Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/xzA5d-E1vgeb4mwlvmzNBazR01w.roa
File: xzA5d-E1vgeb4mwlvmzNBazR01w.roa (raw, json)
Hash identifier: ajfP28ApDq4Q5y/sbVJlhsT7w2HrFwDNTtJP+3l1w9U=
Subject key identifier: C7:30:39:77:E1:35:BE:07:9B:E2:6C:25:BE:6C:CD:05:AC:D1:D3:5C
Certificate issuer: /CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Certificate serial: 019420684563C6C215A95B8DD033171F46B7
Authority key identifier: 76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/xzA5d-E1vgeb4mwlvmzNBazR01w.roa
Signing time: Wed 01 Jan 2025 05:48:11 +0000
ROA not before: Wed 01 Jan 2025 05:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211329
IP address blocks: 147.236.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:45:63:c6:c2:15:a9:5b:8d:d0:33:17:1f:46:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7303977e135be079be26c25be6ccd05acd1d35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:e5:fe:43:ae:5a:8f:c9:cd:8a:30:a9:b6:
a2:d6:92:1f:0d:5b:b8:c7:15:6d:4c:29:85:3e:3b:
96:7b:41:c3:2c:e2:76:df:5c:ab:df:4e:2c:85:d2:
30:9c:64:fb:d6:d4:f7:8f:88:0c:30:3f:ef:5a:8d:
ec:0a:54:85:bb:9e:6a:48:a1:d0:8c:eb:ca:8a:35:
9b:71:64:23:d6:33:e6:d7:06:93:1b:0e:81:64:54:
61:04:f9:31:bb:d9:7b:9c:c5:1b:1b:7e:75:e2:66:
69:4d:b5:86:83:58:74:35:48:e5:5e:5d:cb:85:00:
04:f8:78:55:ea:6b:38:20:8f:0d:a8:95:d9:c2:1c:
7d:35:97:3c:62:94:a7:1c:d5:cf:05:8f:08:23:79:
8e:df:1c:fd:bc:0f:ce:8a:65:e0:77:b7:80:13:a6:
df:91:c0:3c:5e:02:45:ca:b9:f6:ae:78:d7:e5:15:
7a:97:89:25:9d:f9:f3:9e:13:07:8e:97:71:44:0f:
12:e3:77:45:cf:5a:66:36:fb:ea:35:a4:a2:56:7a:
f0:3d:d9:55:8a:cc:f2:d9:2f:10:23:74:6d:1c:15:
fc:cf:20:0e:7e:1f:1a:89:61:78:d9:66:61:d7:1f:
6e:3d:27:fd:f3:70:09:0b:45:b7:d1:58:f7:3c:6a:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:30:39:77:E1:35:BE:07:9B:E2:6C:25:BE:6C:CD:05:AC:D1:D3:5C
X509v3 Authority Key Identifier:
keyid:76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/xzA5d-E1vgeb4mwlvmzNBazR01w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.236.192.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:de:76:56:3f:08:39:c0:4e:f4:11:34:d9:79:6b:45:ad:48:
d8:90:64:56:80:06:50:21:3d:c9:6c:97:66:7d:b8:a3:c4:09:
17:d8:9e:ad:95:e1:0c:60:b4:c1:4a:74:31:6b:63:b4:bd:39:
5c:ce:1e:da:42:28:3d:24:27:d8:6d:8c:13:e4:c8:bb:af:1f:
ee:d8:0b:7e:43:22:b5:16:4e:35:fe:b6:8d:71:18:f2:44:e5:
90:29:e7:88:85:91:dc:0e:6b:29:9e:43:46:da:86:bd:ff:ea:
0f:4c:a5:4b:75:1a:7f:31:d2:0c:67:24:ea:46:ca:c6:35:ed:
58:16:a2:c8:e6:a5:b9:93:56:dd:9c:4d:80:d7:0b:87:6a:05:
1f:f9:3c:40:b9:ab:66:3b:4e:33:41:eb:c6:07:65:9a:10:79:
43:2a:ef:2e:fd:67:f2:5e:68:53:02:f5:fc:3d:0e:20:b0:74:
3d:c9:ec:fd:76:ed:67:86:7f:ed:6a:21:da:ac:59:ef:d8:a4:
1f:3a:cd:f3:89:f2:8b:c8:05:90:44:41:5c:f2:d3:2e:5a:41:
7b:d1:0c:90:09:50:31:0e:f1:60:35:40:f8:2c:eb:cd:fe:81:
ce:e9:86:4f:be:42:46:94:1b:2d:88:2d:09:61:f7:b6:c9:b0:
f8:c9:5b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:44 2025 by rpki-client