Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/DIgxiDivQ3J12DTsz16bG9BGpKM.roa
File: DIgxiDivQ3J12DTsz16bG9BGpKM.roa (raw, json)
Hash identifier: ipoR7K+Qag5vPNI/tEX1tA3BB9jHVP98Tf9P91MGtOo=
Subject key identifier: 0C:88:31:88:38:AF:43:72:75:D8:34:EC:CF:5E:9B:1B:D0:46:A4:A3
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019420D650778766F6963FE733D5636278C6
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/DIgxiDivQ3J12DTsz16bG9BGpKM.roa
Signing time: Wed 01 Jan 2025 07:48:23 +0000
ROA not before: Wed 01 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47647
IP address blocks: 78.130.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:50:77:87:66:f6:96:3f:e7:33:d5:63:62:78:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c88318838af437275d834eccf5e9b1bd046a4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:fb:7d:18:40:b1:d2:f8:4e:89:46:60:33:
bb:23:42:ae:ca:21:7b:ec:ce:5e:73:08:fe:6e:36:
5d:4d:2e:af:4f:83:74:29:2e:ea:e1:b6:a2:f0:17:
88:32:24:ba:e2:6f:08:3b:35:e0:9f:cd:85:53:20:
e7:ca:e4:e5:90:6c:85:c6:ae:ee:c9:96:fd:7e:12:
3c:44:f2:c7:4c:b2:1b:2a:ee:d2:82:15:48:c1:a6:
ed:02:48:e6:10:68:48:0a:a0:7f:f7:6f:1d:12:ad:
92:7e:5e:e9:c0:f3:b9:bc:1d:4d:88:38:6c:dc:9e:
0b:7d:c1:ac:ce:07:9a:55:7d:74:48:02:45:53:6b:
bf:36:70:64:4c:85:52:e2:6d:46:e5:c0:75:fc:ef:
6e:d9:1e:24:12:e0:89:4a:73:dd:7b:cf:cf:d1:99:
ec:a4:5c:92:10:ce:7b:f7:00:c4:fb:22:dc:a5:d4:
ea:7a:30:5f:91:6c:aa:2c:29:0a:4e:d5:48:6f:d0:
c9:d8:58:75:91:de:6c:3d:6b:6a:55:55:e9:80:54:
c1:cd:71:a4:42:83:15:d4:41:30:14:51:90:48:b9:
48:c5:38:fc:8c:a6:e0:f1:ff:72:36:e1:fe:77:88:
9e:82:f3:cf:fa:be:8b:f9:35:f7:02:de:a5:df:bc:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:88:31:88:38:AF:43:72:75:D8:34:EC:CF:5E:9B:1B:D0:46:A4:A3
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/DIgxiDivQ3J12DTsz16bG9BGpKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.130.143.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f9:2a:f6:20:67:22:29:e1:79:74:9b:3f:39:f2:9d:54:0f:
15:35:da:f7:2e:1d:31:47:aa:61:1a:c2:a8:ff:ef:41:02:ad:
f1:8c:87:44:ed:33:a8:2c:8e:1a:8d:3d:c3:a4:1b:a8:a1:67:
e9:0c:e0:7e:52:b1:3f:65:07:a1:76:fb:75:af:55:c7:30:2b:
de:5c:fa:59:01:86:76:1e:1d:92:82:57:b0:3c:4d:2d:4e:13:
5a:dd:57:35:a3:cb:20:6a:bc:f3:b7:68:12:b9:77:04:ae:04:
55:4d:dd:dc:ca:a3:00:34:6a:b1:37:e4:57:ed:99:72:ec:4a:
ad:53:b6:24:07:17:7a:e1:b4:ed:72:e4:92:15:36:20:53:63:
4d:a6:c4:b7:be:62:ca:1e:28:3c:b9:79:7a:a2:be:e1:2c:c2:
64:f2:33:3c:36:94:87:d9:06:62:b1:95:66:50:a9:8c:4d:74:
bb:db:b6:e1:f2:b2:17:c1:1a:d0:c3:f0:4d:bf:6f:a5:70:2b:
ed:b2:07:75:0f:09:e6:fd:c1:f0:80:09:70:9f:62:c7:d1:e1:
54:a1:f9:d0:3d:35:51:e5:74:23:85:55:c6:a1:38:52:42:83:
f5:c8:a4:26:05:30:93:de:0a:d0:bd:19:af:22:27:15:af:64:
7f:a1:a1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:16:50 2025 by rpki-client