Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/t-kDZ60Ga6s9XyZB2kPkoXB6jwY.roa
File: t-kDZ60Ga6s9XyZB2kPkoXB6jwY.roa (raw, json)
Hash identifier: +ne5fdeCEiZZDZ8TkDgbzZo5fLLpzzbaivx2MhBIpe0=
Subject key identifier: B7:E9:03:67:AD:06:6B:AB:3D:5F:26:41:DA:43:E4:A1:70:7A:8F:06
Certificate issuer: /CN=fab796d980fa60fe2514fce62646f45d12c95165
Certificate serial: 019427B609F8E2A6022DEF33D29A7FB01416
Authority key identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/t-kDZ60Ga6s9XyZB2kPkoXB6jwY.roa
Signing time: Thu 02 Jan 2025 15:50:29 +0000
ROA not before: Thu 02 Jan 2025 15:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209435
IP address blocks: 5.253.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:09:f8:e2:a6:02:2d:ef:33:d2:9a:7f:b0:14:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab796d980fa60fe2514fce62646f45d12c95165
Validity
Not Before: Jan 2 15:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7e90367ad066bab3d5f2641da43e4a1707a8f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:72:ad:eb:73:6f:41:69:20:bf:c2:43:1e:
b6:28:b6:8c:d1:2f:47:72:e2:d2:a8:7b:20:0c:20:
6b:89:7f:ed:99:59:07:0a:a2:e0:32:b0:03:26:cc:
be:ef:30:1c:13:38:6a:f9:36:94:83:91:48:e8:9d:
7b:52:79:14:df:c4:9c:fb:27:f1:19:3e:98:28:84:
a1:e2:49:33:95:88:65:30:8b:46:07:a2:c0:a2:ea:
f7:3a:3e:28:d5:0c:c7:81:16:66:fa:03:42:10:25:
7b:9b:40:cd:e4:17:b0:48:11:6a:7e:1a:0c:51:06:
c8:16:0a:0d:5b:8d:09:aa:b1:e7:d5:ba:85:df:58:
c7:b1:fc:b3:de:cb:7b:97:e0:82:61:97:c7:15:ce:
dd:30:6e:31:bb:7f:81:fb:36:f8:a9:ad:b8:8f:f1:
14:19:48:59:04:bf:36:6f:64:93:c7:ef:91:d6:fb:
da:ea:f1:a0:d0:69:e9:4e:04:3f:31:e5:4e:9c:fe:
bf:23:9a:eb:b3:4a:18:93:db:f4:e5:8b:30:0d:93:
3b:dc:5b:88:c7:46:2b:c3:9e:38:8e:a0:7c:fb:17:
8a:13:2d:4c:fa:83:80:a1:cd:8e:e2:81:48:68:53:
88:63:41:ea:22:58:5b:43:52:8a:91:1a:a1:06:de:
33:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E9:03:67:AD:06:6B:AB:3D:5F:26:41:DA:43:E4:A1:70:7A:8F:06
X509v3 Authority Key Identifier:
keyid:FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/t-kDZ60Ga6s9XyZB2kPkoXB6jwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.172.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:25:df:b4:cb:68:d2:63:28:05:0e:2f:93:ab:00:e0:b7:9e:
87:14:6e:ce:99:81:c3:74:1c:61:33:9e:04:99:54:16:bb:d7:
b7:46:c1:7c:aa:8d:af:80:bc:e6:6f:9f:87:ef:d9:86:95:a2:
f4:2a:3d:7f:88:f2:e5:b0:32:aa:d0:fd:ea:30:4e:83:da:4b:
2b:e9:99:b9:27:ff:9e:c8:81:5f:2e:9d:ac:73:0a:f0:23:6d:
ea:67:48:c2:c2:75:2f:35:29:7d:00:ed:23:50:80:0f:c0:0a:
bd:33:4c:ea:2a:5f:1e:fe:92:85:8c:d2:eb:35:de:ce:05:ef:
82:b5:6c:b9:f2:bf:20:79:93:7d:ea:e5:25:60:4c:17:48:8f:
78:5c:ae:6d:b4:3c:4a:6e:10:62:f4:13:af:37:9c:e1:07:0f:
cd:b5:af:0f:75:94:12:71:dc:f5:02:41:4d:d0:be:f0:27:20:
e5:29:d5:6f:55:da:65:24:6c:7c:28:ae:d6:43:cc:23:3d:45:
7c:a1:31:31:65:76:48:1c:e9:2a:1b:07:3f:16:95:a5:a7:e8:
50:1f:3f:de:54:7f:47:1b:87:28:27:2e:81:36:35:29:02:90:
5e:bb:5d:63:90:f2:e8:4a:1a:1c:34:81:eb:04:f9:c5:6a:17:
fe:d7:af:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:41 2025 by rpki-client