Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/k4opLHE596mDmmleF3IyTuI3JYo.roa
File: k4opLHE596mDmmleF3IyTuI3JYo.roa (raw, json)
Hash identifier: FNLuUm2MqOPcBwdnPkx8HwmBWDjGjRFM7nXpuuRMMIs=
Subject key identifier: 93:8A:29:2C:71:39:F7:A9:83:9A:69:5E:17:72:32:4E:E2:37:25:8A
Certificate issuer: /CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Certificate serial: 019421444917E7F7C29C44A8062585A9BB28
Authority key identifier: 26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/k4opLHE596mDmmleF3IyTuI3JYo.roa
Signing time: Wed 01 Jan 2025 09:48:30 +0000
ROA not before: Wed 01 Jan 2025 09:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 786
IP address blocks: 157.190.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:49:17:e7:f7:c2:9c:44:a8:06:25:85:a9:bb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Validity
Not Before: Jan 1 09:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=938a292c7139f7a9839a695e1772324ee237258a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:93:f4:8f:75:17:94:21:12:34:a3:7c:a0:
e4:81:02:42:36:9b:04:a7:7d:7c:51:d1:a2:98:4a:
b8:a8:aa:6e:70:16:e9:31:4c:5f:ef:43:87:26:b5:
f8:4e:f4:1f:37:bb:c5:e8:40:5f:8a:bf:97:8b:72:
87:87:91:01:c9:8d:9f:23:d8:85:ba:5b:83:cf:3e:
ac:0c:75:d9:1c:ba:69:ee:db:01:6a:98:bd:2a:75:
91:6f:24:3e:99:be:9d:c5:7a:34:8a:36:73:00:e9:
ef:54:c0:cd:99:01:dc:84:a6:aa:48:c8:f7:13:17:
41:5a:ad:04:a3:9f:0f:5b:b1:68:24:67:a2:fa:ca:
bd:1a:ef:5f:1a:78:39:25:a1:3a:5c:e3:ae:e8:aa:
01:b7:38:7d:c8:20:52:48:c9:9a:0d:d2:22:99:7a:
eb:fb:2e:f1:b0:75:68:51:cb:ec:0b:11:e0:7b:6a:
c8:a3:a3:d3:28:d4:a5:03:66:1a:f5:cb:73:66:c5:
18:82:4a:20:30:a1:77:fb:a1:00:88:14:b9:40:f8:
29:ef:cc:e7:fa:ce:15:d0:a4:d4:8c:0a:9d:5f:cb:
ca:53:a1:0a:2a:ca:c7:94:d8:b7:c6:8c:8e:6b:cd:
dc:41:54:85:b0:40:cc:72:d6:f7:84:dd:35:50:e4:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8A:29:2C:71:39:F7:A9:83:9A:69:5E:17:72:32:4E:E2:37:25:8A
X509v3 Authority Key Identifier:
keyid:26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/k4opLHE596mDmmleF3IyTuI3JYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.190.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:1f:62:00:aa:ec:28:bb:1d:39:62:b1:cb:74:df:73:26:4a:
a5:08:9d:e4:86:7d:f1:af:4c:d1:95:e8:20:17:40:6f:2d:1d:
1b:1d:8b:47:0c:fb:bd:6a:e6:07:05:02:d7:02:85:58:79:c8:
0a:d3:d1:1c:93:f5:96:45:bf:72:10:15:c6:6e:37:04:ac:ba:
ee:f2:b6:a6:d6:e9:c1:6b:f3:b2:ea:a3:6b:6e:c7:ed:88:42:
fa:d6:0a:68:61:44:ef:89:0d:d7:7f:3d:13:b1:bd:72:37:d6:
84:4e:c1:af:b3:fe:90:55:f9:2f:ac:68:eb:29:09:9b:39:95:
47:1c:58:ba:a0:da:2a:35:85:9d:f9:a2:49:61:8d:b4:11:55:
e7:83:f0:a5:1a:95:9e:b2:b6:1c:ef:80:2f:ab:d9:67:90:da:
f2:c1:2e:f6:3a:d5:97:90:fa:74:ba:2b:de:8a:f8:13:75:68:
67:5d:3f:af:6a:66:23:01:1a:ed:a4:92:cb:6f:1b:34:7d:e5:
2d:9c:56:20:aa:a7:bd:b8:61:d5:07:53:5b:40:a0:ad:d7:01:
97:36:8d:0e:87:81:fd:bd:72:06:2c:62:05:c5:0e:8a:a5:f0:
91:de:db:4d:ee:a1:37:36:bc:d3:0f:74:ff:d4:60:64:c5:30:
6d:a4:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:32 2025 by rpki-client