Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/4NKq_KYwCh8_wTbK61NtPt76P8I.roa
File: 4NKq_KYwCh8_wTbK61NtPt76P8I.roa (raw, json)
Hash identifier: mmA3nOgLzhGsU/7y4XASj7EI9JkBDcrnGGIkqWDOAYQ=
Subject key identifier: E0:D2:AA:FC:A6:30:0A:1F:3F:C1:36:CA:EB:53:6D:3E:DE:FA:3F:C2
Certificate issuer: /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial: 01942825958AAA8BB3901006C53CAFFE44B2
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/4NKq_KYwCh8_wTbK61NtPt76P8I.roa
Signing time: Thu 02 Jan 2025 17:52:19 +0000
ROA not before: Thu 02 Jan 2025 17:52:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 378
IP address blocks: 132.74.0.0/15 maxlen: 15
132.74.0.0/16 maxlen: 16
132.75.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:95:8a:aa:8b:b3:90:10:06:c5:3c:af:fe:44:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Validity
Not Before: Jan 2 17:52:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0d2aafca6300a1f3fc136caeb536d3edefa3fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:92:c1:d1:58:be:3a:34:2f:1b:65:07:d6:1d:
3a:d4:f6:23:dc:bb:40:68:71:1d:0c:c7:3d:71:be:
43:e9:5a:72:e2:6a:aa:f7:01:0b:b9:73:10:fe:48:
a5:db:93:9e:59:b1:69:2c:be:a8:9b:e7:a7:cb:f4:
24:4c:4d:f8:b3:1a:38:ba:48:22:50:99:e0:b6:ab:
1e:a6:5c:42:dc:e2:d8:cc:da:76:ba:2e:89:ae:d9:
37:a8:23:b5:8d:c1:60:26:60:a6:bc:8a:76:ba:09:
8f:b1:32:d3:ba:dd:d0:c4:f2:96:d5:b3:e5:8a:fa:
94:24:4e:85:b3:ab:6b:c3:77:69:4b:29:dc:45:d8:
02:e1:c7:66:e5:b7:c4:db:b7:03:38:bd:2e:bd:58:
26:36:14:4e:14:6d:50:c6:a5:b6:0b:fd:4c:a7:c2:
63:64:cf:94:ae:59:f0:e1:8e:bd:86:fe:0d:c4:d9:
6a:9e:86:02:65:28:5c:bd:0b:ce:77:47:10:be:e1:
ca:2d:89:b9:3b:f6:33:9a:f4:e8:ec:57:4e:dc:79:
76:2f:fa:31:2b:95:6f:85:2a:18:89:24:23:0e:67:
8c:54:b1:aa:65:1e:b5:45:48:34:35:90:d1:b1:bc:
2f:20:0b:4c:a3:c5:b2:5a:f9:7b:cf:bc:f9:bd:b0:
ae:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D2:AA:FC:A6:30:0A:1F:3F:C1:36:CA:EB:53:6D:3E:DE:FA:3F:C2
X509v3 Authority Key Identifier:
keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/4NKq_KYwCh8_wTbK61NtPt76P8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.74.0.0/15
Signature Algorithm: sha256WithRSAEncryption
27:90:ab:26:d4:86:73:5c:bf:de:0a:e8:6e:cb:42:02:f8:ec:
8b:f0:fb:cc:63:0f:2d:c5:84:7a:cf:b1:0e:a2:7d:89:bf:5a:
5f:ac:15:b6:02:6f:0d:2d:b5:14:ed:bb:d9:35:52:46:68:72:
79:bb:9f:4f:c7:9b:d7:84:a0:63:ba:ab:52:96:5e:0f:ee:e2:
b2:69:3e:a4:52:7e:50:21:8e:c5:82:71:eb:2c:e5:3c:57:b1:
61:07:42:61:42:79:c1:04:a0:60:b2:26:44:74:be:0a:4e:2b:
c7:a1:55:85:94:f9:75:64:ae:de:bd:2d:de:0a:9f:5a:e8:9b:
1b:64:5f:fa:b4:02:e0:d0:7c:ed:19:d4:fd:b3:c3:27:b9:89:
05:e9:d5:c0:c7:3e:9b:3c:27:d2:7b:18:6c:7c:89:4a:34:d8:
8a:26:9e:db:9a:d8:ef:62:4b:50:71:6a:9d:cb:43:cd:54:64:
6d:95:5f:ea:8e:21:f4:3a:5a:d7:2e:cd:37:fc:63:81:95:76:
9c:13:a8:04:89:4f:6f:8f:52:7d:c5:ab:34:84:90:9f:6d:3e:
10:21:00:d8:55:89:7f:f5:2b:5e:52:3f:b8:15:40:71:2d:01:
e7:eb:82:90:a4:ab:b6:ec:80:1b:c8:5e:1a:df:5a:22:13:90:
f5:24:48:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:11 2025 by rpki-client