Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/3-WbPmOyw0HV_1ugCny-yUstkRw.roa
File: 3-WbPmOyw0HV_1ugCny-yUstkRw.roa (raw, json)
Hash identifier: aun6630uEBgwZcScVSyEeXVbUmLAr/u+ZWR8HUpk+mE=
Subject key identifier: DF:E5:9B:3E:63:B2:C3:41:D5:FF:5B:A0:0A:7C:BE:C9:4B:2D:91:1C
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BD4B07DCE18965FA553B89C5409C5
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/3-WbPmOyw0HV_1ugCny-yUstkRw.roa
Signing time: Thu 02 Jan 2025 09:49:48 +0000
ROA not before: Thu 02 Jan 2025 09:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29007
IP address blocks: 5.226.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d4:b0:7d:ce:18:96:5f:a5:53:b8:9c:54:09:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfe59b3e63b2c341d5ff5ba00a7cbec94b2d911c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c3:3b:f8:29:89:ff:e1:3a:be:e1:92:51:24:
dc:2b:d3:e6:4f:d9:26:99:43:5c:9d:81:63:5b:cd:
22:1d:cc:ea:b3:45:c2:b6:44:1c:6f:da:01:33:1d:
96:b8:de:8c:69:c1:90:e2:21:95:94:0e:8a:dc:d5:
17:10:fc:be:90:bc:54:ed:06:3a:7a:68:3c:8c:5c:
c0:62:b7:c5:48:69:a8:0b:56:c9:a8:2a:69:2c:03:
2b:3c:41:b4:76:47:33:9f:4b:87:6c:68:17:e0:dc:
83:4c:1e:69:32:0f:f1:b0:4c:97:96:40:9c:a5:82:
e5:2d:24:98:01:f3:51:80:d9:8c:7b:d5:ee:a1:28:
dc:62:20:be:cc:6d:81:8a:28:09:b7:37:82:9a:3c:
e7:d3:c5:eb:d2:7f:da:7f:f3:75:7b:2d:d1:ba:83:
4d:8d:15:27:b7:f7:d4:90:79:32:b4:eb:bd:99:ed:
b7:c1:83:1e:01:6c:32:14:e3:49:ab:bd:e0:72:89:
1d:0f:1c:76:da:68:99:fe:82:16:e3:4e:5a:38:0d:
c7:47:d1:dc:96:ae:17:48:19:73:01:8b:42:7e:64:
c7:92:99:3d:db:ca:b9:cb:3f:44:69:37:8e:32:81:
ea:1a:d7:37:65:99:4c:a9:5d:55:29:84:cf:c6:eb:
15:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E5:9B:3E:63:B2:C3:41:D5:FF:5B:A0:0A:7C:BE:C9:4B:2D:91:1C
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/3-WbPmOyw0HV_1ugCny-yUstkRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.128.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:c4:ad:db:e4:b0:39:e9:5c:19:c7:a7:67:6f:c8:14:fd:67:
90:80:a8:fd:22:bb:e5:cf:48:e6:f9:1a:1c:41:95:be:c4:53:
82:33:c7:be:51:b3:ae:ff:91:bf:5d:26:19:c1:ae:6f:0c:3f:
ea:85:39:2f:94:83:7f:df:fa:42:df:ae:c0:25:d4:f9:20:9d:
5c:2d:2c:05:4f:e4:46:91:26:e2:47:bf:f4:9d:4b:9b:fc:45:
e2:21:4d:a7:3e:e9:39:06:4c:9a:e2:26:d5:70:e0:40:20:95:
53:f2:95:0d:32:a2:69:13:c2:d0:44:23:77:5f:3b:6c:0f:1a:
2a:70:d3:8a:75:c9:5c:7d:f5:8b:2d:1d:d3:5e:c2:62:2f:07:
db:09:a4:ef:3d:47:a9:2b:83:84:9b:87:12:b0:fc:32:92:49:
93:b4:22:be:a8:e2:1b:cb:10:9e:b3:da:3e:2a:21:d4:1e:42:
4a:ca:a7:04:90:43:a0:43:dc:e0:35:69:63:29:82:30:f2:66:
f0:83:5a:df:e5:23:72:e7:c3:9a:5f:03:39:4f:6f:a8:52:0a:
a0:4b:ac:ab:e2:69:28:27:b4:33:a4:3e:f2:12:90:49:7e:d5:
71:2d:ee:5d:c2:d7:c9:3d:c2:65:58:a9:95:f0:d9:91:b1:97:
d5:1f:cf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:26:13 2025 by rpki-client