Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/du1wumr7xYGJbc7K9EGp_C8KghQ.roa
File: du1wumr7xYGJbc7K9EGp_C8KghQ.roa (raw, json)
Hash identifier: 9MrBUWrUA1+He9qgQ6KOaw7pAUr3HTlALJK0R8ucEhc=
Subject key identifier: 76:ED:70:BA:6A:FB:C5:81:89:6D:CE:CA:F4:41:A9:FC:2F:0A:82:14
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 0195B4734EDCA7069CB701B760082BBB3752
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/du1wumr7xYGJbc7K9EGp_C8KghQ.roa
Signing time: Thu 20 Mar 2025 16:46:50 +0000
ROA not before: Thu 20 Mar 2025 16:46:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53850
IP address blocks: 188.209.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:73:4e:dc:a7:06:9c:b7:01:b7:60:08:2b:bb:37:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 20 16:46:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76ed70ba6afbc581896dcecaf441a9fc2f0a8214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:11:a5:2c:c1:8a:88:bc:6a:8c:50:86:2a:
64:33:9d:1e:5e:da:c4:1d:39:13:f5:35:62:02:e2:
e4:1a:b3:56:31:59:1f:3b:07:bc:3f:59:70:95:79:
7f:b5:4e:a1:dc:c7:33:48:eb:41:f5:9d:06:de:4d:
87:22:d9:7b:60:1a:66:7d:4f:73:9c:2b:b0:c1:d8:
46:ac:04:a1:d8:6d:01:0c:d2:46:d4:d5:e2:67:85:
a2:f7:f9:e8:ef:f0:75:01:01:1b:a9:e5:36:b1:af:
b7:08:b7:5b:58:83:4f:ff:08:e8:56:e9:9c:cf:6d:
1d:8a:ad:b6:26:9f:0a:98:99:7d:20:b3:f8:32:90:
ca:67:25:93:c9:dd:e1:1b:0e:c2:c3:34:5d:79:f1:
26:c4:89:10:97:d7:db:55:71:bf:25:bf:a2:ed:ce:
48:96:95:a7:1b:86:d7:b4:e1:58:35:c1:ff:03:b1:
a8:d5:ca:d6:f5:0b:cf:b1:33:27:5d:3d:2f:7d:88:
4b:12:90:e1:45:a4:c1:04:28:9a:e9:83:d1:59:56:
b7:1a:f4:ca:26:3b:b5:e2:46:ee:6f:8d:58:d8:a4:
64:5e:3c:35:e1:7e:9a:aa:b6:02:43:8e:a2:7d:9b:
8e:29:39:a2:9a:b9:53:52:7a:f7:d2:f1:e6:a5:0f:
05:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:ED:70:BA:6A:FB:C5:81:89:6D:CE:CA:F4:41:A9:FC:2F:0A:82:14
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/du1wumr7xYGJbc7K9EGp_C8KghQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ce:9f:db:4a:44:0f:fe:48:de:d4:26:cf:95:ff:50:f9:cf:
4e:ad:f0:fa:c1:7b:21:9f:17:59:24:a6:74:db:78:04:75:f9:
1e:72:b7:f5:63:54:bc:31:64:f0:23:31:7e:ff:8a:89:ac:ec:
9b:e4:9e:86:41:a1:a7:97:7e:e5:d6:76:17:5b:79:8c:e3:a2:
67:0a:7e:98:d3:fb:c3:cd:ee:77:6e:5b:e8:fe:23:95:4b:87:
b3:e8:82:00:97:af:c9:e9:45:cf:5d:86:48:ff:21:26:7c:ed:
8f:54:b1:03:28:a4:68:7a:71:6b:52:7e:c0:b0:99:5d:1c:0a:
00:84:fc:1a:0f:48:8c:60:f5:c2:ba:85:27:e6:7c:b5:57:da:
0e:1d:41:72:3c:18:a0:c3:02:9b:ac:c0:ae:9d:ba:69:b4:87:
cb:a4:9c:67:80:08:45:26:57:4e:5a:7a:5e:16:b9:39:f8:80:
ac:5f:c9:9c:8d:60:cc:58:25:96:6c:0e:9e:7f:ce:d9:9f:4b:
f1:84:e7:cd:6e:77:07:26:ea:c1:c6:25:29:77:af:26:bc:94:
ef:fb:f3:b8:8f:ff:8e:1d:78:02:db:74:11:b0:d7:f1:2b:08:
ff:a1:78:13:04:62:5d:09:2f:ce:17:9c:03:19:51:95:98:14:
08:07:96:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:48:59 2025 by rpki-client