Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/iO_CtKh3Y4ZrGmH0YqMWnYKlZNg.roa
File: iO_CtKh3Y4ZrGmH0YqMWnYKlZNg.roa (raw, json)
Hash identifier: P3pxw91zYoBZsgP5Nx/MtBU2YXLYa7WtbiOEl2i4Gb0=
Subject key identifier: 88:EF:C2:B4:A8:77:63:86:6B:1A:61:F4:62:A3:16:9D:82:A5:64:D8
Certificate issuer: /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial: 019427484C81EA9FFDF2EB5B4CE508930B41
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/iO_CtKh3Y4ZrGmH0YqMWnYKlZNg.roa
Signing time: Thu 02 Jan 2025 13:50:37 +0000
ROA not before: Thu 02 Jan 2025 13:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 157.5.48.0/21 maxlen: 21
157.5.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4c:81:ea:9f:fd:f2:eb:5b:4c:e5:08:93:0b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Validity
Not Before: Jan 2 13:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88efc2b4a87763866b1a61f462a3169d82a564d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:aa:b0:da:55:f6:53:ce:b4:35:72:9e:6b:5e:
ea:91:05:e2:8b:7f:4c:7e:2a:70:fd:81:44:50:2d:
11:4c:9d:70:5b:55:a4:aa:9d:6e:e8:dc:88:00:2f:
73:00:c7:a4:1f:99:c6:71:1e:01:74:35:12:ae:47:
6b:16:80:31:cb:fc:da:03:7d:2a:44:2e:b3:11:2e:
24:5e:ab:a1:22:c4:ac:7c:75:10:38:26:2c:43:23:
ce:4a:39:06:d5:85:67:49:64:ba:39:8f:95:b8:61:
7e:f6:42:38:92:75:53:50:6e:0c:61:a1:aa:36:d5:
7d:18:69:14:3f:6c:fe:18:aa:06:60:33:c0:54:e7:
eb:16:08:ab:78:a7:1b:b4:5a:31:5b:f8:36:a5:8d:
a7:a6:22:b5:f5:55:2f:69:7d:5d:12:0b:80:bb:90:
e6:3f:9f:81:a1:31:91:d1:cb:e3:d1:ff:1c:91:fb:
2a:34:4c:8e:a4:8f:9a:85:f5:1c:c6:43:6e:22:62:
4c:d5:71:d9:b4:b0:81:b1:14:32:1e:96:75:3b:e0:
37:c0:f1:66:37:e2:d5:24:bd:af:a0:c2:15:6b:ef:
b8:94:08:85:1c:40:64:be:38:ef:88:5f:f8:a0:28:
61:15:69:6e:3c:92:71:4d:71:b2:f0:97:f2:fb:60:
a0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EF:C2:B4:A8:77:63:86:6B:1A:61:F4:62:A3:16:9D:82:A5:64:D8
X509v3 Authority Key Identifier:
keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/iO_CtKh3Y4ZrGmH0YqMWnYKlZNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.5.48.0/20
Signature Algorithm: sha256WithRSAEncryption
63:f2:10:d1:a9:57:55:cd:47:02:70:8f:9a:27:13:fd:97:da:
e0:bf:d9:e9:ce:7e:1a:b6:83:07:8d:69:d6:4f:55:54:0c:af:
4f:2c:6f:67:7a:21:9a:d5:8b:87:b8:6e:4f:b1:6f:4b:6b:6e:
49:f5:fa:fd:f1:ca:5b:26:dc:47:d7:dd:9e:c5:d2:5f:c9:6b:
93:c9:70:5d:cd:23:0b:53:b9:d1:2c:fa:da:21:f7:05:b9:77:
78:c1:92:31:d8:59:cd:55:40:44:27:34:b4:d4:06:d6:49:5d:
39:36:d2:01:54:4d:a3:23:74:a8:17:90:4a:2a:17:20:d4:65:
d7:97:a4:23:ba:e0:29:36:ad:19:9d:92:55:19:48:d4:60:93:
8a:2b:af:5a:ec:00:c8:8e:44:e7:44:68:7c:e3:18:79:e3:67:
26:33:05:4d:18:84:5c:86:e3:33:5c:cf:56:5b:4a:e1:6c:25:
83:8b:2d:04:78:d1:3f:3f:07:b5:3c:22:4c:c2:98:b4:ac:6d:
72:02:8f:38:1c:ca:7c:ae:64:a3:77:64:88:90:6c:52:5f:d7:
2c:fe:90:c3:05:30:85:24:a3:93:f4:8f:cc:80:1e:48:ff:47:
4e:22:1f:f0:c7:21:f1:5c:9a:f4:2b:02:50:3d:c9:b1:78:88:
d7:8e:f6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:23 2025 by rpki-client