Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/RopsaNkgpHpRL2oKJRAlnWazjYk.roa
File: RopsaNkgpHpRL2oKJRAlnWazjYk.roa (raw, json)
Hash identifier: hePdDKhYq7jZJBW0X9xyUlZ0MuRDMypI160xH9eb0s0=
Subject key identifier: 46:8A:6C:68:D9:20:A4:7A:51:2F:6A:0A:25:10:25:9D:66:B3:8D:89
Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd
Certificate serial: 01942444C797DE9BA5561FE4EE8326CA83B0
Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/RopsaNkgpHpRL2oKJRAlnWazjYk.roa
Signing time: Wed 01 Jan 2025 23:47:54 +0000
ROA not before: Wed 01 Jan 2025 23:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210583
IP address blocks: 176.116.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c7:97:de:9b:a5:56:1f:e4:ee:83:26:ca:83:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd
Validity
Not Before: Jan 1 23:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=468a6c68d920a47a512f6a0a2510259d66b38d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:a5:95:f7:53:6f:a5:43:a4:31:dc:a4:c9:
06:36:0f:c1:b1:15:b8:22:07:5b:fc:70:7c:26:d3:
6b:08:d0:28:86:76:9e:7d:c1:26:21:5e:3f:a4:02:
fa:ed:df:69:f2:99:0c:0d:57:09:30:3f:31:0a:10:
8a:47:76:15:d2:01:2a:86:c7:bf:74:0a:d4:d6:51:
0a:ee:cb:39:f5:e3:c4:5a:79:b3:11:7d:ff:2b:6f:
ad:cd:d6:43:a1:9b:61:68:29:62:40:7c:f3:f7:1e:
d7:72:99:32:be:02:f8:b4:14:95:c8:ee:26:5b:98:
76:a0:0a:bb:1d:06:cb:79:0a:f8:e8:24:5f:88:49:
80:bc:19:01:48:60:ec:49:48:21:38:fe:33:5f:65:
5b:de:c5:41:69:a8:bb:bd:6c:cc:2a:61:75:98:16:
3d:8b:9c:61:4f:83:1b:d5:85:de:72:10:73:f0:92:
a7:df:c8:3f:a7:fa:ee:71:7b:87:3a:f8:34:77:fd:
50:a7:12:95:a8:fc:5d:ae:94:0f:b8:28:67:3c:7b:
32:67:c0:15:81:6d:e3:fe:9c:4b:7f:88:a7:94:8d:
ba:2a:fd:c1:64:ff:a4:1c:84:de:a0:85:d3:51:57:
fb:e5:e9:e9:80:22:81:dc:6a:80:f4:cf:1f:17:a5:
23:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8A:6C:68:D9:20:A4:7A:51:2F:6A:0A:25:10:25:9D:66:B3:8D:89
X509v3 Authority Key Identifier:
keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/RopsaNkgpHpRL2oKJRAlnWazjYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.7.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b9:7a:27:d4:f8:e1:17:dd:07:20:be:a5:58:c3:9d:a1:74:
c9:43:90:20:68:a9:2e:8e:ef:7f:15:97:73:2f:f6:d0:91:b0:
54:b5:2d:5e:80:87:53:3c:7c:fc:75:26:46:70:fe:1f:06:85:
b2:46:4d:f7:d7:b6:59:07:ce:df:8b:ad:a3:8c:3f:ff:21:ef:
bf:36:cd:ca:5e:d5:86:4d:9d:c4:6e:3d:eb:d5:7f:1a:27:69:
62:7f:d6:79:95:ec:c3:ba:a7:ae:9f:50:a3:20:2b:11:82:b6:
34:a7:02:d4:12:0b:1e:44:b1:79:ea:d1:11:e5:38:7d:16:ee:
d8:96:c3:be:a1:90:8e:fa:71:54:9e:68:7f:13:ed:28:3b:34:
83:b7:ad:54:31:c5:5e:d3:09:c9:44:88:6b:77:ef:d1:60:c9:
70:1e:2b:7d:10:28:56:82:4d:50:22:63:9c:16:f3:4f:4e:7b:
6d:15:1e:86:c6:b3:dd:fb:71:92:d9:2b:e8:c1:1b:3c:1d:10:
51:af:c4:41:e9:f0:2c:77:38:4c:bb:42:17:4c:05:59:34:c4:
0b:68:95:3f:e5:95:f8:e3:ee:81:54:1f:9b:0a:94:29:8a:49:
ff:32:89:d8:32:9a:bb:32:98:f0:5f:5d:9f:c8:09:01:4b:46:
0d:da:07:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:13:15 2025 by rpki-client