Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa
File: xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa (raw, json)
Hash identifier: rR/azYUh2GUL8HTdYkb3GDWX8S5vRgxNHhornEovZ9o=
Subject key identifier: C5:0D:6B:C2:6E:A8:3B:C8:C7:03:D9:19:85:0B:D5:0C:47:CC:4E:85
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 0194236919D06C244707244CFAA80DF3997F
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa
Signing time: Wed 01 Jan 2025 19:47:58 +0000
ROA not before: Wed 01 Jan 2025 19:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205056
IP address blocks: 5.157.2.0/23 maxlen: 23
37.72.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:19:d0:6c:24:47:07:24:4c:fa:a8:0d:f3:99:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Jan 1 19:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c50d6bc26ea83bc8c703d919850bd50c47cc4e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:e7:96:31:37:dd:c2:76:c4:23:08:0e:ec:
dd:0d:a1:0a:b8:51:4a:52:91:0c:6b:c5:4d:bd:18:
43:8d:f6:ae:8f:fb:b8:94:ad:9d:52:b2:d6:d5:95:
3e:49:09:92:6c:6f:a2:d5:ea:27:ee:5c:46:36:a9:
91:6e:65:97:24:a7:6c:c9:47:24:d3:51:66:f5:39:
ad:43:48:c2:87:dd:36:08:d6:0a:34:d4:a7:e3:fd:
0f:c6:20:8a:7a:d8:0b:9b:5c:98:dc:20:b7:d8:7b:
8d:2e:8c:98:97:87:ba:cd:a4:34:b1:70:53:01:37:
41:6c:b4:ac:cb:7c:0c:39:30:2b:6a:cc:04:bf:8c:
5f:25:1e:c6:a9:19:23:8c:23:53:23:34:db:aa:6c:
65:a8:c8:b0:58:15:35:ad:bf:9f:ee:cb:d1:6a:7a:
f4:9f:3a:ea:91:79:a0:08:dc:04:1c:25:11:40:07:
de:a0:a4:e7:7d:b4:d8:84:b7:63:bf:06:98:5f:5d:
d8:ea:35:e3:86:15:a3:c8:43:1a:bf:fc:41:f2:cd:
dc:fb:a3:33:b4:c6:cd:8c:ce:56:4e:6f:95:18:a2:
b5:81:90:87:5c:84:f1:22:4e:25:4e:b8:4e:72:31:
f3:5c:5f:59:02:f1:a6:d9:52:ab:3e:4d:32:d0:87:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0D:6B:C2:6E:A8:3B:C8:C7:03:D9:19:85:0B:D5:0C:47:CC:4E:85
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.2.0/23
37.72.184.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:e4:0e:32:99:b8:c7:f0:ee:0f:16:61:1b:5f:19:1c:73:b7:
0b:db:af:b9:b6:59:64:b2:e4:77:31:cf:43:2d:1d:fc:c3:58:
23:df:48:18:97:fe:0d:8d:10:fb:cd:98:b7:73:ec:5b:e2:7a:
f5:f7:92:01:12:f2:d6:48:5a:79:a4:fe:23:f1:91:38:34:64:
b0:42:d1:a0:bd:5b:68:4c:ac:7f:b5:df:d4:b6:06:f4:90:e6:
cf:75:d3:1f:d4:66:a2:a6:65:a7:31:16:56:49:f1:01:e1:1a:
85:96:9a:ca:93:80:8c:9e:cd:8a:28:d6:2b:af:65:a8:d9:2a:
cb:8f:fc:64:02:2f:7d:67:b1:87:4b:da:44:b2:e7:34:65:0c:
55:f1:54:9d:d4:7d:fc:99:fa:d4:53:06:fe:3a:ae:b6:b6:50:
84:3e:37:ea:38:90:b9:2e:0b:e2:b9:8a:40:9e:29:b1:98:b9:
ed:ea:71:ac:7c:5b:c1:56:a7:b8:80:d3:cd:04:80:84:35:7c:
35:64:59:31:e4:d7:a3:13:21:2a:c7:80:43:c5:a7:af:18:f3:
6c:23:73:23:8d:38:2c:ac:b4:7d:a9:f9:22:f9:75:42:1f:52:
a0:56:cd:57:c1:9b:fd:e3:8f:b2:79:4c:ef:88:71:fd:f2:57:
94:7d:dd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:21:27 2025 by rpki-client