Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/drOxTuSdQFczpcVwXyFaIyEbsdY.roa
File: drOxTuSdQFczpcVwXyFaIyEbsdY.roa (raw, json)
Hash identifier: flldTjSWU2bObz1CZncUhXjWnhrg2F/Btx8as3R6O7E=
Subject key identifier: 76:B3:B1:4E:E4:9D:40:57:33:A5:C5:70:5F:21:5A:23:21:1B:B1:D6
Certificate issuer: /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Certificate serial: 019425219569B8B9BB7260169D5304A4A7E3
Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/drOxTuSdQFczpcVwXyFaIyEbsdY.roa
Signing time: Thu 02 Jan 2025 03:49:05 +0000
ROA not before: Thu 02 Jan 2025 03:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 132.66.0.0/16 maxlen: 16
132.67.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:95:69:b8:b9:bb:72:60:16:9d:53:04:a4:a7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Validity
Not Before: Jan 2 03:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76b3b14ee49d405733a5c5705f215a23211bb1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:6d:d7:60:7b:e2:f8:ac:84:f8:d5:51:44:
6b:e9:d1:2b:9d:aa:4e:65:21:d5:26:39:dd:3a:7c:
f9:8e:5b:b1:3a:40:88:86:2a:79:6c:b9:1b:5e:7a:
ec:5f:1b:2b:e9:a0:8f:0f:a4:f6:bd:76:ce:40:8f:
f5:b0:f4:e9:26:9a:43:4e:5d:18:e4:52:57:a0:2d:
22:a7:26:c0:9e:fd:10:4b:e1:40:88:ed:a6:cf:b6:
d2:bb:d9:d4:57:16:21:07:f0:e1:4e:2e:88:29:07:
12:23:77:d3:fc:aa:53:f0:b1:ae:af:5c:52:a4:8b:
e2:6b:3f:42:02:a4:a6:a1:71:fa:cd:65:52:c1:5d:
e1:b0:1a:1f:3c:31:f3:fa:a6:2f:af:ae:0f:2d:25:
6c:ac:3e:63:15:a0:01:36:fc:d4:5c:d1:d9:9e:38:
d2:09:b0:25:5b:ac:c7:07:70:b4:fb:47:26:29:98:
4d:05:9c:67:bc:3d:01:81:11:64:9f:7a:c6:bb:97:
de:8d:d4:f7:20:fb:02:00:c9:5a:0f:e2:9a:85:fe:
ec:e1:d3:ef:e5:e9:3f:3e:10:6d:33:dd:39:d8:18:
e4:a7:92:89:b4:84:af:88:09:7b:ac:1e:81:31:8a:
8f:b8:4e:a2:4f:71:50:f1:4f:a2:62:b1:14:fa:6a:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B3:B1:4E:E4:9D:40:57:33:A5:C5:70:5F:21:5A:23:21:1B:B1:D6
X509v3 Authority Key Identifier:
keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/drOxTuSdQFczpcVwXyFaIyEbsdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.66.0.0/15
Signature Algorithm: sha256WithRSAEncryption
56:a7:be:8a:8b:cb:d5:0c:01:c5:9e:07:63:94:a0:bf:ac:ef:
c4:fa:ee:ba:40:7c:34:23:01:c0:07:8f:e2:44:e4:41:fe:85:
bf:51:93:b5:8e:11:61:fb:50:36:1c:ea:e9:d2:42:7e:10:18:
87:a5:5e:ba:2a:84:e0:51:37:04:c7:70:31:c0:2e:85:e5:dc:
71:d9:ae:de:84:b4:aa:4f:a9:b1:d4:1c:75:5c:88:45:3f:1c:
8c:6f:e1:bf:8e:ec:26:21:fb:7c:e8:1f:87:98:3b:de:d0:4f:
c4:46:b4:55:df:3a:bc:4b:b6:04:fc:0e:fe:3b:cd:28:18:be:
89:cd:58:c7:19:36:3e:2e:f7:3d:24:6e:bb:00:e2:c7:dc:ba:
77:cc:86:0b:d2:2e:1a:d7:8e:9a:a2:49:26:6a:9a:0a:83:76:
0e:e3:d2:4b:04:e2:98:2c:0e:df:3d:01:82:9d:5f:db:d9:72:
77:b0:d4:6d:c9:eb:aa:9a:5f:e9:45:28:da:3d:0a:39:7a:d7:
da:b5:4b:62:c7:4a:d4:15:2a:72:f9:db:9c:45:7f:05:81:71:
b6:0d:83:f9:f0:ff:f9:f5:19:3b:05:0f:0a:8d:10:90:37:23:
ea:9f:6b:3b:23:12:89:26:5f:66:67:43:53:17:28:08:9b:8c:
f5:1a:6b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:13:43 2025 by rpki-client