf:a5:e0:d5:bf:02:7c:fd:a8:1e:cb:d9:
7c:20:04:29:17:44:5a:7e:5d:99:55:66:35:da:20:0e:64:61:
04:12:1a:28:43:ae:2d:99:33:0a:4f:62:ab:da:b7:9c:98:df:
52:e9:73:7c:c1:2d:74:2d:bf:78:13:a9:b8:77:51:33:1e:e2:
a2:50:ab:9f:f6:3c:83:9d:8a:33:a2:63:4b:e8:c6:1d:b5:f7:
28:eb:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:33 2025 by rpki-client