Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/pV4EoMyLhIl8Wki8fRcVALT_H0c.roa
File: pV4EoMyLhIl8Wki8fRcVALT_H0c.roa (raw, json)
Hash identifier: wJ9IYCdBLmtOZE5zQTUngRrQwmEhQGL4Uh7Y6dIL3Jk=
Subject key identifier: A5:5E:04:A0:CC:8B:84:89:7C:5A:48:BC:7D:17:15:00:B4:FF:1F:47
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 019420D5BB7E5E4E1E59AF5EC438228733F6
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/pV4EoMyLhIl8Wki8fRcVALT_H0c.roa
Signing time: Wed 01 Jan 2025 07:47:45 +0000
ROA not before: Wed 01 Jan 2025 07:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15699
IP address blocks: 194.36.122.0/23 maxlen: 32
194.36.138.0/23 maxlen: 32
195.162.18.0/23 maxlen: 32
2a0a:1680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:bb:7e:5e:4e:1e:59:af:5e:c4:38:22:87:33:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Jan 1 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a55e04a0cc8b84897c5a48bc7d171500b4ff1f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:8f:20:01:d4:fe:53:37:b7:b6:c7:25:c0:
65:9c:4e:05:6d:e6:35:a6:6e:59:97:f5:01:6f:52:
83:34:e5:ed:b3:63:17:77:c6:6e:83:76:7d:c7:77:
d2:d6:0c:f2:dd:ca:70:a6:67:7a:b4:a1:cd:16:1d:
4d:b9:fa:3d:5c:ac:f8:74:18:33:88:f3:b3:02:2f:
38:d4:d9:84:e7:20:62:20:29:ce:09:be:50:dc:e3:
51:f1:a9:19:48:7a:02:dc:c4:65:5f:55:8f:7d:53:
89:b7:3d:ab:d5:15:72:40:e6:0c:e7:6b:a7:d6:25:
b1:fa:75:17:af:90:69:b9:02:98:2f:e6:49:c8:3f:
9d:fb:12:d1:27:f2:99:9e:38:97:6c:ff:b4:55:20:
0f:d5:bd:f9:49:df:e4:15:64:e4:e4:33:24:ab:b2:
30:5c:32:1e:43:51:9b:65:6f:da:a1:f8:f8:ae:98:
80:19:0a:4c:d3:be:38:b1:2f:74:8a:ca:78:4a:94:
fc:c1:17:11:aa:6e:49:04:ee:c8:81:33:c7:00:d6:
80:7f:79:32:1d:1c:1b:48:b9:2e:64:9c:43:11:af:
18:bd:b9:cf:c4:cb:c9:3d:ab:f0:58:0f:68:6e:af:
57:74:ad:2c:4a:c2:12:9f:f3:47:3c:94:a0:e4:3f:
6b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5E:04:A0:CC:8B:84:89:7C:5A:48:BC:7D:17:15:00:B4:FF:1F:47
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/pV4EoMyLhIl8Wki8fRcVALT_H0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.122.0/23
194.36.138.0/23
195.162.18.0/23
IPv6:
2a0a:1680::/29
Signature Algorithm: sha256WithRSAEncryption
97:59:d9:60:cd:22:00:a6:89:d7:89:27:fd:ed:52:70:03:42:
a8:91:55:ad:1d:0d:4f:85:a3:5c:4e:c3:5a:a9:0f:2b:48:ec:
12:cf:17:1d:f5:84:4b:85:68:2a:30:fa:46:4b:79:76:6f:1d:
4b:a1:ca:40:0c:34:bc:c5:aa:d2:af:36:41:5f:5c:d5:14:81:
b2:88:0e:cc:c5:d9:31:ba:31:15:65:f6:44:e2:15:25:e5:69:
e5:fb:84:f6:ef:24:5a:9a:cb:d1:9b:e2:22:63:24:c1:3b:f6:
49:6f:25:85:78:e7:94:98:e9:a9:a4:46:61:62:79:41:d8:52:
45:5a:28:23:f1:f5:e9:14:87:ae:8f:a8:46:af:1d:5e:bd:93:
e0:28:33:04:be:1d:a0:82:0a:c5:2d:e4:fe:e9:d9:30:8f:b1:
37:99:3a:e3:31:67:5f:7a:ba:dc:1f:40:54:3a:4a:d3:ce:25:
88:dd:e5:ae:0a:39:84:f5:2a:60:6e:f4:03:67:d9:4d:f4:11:
67:6e:de:40:dd:76:af:28:3b:8d:e0:7e:41:5d:58:9a:d8:ad:
5f:7d:b3:6d:a2:be:de:60:6d:92:03:ac:be:47:22:f9:57:54:
fc:27:01:c6:a2:b9:50:26:b2:ba:71:e1:a8:ca:a3:d7:56:8e:
f3:84:50:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:30:50 2025 by rpki-client