Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/_gYUlUCfN6l5n67P7rXluh_fPlA.roa
File: _gYUlUCfN6l5n67P7rXluh_fPlA.roa (raw, json)
Hash identifier: U4UZUMI/kaS2KD/9/bzXxhkFvL6NwSNWIwZGPCQg08o=
Subject key identifier: FE:06:14:95:40:9F:37:A9:79:9F:AE:CF:EE:B5:E5:BA:1F:DF:3E:50
Certificate issuer: /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Certificate serial: 019425219506E549226DB7A58EF7F75535CA
Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/_gYUlUCfN6l5n67P7rXluh_fPlA.roa
Signing time: Thu 02 Jan 2025 03:49:05 +0000
ROA not before: Thu 02 Jan 2025 03:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35280
IP address blocks: 132.66.0.0/16 maxlen: 16
132.67.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:95:06:e5:49:22:6d:b7:a5:8e:f7:f7:55:35:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Validity
Not Before: Jan 2 03:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe061495409f37a9799faecfeeb5e5ba1fdf3e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1d:75:8c:f8:d3:9d:cb:32:49:1f:3b:bb:98:
3d:34:2b:65:e6:75:04:e3:61:9f:05:66:bc:1b:7d:
17:58:47:03:6b:6f:31:25:43:57:f5:4b:9e:65:34:
6d:ed:96:8c:95:56:ff:ee:1a:c7:8c:62:6e:a0:b7:
71:69:23:6c:cb:aa:e5:4f:3b:cb:8e:fd:4b:02:79:
1e:1f:e9:a1:63:83:cf:be:b8:90:a6:da:3a:bc:84:
c5:15:bb:ac:46:da:e6:f6:e9:f8:0a:dd:7b:e8:2b:
f1:f5:dc:11:87:4c:dc:56:bf:6b:e8:3c:eb:47:ff:
a1:e8:b9:87:e6:c8:07:9d:4a:fc:69:0a:ed:13:c7:
2a:c8:a7:63:3d:e9:90:95:91:b2:fa:02:c0:b8:2e:
71:e6:18:47:61:89:37:20:fb:29:37:ac:55:9d:35:
21:1a:9e:de:ab:96:bd:40:d1:84:24:6c:41:27:ca:
00:bc:ab:72:ff:57:36:84:b2:d2:b6:df:d4:68:62:
c0:39:6c:91:bb:c4:ea:18:67:f3:3f:b2:4f:7a:57:
f1:fb:28:68:90:75:29:46:72:92:fb:ad:1c:8b:c9:
3c:69:3b:cf:97:17:e0:5b:c5:d1:2a:21:e0:be:c6:
75:f0:aa:ec:96:c6:e1:b0:0b:82:34:e2:a7:4d:21:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:06:14:95:40:9F:37:A9:79:9F:AE:CF:EE:B5:E5:BA:1F:DF:3E:50
X509v3 Authority Key Identifier:
keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/_gYUlUCfN6l5n67P7rXluh_fPlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.66.0.0/15
Signature Algorithm: sha256WithRSAEncryption
54:38:f7:9b:4b:84:b2:0a:c0:80:dc:1c:10:37:ce:d3:e5:c2:
87:88:fd:8d:0f:39:8b:83:28:f1:ab:23:e2:93:3a:25:99:31:
db:ca:2f:eb:76:39:fa:91:1e:4a:a6:a5:56:12:27:35:11:60:
ad:52:77:8d:98:90:3a:9f:f1:3c:14:c5:5c:43:ba:b8:ac:27:
3d:59:22:91:42:59:bb:5b:f6:45:1a:fd:8c:1b:ce:59:76:a5:
ff:ec:60:e6:f6:a3:c6:1d:1d:a6:a4:18:e3:5c:68:38:6c:b5:
3e:ad:e9:88:de:ea:c9:a2:c4:f5:d8:c6:aa:ea:8c:fc:a5:63:
ea:71:84:32:84:73:a4:18:9c:99:4a:7b:bb:62:e2:cf:85:c2:
bc:a3:ab:a7:7a:9e:97:50:3b:d9:14:c2:62:02:a0:5c:68:44:
8b:7e:fb:f6:e3:49:05:dc:33:ee:99:51:a2:aa:b1:0e:78:d4:
dd:e7:d2:60:d7:f0:8e:83:4d:98:42:2c:3a:1a:48:4e:ba:62:
18:18:7f:6c:f3:e3:bc:72:98:a4:d4:d7:56:b3:c2:6a:aa:76:
27:fd:dc:26:03:35:b1:fd:a4:d5:0d:45:2b:cb:ec:e3:f6:8c:
32:76:e7:2c:56:76:28:46:b3:df:dc:b9:4a:23:67:2e:bc:6a:
b8:82:cf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:41 2025 by rpki-client