Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/T5iocmdFKb5-nvRMTcb15SjaoLI.roa
File: T5iocmdFKb5-nvRMTcb15SjaoLI.roa (raw, json)
Hash identifier: Jendqkbfhje/FLX0sGSkWyaRP8aNdjdMAceyVWXi+TQ=
Subject key identifier: 4F:98:A8:72:67:45:29:BE:7E:9E:F4:4C:4D:C6:F5:E5:28:DA:A0:B2
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C433C3075E9D6F80417D81646ABCC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/T5iocmdFKb5-nvRMTcb15SjaoLI.roa
Signing time: Wed 01 Jan 2025 01:47:53 +0000
ROA not before: Wed 01 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212816
IP address blocks: 194.102.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:43:3c:30:75:e9:d6:f8:04:17:d8:16:46:ab:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f98a872674529be7e9ef44c4dc6f5e528daa0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6e:7d:34:29:6b:0a:dd:5f:bc:a4:d7:6b:a9:
d3:d8:4d:c3:b0:fe:bf:a3:4e:b5:22:2c:4e:70:ce:
10:1d:1c:93:ed:12:42:2e:53:83:a8:28:e4:e4:72:
5b:d5:64:23:94:9f:cb:54:b0:8b:e7:7a:bb:8b:68:
a8:08:41:af:20:d3:c3:88:95:d0:be:40:3a:ed:2a:
2a:e7:cc:45:23:cb:d8:c3:4b:db:e2:3d:1d:5a:59:
ac:44:84:0e:fe:2c:11:b8:4a:da:f3:fc:9a:14:8f:
7a:ea:0b:76:49:d7:58:69:7d:54:c3:44:36:c6:56:
ca:20:86:e1:15:2c:00:e2:38:bb:6f:ef:e8:de:aa:
1d:03:59:1b:24:94:dc:8d:79:fa:fc:f1:a1:6c:a1:
1d:6f:c1:20:0a:00:1b:08:ba:6b:e7:b8:9e:9d:35:
60:0b:07:ee:d0:d7:bd:75:fc:fe:35:8b:a2:cd:db:
d0:88:fd:0d:23:9a:89:88:1b:14:59:a7:c8:7b:36:
dc:4c:31:c5:33:b2:67:bb:ea:f4:46:24:eb:0d:9a:
b1:0c:32:71:1d:96:b3:80:07:3b:f8:9e:89:7e:50:
c6:51:0a:2d:bb:b3:10:6b:c2:52:9a:13:4e:a4:28:
2f:fd:45:dd:c0:9c:db:86:a9:3f:ae:7e:fa:17:49:
b6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:98:A8:72:67:45:29:BE:7E:9E:F4:4C:4D:C6:F5:E5:28:DA:A0:B2
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/T5iocmdFKb5-nvRMTcb15SjaoLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.184.0/22
Signature Algorithm: sha256WithRSAEncryption
82:63:a2:8a:ce:9d:69:ad:a1:31:3a:7d:2f:65:e4:fc:a0:a7:
ad:51:e1:ce:34:b4:a0:f4:cd:3c:1a:19:8f:a3:53:47:f5:9a:
86:ed:aa:f2:7c:c2:9f:6c:c8:16:93:d0:28:5e:7b:f2:cc:a4:
e9:8a:31:0e:25:6a:b2:a4:85:31:ca:e0:66:a3:ef:24:ec:34:
b0:f0:90:bf:cc:ff:b1:b6:05:0f:6e:fc:c5:14:d0:f8:cc:6f:
2c:67:90:48:a1:d1:51:f4:55:ed:1b:8c:3d:3f:3b:56:90:a6:
3b:66:54:33:52:1f:f1:0b:72:ba:81:bd:a8:e6:cb:d3:7b:7f:
7e:5c:b3:7b:6c:38:d3:d7:19:c1:ae:39:23:15:9c:3d:50:a8:
80:61:7d:f4:a4:98:0a:f7:46:d3:f5:6d:cf:f4:78:32:41:17:
45:a8:35:77:23:90:af:e3:e2:7a:d7:23:8b:3d:4c:a8:78:d4:
9d:93:8c:bd:b9:8f:26:3c:a2:2d:a4:b3:14:28:ed:49:34:e6:
cd:8d:ca:6f:d4:50:2b:9f:d2:46:21:47:82:3e:0d:05:33:7b:
ea:5f:14:32:53:8e:40:77:e1:1b:c5:56:c6:4a:47:43:d3:99:
7b:d5:b8:02:59:19:78:c7:31:f5:ae:f2:d5:ed:79:89:0a:05:
7a:00:d0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:35 2025 by rpki-client