Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/cIX-WWQe1eTYBa5AEDfKv3ZFbSs.roa
File: cIX-WWQe1eTYBa5AEDfKv3ZFbSs.roa (raw, json)
Hash identifier: KXI7i+vv4GJ48vExO8crdEraeejXsQsIm7BOAxvY6pM=
Subject key identifier: 70:85:FE:59:64:1E:D5:E4:D8:05:AE:40:10:37:CA:BF:76:45:6D:2B
Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial: 0194D63F1746852A99243D248AA7633E3156
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/cIX-WWQe1eTYBa5AEDfKv3ZFbSs.roa
Signing time: Wed 05 Feb 2025 13:14:06 +0000
ROA not before: Wed 05 Feb 2025 13:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 132.64.1.0/24 maxlen: 24
132.64.2.0/24 maxlen: 24
132.64.3.0/24 maxlen: 24
132.64.5.0/24 maxlen: 24
132.64.6.0/24 maxlen: 24
132.64.7.0/24 maxlen: 24
132.64.16.0/24 maxlen: 24
132.64.17.0/24 maxlen: 24
132.64.24.0/22 maxlen: 22
132.64.40.0/24 maxlen: 24
132.64.43.0/24 maxlen: 24
132.64.44.0/24 maxlen: 24
132.64.45.0/24 maxlen: 24
132.64.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d6:3f:17:46:85:2a:99:24:3d:24:8a:a7:63:3e:31:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
Validity
Not Before: Feb 5 13:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7085fe59641ed5e4d805ae401037cabf76456d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:7c:c7:4a:13:56:52:45:bb:51:00:80:ea:
a2:16:1e:e9:78:2e:dc:84:25:11:01:b4:fc:a5:08:
09:7f:9b:ee:a4:65:bc:6d:2d:47:48:c3:bb:dd:11:
99:81:fe:ba:08:2d:42:a3:57:5d:e3:bf:9b:26:dc:
bd:3f:2f:94:12:ed:d3:f0:30:86:dd:e4:33:39:41:
ed:7f:f2:04:af:03:5d:50:bd:77:48:1e:2d:14:54:
5c:c6:ce:eb:0d:6f:de:9c:de:b6:54:0b:f2:e7:f5:
96:3b:fe:88:5e:39:38:ac:fb:1d:a6:90:70:52:f3:
89:23:f0:b6:7d:c0:a6:31:bc:4b:c4:2a:57:8d:c9:
12:ee:63:cf:41:e0:fd:e9:9b:77:a4:89:97:5f:cb:
a6:b7:2b:73:95:20:62:5c:22:fd:00:be:b9:ce:c2:
5c:1c:3f:3d:75:d6:4a:dd:bf:1d:56:c4:3c:1b:99:
34:af:6b:12:39:a8:d4:c5:13:c8:d9:ad:ec:57:71:
a5:63:7b:ec:aa:ea:94:8a:b9:6b:d9:28:b0:b1:44:
53:34:d2:4b:a2:df:86:54:e6:8f:8c:2d:dc:59:be:
d2:a6:8d:ad:29:47:02:15:e8:5b:45:1c:62:8a:50:
f1:95:81:07:ac:d3:68:42:ed:cf:4d:aa:57:8d:94:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:85:FE:59:64:1E:D5:E4:D8:05:AE:40:10:37:CA:BF:76:45:6D:2B
X509v3 Authority Key Identifier:
keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/cIX-WWQe1eTYBa5AEDfKv3ZFbSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.64.1.0-132.64.3.255
132.64.5.0-132.64.7.255
132.64.16.0/23
132.64.24.0/22
132.64.40.0/24
132.64.43.0-132.64.45.255
132.64.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:7c:c0:cc:11:a0:06:bb:f0:1f:e5:f5:10:f4:6a:d1:03:94:
f7:f4:89:3a:8b:d7:54:21:d7:50:9a:92:6b:19:f7:47:5e:40:
67:19:57:2d:f6:64:69:16:7f:44:3c:a3:23:a5:3f:4c:1b:d8:
2a:a4:70:c8:3c:ac:5d:b9:b7:68:71:3f:4d:aa:da:62:e1:4a:
98:ea:0a:a5:e3:63:f7:88:32:04:10:24:c4:bb:5b:a3:a6:fa:
e3:3d:bd:23:a6:44:3c:f6:b2:a1:e7:1e:e2:65:b1:54:e1:28:
91:4c:28:9c:bc:1d:ce:e7:27:6e:2e:26:34:a1:f7:02:16:18:
83:3f:68:6e:80:54:1f:97:e3:93:d0:1f:a7:14:a8:a8:43:7b:
56:ff:7c:26:02:e9:1a:17:a8:16:42:e5:9c:ce:ea:58:04:63:
27:b4:71:f3:0b:8b:c6:3b:e6:f6:90:75:91:a6:7a:33:b4:a5:
7c:88:84:13:00:42:9c:d3:67:64:d4:26:d5:d0:4f:e5:a6:16:
c8:f8:81:4a:ef:08:07:c9:bf:d4:f4:f7:22:fd:58:60:f7:ce:
6f:aa:f4:c7:8c:43:27:e3:34:98:93:5e:63:77:f6:81:80:53:
29:0f:23:75:7b:d4:ad:c7:db:e8:a4:8d:f6:fa:24:48:93:ec:
07:e7:16:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:16 2025 by rpki-client