Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/w4kmP7B_Fxki60Rm8oVTnhcxqxA.roa
File: w4kmP7B_Fxki60Rm8oVTnhcxqxA.roa (raw, json)
Hash identifier: FYmhQk/RB/mbvwG20mFIyTdb7vP2YfXGbmhSYFbiUzc=
Subject key identifier: C3:89:26:3F:B0:7F:17:19:22:EB:44:66:F2:85:53:9E:17:31:AB:10
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 01948E5CFE8AEF4D4A436E86E17C2FC713FB
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/w4kmP7B_Fxki60Rm8oVTnhcxqxA.roa
Signing time: Wed 22 Jan 2025 14:14:06 +0000
ROA not before: Wed 22 Jan 2025 14:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 5.134.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:5c:fe:8a:ef:4d:4a:43:6e:86:e1:7c:2f:c7:13:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 22 14:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c389263fb07f171922eb4466f285539e1731ab10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:de:2a:31:47:fe:ca:b9:76:bb:4d:86:14:
13:f1:54:f9:51:f1:e2:bd:40:a2:d9:e5:93:14:06:
71:ff:a9:30:1f:71:26:f3:17:2a:af:f5:ef:8e:32:
11:a9:8c:c8:38:e5:d0:d8:10:97:5b:24:25:71:07:
c7:9e:aa:a5:bc:4d:fb:54:e3:6b:47:28:79:c5:52:
e8:3e:5c:c6:17:29:10:d2:0a:de:92:c0:e2:07:76:
c5:e9:5a:db:c5:1f:42:a4:9c:26:9a:ea:de:cc:fa:
c4:da:9d:15:fb:1b:7c:76:36:67:2e:e7:dd:92:42:
1c:a2:d0:89:f2:5e:74:d3:85:27:91:fa:ee:97:83:
ae:81:94:75:ba:ff:55:1c:88:9e:05:73:47:3f:5a:
2a:8a:75:67:34:8b:78:f2:d1:37:15:26:6c:c4:06:
7e:41:04:f5:db:f3:c1:e3:91:36:ad:f0:ff:eb:12:
41:b6:40:ed:19:8a:45:35:20:75:d4:6c:9b:35:d6:
da:c1:8a:82:df:b0:31:8f:9f:ea:34:fa:21:32:6e:
38:e6:8c:71:13:79:8d:b2:49:31:46:42:61:22:f7:
0c:6b:97:88:3c:6e:8f:60:88:7a:df:e5:64:2d:69:
46:4e:7d:b0:f5:db:3f:e6:44:21:5f:3c:db:25:e9:
4c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:89:26:3F:B0:7F:17:19:22:EB:44:66:F2:85:53:9E:17:31:AB:10
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/w4kmP7B_Fxki60Rm8oVTnhcxqxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.80.0/22
Signature Algorithm: sha256WithRSAEncryption
75:6c:dc:f3:b6:ef:4e:5a:9f:3e:01:5d:0d:dc:d0:fc:8a:f3:
d8:57:a1:e8:66:5a:a7:ce:d3:73:29:d4:79:14:b4:64:8e:6e:
82:2d:3d:8d:97:48:63:65:b8:ad:e3:7e:ce:d7:87:4b:97:d6:
d3:0f:ff:91:3a:fe:1a:45:78:a1:2b:eb:aa:2f:d5:0d:3c:a0:
f1:a5:87:b2:83:76:bd:5d:73:0c:06:39:3a:be:a3:00:f7:64:
ef:0a:28:bb:08:e0:f9:b8:3a:d0:fc:a2:34:30:33:f9:df:d8:
64:8b:7d:56:f2:a0:b0:ec:c5:b1:24:9c:ef:32:a8:96:b5:58:
f6:26:4b:f0:8e:a6:69:68:28:67:29:17:2e:7a:ec:67:26:c5:
1b:d3:4f:9c:47:7a:f1:7f:5a:11:43:c3:b1:40:88:38:83:17:
db:54:68:33:df:c0:dd:8e:78:f8:77:66:b7:e8:91:ed:5c:d1:
7a:da:e8:bc:0e:da:0a:1f:14:36:f7:92:a6:21:53:3f:4d:d6:
e9:72:56:2e:a4:69:91:31:4b:44:62:2c:f0:39:1b:74:70:26:
b8:65:94:fe:a6:b8:f9:57:f4:8c:ea:1e:a3:d4:3d:52:68:3a:
64:bf:c3:c2:1a:ce:a2:da:c5:42:ad:86:f3:b9:f9:09:09:c8:
0d:3f:93:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:19 2025 by rpki-client