Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/1cAFysoNqNIZH8FwmwvYqJt5bM4.roa
File: 1cAFysoNqNIZH8FwmwvYqJt5bM4.roa (raw, json)
Hash identifier: ODKSC75jE0xq09vjpL4sB7ddbosHMLlBxEPWj0XoiqQ=
Subject key identifier: D5:C0:05:CA:CA:0D:A8:D2:19:1F:C1:70:9B:0B:D8:A8:9B:79:6C:CE
Certificate issuer: /CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
Certificate serial: 01942068726F7B819A0B93F9550E77F6F8E6
Authority key identifier: 57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/1cAFysoNqNIZH8FwmwvYqJt5bM4.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207999
IP address blocks: 95.130.0.0/22 maxlen: 22
2a0e:8d80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:72:6f:7b:81:9a:0b:93:f9:55:0e:77:f6:f8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5c005caca0da8d2191fc1709b0bd8a89b796cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:19:a7:03:a7:85:60:76:a3:71:4c:05:3b:f1:
e3:b2:ba:30:db:62:67:c5:71:9e:27:c9:4c:6b:2f:
bd:0b:7a:e6:6b:53:7a:8b:73:5e:94:3c:bf:3f:9e:
54:f7:ba:c8:dc:a6:6c:0e:b2:6d:2b:b3:87:2d:7c:
c8:31:06:58:f5:82:ee:4d:93:33:b2:c5:33:e3:09:
16:af:6a:9b:9b:3b:3e:53:75:c6:80:1c:96:25:61:
fb:50:1f:40:0b:67:ea:c5:fd:d3:95:f1:de:18:62:
d2:9b:36:1c:95:67:6f:a9:b0:ba:82:d8:33:2c:97:
44:7b:96:c4:8c:d1:e1:ec:69:ca:ed:d6:b1:04:c0:
1b:04:14:14:59:87:70:7a:b3:60:19:10:bf:f8:4f:
e7:2f:c5:83:2c:77:60:1c:bc:75:43:92:b1:82:d8:
59:b0:c1:21:4b:ad:da:c6:bb:31:6f:29:72:ba:f2:
de:f0:84:b6:68:ae:d2:59:dd:bd:8f:a8:7b:03:2f:
33:30:78:de:e6:9b:ab:7a:7a:70:ce:a6:e9:ab:28:
ba:63:67:d3:ac:d0:fe:77:c2:f2:3b:bd:96:c0:79:
8b:ed:b8:0a:e4:0a:20:cb:50:41:67:21:6f:cf:0c:
96:03:32:37:30:aa:25:48:a7:a3:db:b2:cb:4a:08:
07:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C0:05:CA:CA:0D:A8:D2:19:1F:C1:70:9B:0B:D8:A8:9B:79:6C:CE
X509v3 Authority Key Identifier:
keyid:57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/1cAFysoNqNIZH8FwmwvYqJt5bM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.0.0/22
IPv6:
2a0e:8d80::/29
Signature Algorithm: sha256WithRSAEncryption
4f:d4:d0:02:f1:a8:20:16:ee:8c:57:97:59:47:6d:61:47:c2:
b8:1e:70:44:42:7f:0b:34:dc:23:e2:4a:c5:6a:bd:8a:c6:47:
a1:8d:bf:69:12:1a:6d:16:b7:73:52:5e:a9:29:d2:e0:0e:df:
24:c8:95:79:ba:b9:91:1b:09:3e:75:94:fb:4d:42:48:42:8e:
48:68:60:62:3a:20:72:a1:b7:05:59:71:8b:06:8b:c7:d3:f2:
06:e8:ee:b6:d7:ae:62:9c:17:81:01:de:74:03:d3:ae:82:eb:
e4:72:5d:ea:f1:e5:2e:9e:e2:f6:6c:b4:64:f1:1d:a6:ea:9f:
01:16:eb:00:84:15:90:07:9e:45:b1:29:e8:3a:f7:ea:b3:08:
a9:88:48:8e:b3:76:99:8b:45:da:8e:2d:51:c9:44:f3:37:21:
d6:a8:32:1f:25:ea:b7:4d:07:58:15:a2:30:b2:c1:ca:55:44:
89:a0:63:c0:d1:5d:85:e6:81:43:7d:22:7d:cb:2c:60:f9:8e:
82:4f:4d:77:4f:27:18:87:21:35:bd:93:a0:f1:d4:06:8b:8c:
c0:e4:20:d7:07:3b:dd:38:d2:5b:fd:38:ff:16:62:ed:3f:da:
09:00:03:66:45:e5:78:35:8e:7c:34:58:77:db:4f:de:81:8f:
3c:61:81:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:56:12 2025 by rpki-client