Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/pAkDpXLHJSVq5brO4eRR6jwHtU8.roa
File: pAkDpXLHJSVq5brO4eRR6jwHtU8.roa (raw, json)
Hash identifier: wuv8wzRTFGHFi0hdFLFmbRsgX25lIcuDItaxFFAOXPk=
Subject key identifier: A4:09:03:A5:72:C7:25:25:6A:E5:BA:CE:E1:E4:51:EA:3C:07:B5:4F
Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial: 019422FC23AF7CCE0E9400A5CE8E3E1CAAAE
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/pAkDpXLHJSVq5brO4eRR6jwHtU8.roa
Signing time: Wed 01 Jan 2025 17:48:57 +0000
ROA not before: Wed 01 Jan 2025 17:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 203.56.114.0/23 maxlen: 23
2a14:3e44::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:23:af:7c:ce:0e:94:00:a5:ce:8e:3e:1c:aa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Validity
Not Before: Jan 1 17:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a40903a572c725256ae5bacee1e451ea3c07b54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:5d:a6:7d:55:8b:8b:38:42:0f:6f:80:b9:
4d:79:ef:2e:4a:24:a0:e7:0a:6d:1c:b8:e6:dd:5f:
24:f9:49:0b:65:ef:15:dd:94:f6:30:65:42:42:1e:
e3:98:6d:a7:49:96:ec:c7:0b:ad:4d:b4:63:fe:73:
14:6e:26:8f:cf:3b:ea:fd:91:19:32:d8:98:8d:7a:
63:01:37:a5:8b:1b:a4:dc:ea:f4:ce:fe:75:fa:54:
f4:22:88:63:d0:0a:e1:c1:89:c1:22:e5:5a:8f:7b:
36:95:4f:d9:b5:32:c7:0d:67:f6:10:f7:2e:e9:d4:
10:71:c4:66:36:6b:f0:5d:93:53:d7:eb:b2:43:be:
da:e8:2d:72:ee:2c:7b:de:e3:c9:03:74:c6:ac:be:
e6:39:e8:e0:6a:51:d3:c2:fc:ac:8c:26:ea:3d:e1:
13:83:9d:81:bb:e5:82:d2:9f:1a:37:e1:08:e7:6f:
ab:95:f0:e2:78:82:89:6e:67:c6:7b:9b:8e:37:e1:
ad:e0:43:0b:b2:a1:9c:b4:c7:dc:dc:0b:db:13:94:
c7:80:5c:9c:c7:76:aa:d7:ab:62:4f:0b:ef:b8:45:
27:60:87:18:5a:8a:db:c0:58:8f:5e:69:ee:13:b4:
4b:e5:0c:34:74:55:89:4c:a7:38:7f:61:d1:0f:68:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:09:03:A5:72:C7:25:25:6A:E5:BA:CE:E1:E4:51:EA:3C:07:B5:4F
X509v3 Authority Key Identifier:
keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/pAkDpXLHJSVq5brO4eRR6jwHtU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.56.114.0/23
IPv6:
2a14:3e44::/32
Signature Algorithm: sha256WithRSAEncryption
39:17:d2:9b:66:2b:b2:1c:81:26:89:aa:d8:14:b0:31:1d:96:
b1:f5:13:ff:d8:2d:fa:97:24:79:49:71:66:72:e0:42:61:4d:
42:d3:2e:c4:1f:d9:fa:04:63:15:b7:90:b8:1a:7f:c9:17:cc:
fc:ca:c0:1a:af:da:4b:5a:1a:a1:53:42:07:2b:0b:b4:d4:72:
0c:72:b4:ee:4f:ab:f7:df:98:d4:e9:40:fe:1a:14:77:f0:cb:
a7:9c:9a:4d:9e:39:e6:4a:c8:20:29:97:40:f9:eb:ee:b4:7f:
23:62:c5:4b:b5:20:52:12:6c:7b:45:77:b8:9d:92:61:df:f6:
16:b0:5a:c8:69:20:20:cd:01:2b:50:2e:80:c4:80:4c:7e:16:
0c:fa:93:81:bd:14:d2:ab:1f:02:a1:2e:59:2f:c3:48:6f:9e:
9e:ca:af:12:f2:f6:4b:ee:2b:e5:47:ef:ca:78:18:9e:d3:ed:
00:73:a2:5e:a1:f7:f9:37:81:c3:01:f9:06:d2:aa:e6:80:86:
32:24:b3:a6:2a:17:9d:24:31:43:4b:9d:ae:82:c3:44:29:b4:
21:19:fa:4b:d0:20:e8:2e:7b:6b:25:03:c1:5e:48:78:c9:d5:
de:38:7b:af:05:36:d9:18:80:4b:db:55:05:97:46:0d:fe:ad:
45:00:0e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:47:12 2025 by rpki-client