Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/t0oYcll8PI4dP_5gDrpVqJ6D9bo.roa
File: t0oYcll8PI4dP_5gDrpVqJ6D9bo.roa (raw, json)
Hash identifier: ZFjxOlyDciCJjlrX2W0RSeB3N5wBNwxTEiHBjcHtR6s=
Subject key identifier: B7:4A:18:72:59:7C:3C:8E:1D:3F:FE:60:0E:BA:55:A8:9E:83:F5:BA
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019420D655187F8B1D25A961C77FD85FA307
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/t0oYcll8PI4dP_5gDrpVqJ6D9bo.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200361
IP address blocks: 94.155.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:55:18:7f:8b:1d:25:a9:61:c7:7f:d8:5f:a3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b74a1872597c3c8e1d3ffe600eba55a89e83f5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:9c:f8:ed:bd:c7:b8:69:55:b0:2b:73:74:
45:ae:2d:31:c6:06:97:ef:e9:24:3a:64:5a:67:18:
e1:e0:8a:9e:5c:6d:73:66:55:5d:1c:87:86:76:f3:
0e:da:98:ec:34:39:0f:cf:7e:32:84:81:a2:c9:e7:
73:9d:fd:94:76:cb:ff:03:5b:8d:b1:b6:2f:b5:f8:
3f:e3:93:c6:ff:02:10:bf:35:e6:70:69:56:99:1c:
ad:f3:7b:57:c0:72:69:be:8f:cd:eb:f2:91:5f:ee:
bf:a1:7b:f6:88:53:e8:69:86:4f:c4:50:a0:b0:e5:
29:fe:b7:30:5a:c1:dd:8c:c5:ac:ed:ad:3a:7a:df:
8b:ea:00:af:03:40:fb:20:76:ae:3e:55:5f:3f:8a:
a4:6c:39:5a:ca:ae:2d:6a:10:0c:15:0f:28:97:55:
ab:eb:dd:62:28:b3:f4:96:fe:78:46:e6:1d:6a:d4:
26:ab:f6:74:6d:3c:d1:ff:be:e0:21:01:cb:7f:69:
17:75:62:dd:3c:31:90:cb:bb:56:71:ae:77:eb:12:
54:8a:c3:df:cd:6f:59:41:a9:d7:69:80:ff:ec:74:
81:d6:12:fe:9c:bb:ef:1c:4b:c2:d5:c0:15:ce:b8:
b1:cc:74:3b:0e:dc:8e:e7:95:a6:8a:03:3a:04:7a:
a5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4A:18:72:59:7C:3C:8E:1D:3F:FE:60:0E:BA:55:A8:9E:83:F5:BA
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/t0oYcll8PI4dP_5gDrpVqJ6D9bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.155.148.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:06:c8:49:10:6e:a3:21:70:92:45:41:d2:9e:5b:3c:e2:c6:
ef:45:7d:5d:a6:5a:5e:35:10:23:c7:98:45:50:69:f7:44:f1:
99:d1:25:3a:ae:f8:bb:8c:bb:13:ad:77:e2:a0:a3:f7:d4:38:
7d:6f:04:ea:23:c9:6f:ef:c9:18:0f:12:9f:38:b0:cc:94:8c:
78:6f:25:09:49:03:bd:95:00:fd:e3:82:b0:72:7f:d4:ed:35:
95:8f:54:fe:f4:f5:65:19:51:b0:66:1b:4e:cf:58:ba:8d:f0:
71:38:6e:62:27:c0:5e:f9:95:63:bc:60:3a:ff:15:d9:7f:d6:
25:2f:f4:5f:85:75:8a:d8:f6:88:16:29:20:12:30:82:32:16:
a7:f0:cd:c9:78:1b:b7:ee:02:1e:f4:99:ea:52:be:c5:a9:b9:
66:18:3d:7c:03:9e:15:aa:4a:04:7b:f9:ac:01:4b:7c:e4:39:
14:4c:3d:d2:27:3d:9f:a1:c6:6a:70:bb:a8:51:6c:89:a5:c1:
c9:8c:25:e4:35:d6:fa:19:88:67:a6:3c:44:ae:2e:6f:79:eb:
ff:2b:5b:6a:b2:c7:2f:29:04:7c:2a:1b:2f:7a:69:2b:12:95:
8c:9e:3d:34:3e:ce:4c:8a:c6:46:5e:79:6a:dc:b4:f7:32:e2:
ad:5d:e1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:21 2025 by rpki-client