Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/s1Pt-54WEyVmli6rDAOg5exksLI.roa
File: s1Pt-54WEyVmli6rDAOg5exksLI.roa (raw, json)
Hash identifier: +qBfOcJX2O/bn+twU2P+RzeeUC9ErPq85SULjl0hJS8=
Subject key identifier: B3:53:ED:FB:9E:16:13:25:66:96:2E:AB:0C:03:A0:E5:EC:64:B0:B2
Certificate issuer: /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial: 01941F8C8C1A14764D0C5A7ED64CD9CD23E8
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/s1Pt-54WEyVmli6rDAOg5exksLI.roa
Signing time: Wed 01 Jan 2025 01:48:12 +0000
ROA not before: Wed 01 Jan 2025 01:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212093
IP address blocks: 178.237.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8c:1a:14:76:4d:0c:5a:7e:d6:4c:d9:cd:23:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b353edfb9e16132566962eab0c03a0e5ec64b0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ed:4d:a0:22:bd:20:db:1d:42:eb:52:48:94:
32:23:05:25:d2:46:57:a5:a0:7e:44:d2:13:95:a5:
5f:26:9c:32:2f:a1:df:6d:e1:37:bf:3b:cb:c3:a3:
be:b2:d8:53:cf:fe:01:76:65:5d:68:c0:21:a4:58:
45:3d:83:84:33:7d:59:f0:d0:da:d0:c8:78:2d:5e:
08:30:25:8b:75:1c:7d:12:57:6d:69:e7:07:a8:03:
37:5d:43:97:9f:eb:7d:53:77:a4:4a:19:c1:2f:26:
a2:e2:b9:57:3a:43:63:67:cc:a2:ea:a3:a2:c0:8e:
11:47:d2:21:cc:31:83:9d:32:6e:6b:6b:ea:76:aa:
e8:04:08:74:46:03:0f:8e:2f:dc:1b:a5:7a:28:e1:
17:f7:f6:12:c2:42:b3:01:fe:25:40:35:23:b2:51:
17:27:41:37:bf:c2:9c:9e:81:53:96:66:fa:b3:d4:
00:bb:1d:6c:09:c6:35:52:03:aa:8c:9c:2b:f2:9d:
2a:07:f6:43:fe:36:95:8f:86:62:29:bf:ed:1f:bf:
00:57:f1:39:41:5e:bc:fe:3f:ed:78:ce:a7:98:17:
dc:b6:62:ac:43:be:da:58:6c:cf:a7:e3:ab:d8:78:
97:84:41:7a:02:74:cb:be:49:93:07:54:62:98:a6:
95:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:53:ED:FB:9E:16:13:25:66:96:2E:AB:0C:03:A0:E5:EC:64:B0:B2
X509v3 Authority Key Identifier:
keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/s1Pt-54WEyVmli6rDAOg5exksLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.205.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ed:eb:67:f5:43:43:0e:f9:0d:e8:0d:20:23:6a:2d:ca:60:
83:8c:11:73:c7:b8:80:7e:1f:5b:23:2a:64:d6:0e:de:e4:57:
8e:55:fe:42:59:df:0b:6d:6b:f4:d5:f1:b3:46:a6:5c:65:ca:
84:b2:90:c8:0d:16:3a:d7:07:aa:91:ff:d3:a8:fa:b1:d0:b4:
af:14:f5:78:c9:a9:39:d7:b2:12:7f:5e:66:88:3b:f5:cd:2f:
6d:57:e1:be:37:28:ad:91:86:1d:b1:b1:25:8c:fe:0a:17:6f:
5b:64:e0:90:5d:63:7d:6e:f3:f8:d3:ad:e9:b7:66:5f:c7:f4:
50:44:bd:7a:8d:6a:84:05:96:1c:eb:c2:57:5a:76:6b:4e:51:
35:62:fc:66:12:96:9b:e1:0d:28:c2:d1:07:12:71:7f:28:0c:
40:a2:a6:44:3b:69:9b:38:8b:9d:cf:f4:10:2b:7e:aa:1a:fe:
da:13:35:c7:c4:df:f5:d8:3f:2d:be:84:88:7d:0e:8f:63:81:
97:d6:35:74:a0:12:4a:32:b6:cb:88:e2:a7:ec:11:9c:8d:a3:
5d:33:54:cc:dc:c6:ef:38:34:da:44:e8:a7:a9:41:05:e5:0b:
a3:5d:74:8a:f7:de:82:90:f7:18:90:0c:c4:95:00:01:f5:7a:
f2:6b:f7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:51:48 2025 by rpki-client