Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/AdoLpxkGdJU9MVB2mFDieYW6JUM.roa
File: AdoLpxkGdJU9MVB2mFDieYW6JUM.roa (raw, json)
Hash identifier: M3306US/H6B4VGXvtuAxz3jajRvPMjKiTsFnDjT1Itk=
Subject key identifier: 01:DA:0B:A7:19:06:74:95:3D:31:50:76:98:50:E2:79:85:BA:25:43
Certificate issuer: /CN=c874132c12f86995fe2893e4dea72638d2601079
Certificate serial: 019422FB3327C270F84FBA84F499EB0D9985
Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/AdoLpxkGdJU9MVB2mFDieYW6JUM.roa
Signing time: Wed 01 Jan 2025 17:47:55 +0000
ROA not before: Wed 01 Jan 2025 17:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 128.127.76.0/24 maxlen: 24
128.127.78.0/24 maxlen: 24
128.127.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:33:27:c2:70:f8:4f:ba:84:f4:99:eb:0d:99:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079
Validity
Not Before: Jan 1 17:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01da0ba7190674953d3150769850e27985ba2543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:91:36:1e:df:b0:4b:4a:8f:f8:03:c7:54:d0:
46:cf:5d:fb:8b:8c:bc:e0:f7:b8:d5:03:f9:e8:13:
61:fb:c6:5b:15:dc:4f:24:ed:24:52:9d:7a:e5:60:
32:8a:4e:03:10:96:b4:b2:e0:39:a5:31:c7:01:7c:
d6:a8:cd:b9:d5:a3:28:66:d3:65:2c:51:57:44:4d:
6a:2f:a6:f4:a1:24:b9:cf:1d:4d:c3:cc:57:ef:38:
75:14:50:49:ef:20:6a:6d:25:d6:9f:72:0e:a8:81:
41:a3:c8:3c:c8:5b:84:31:14:14:e1:cf:42:36:c6:
b7:0d:5e:e9:0c:2d:0e:66:a3:cd:91:2c:4a:78:1a:
20:ff:9d:63:1a:e9:7f:85:4e:15:3c:ee:f4:5b:9a:
de:74:6b:b0:dc:79:54:11:94:a5:48:d8:a2:ef:74:
f4:70:bd:c1:bb:54:20:3f:c4:4a:dc:87:ec:fe:13:
7d:af:13:0c:89:46:9a:b2:2b:b5:ea:f7:bb:c2:2e:
26:a9:3f:22:de:33:20:14:c6:ec:b3:d2:08:48:a8:
58:90:82:90:a8:a2:90:40:e1:2b:27:a4:eb:c0:6f:
61:08:d5:31:48:ef:2d:aa:a2:0a:fc:16:a6:da:c4:
f1:88:d9:8b:cd:ac:cf:f7:2e:83:a4:16:9c:22:23:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DA:0B:A7:19:06:74:95:3D:31:50:76:98:50:E2:79:85:BA:25:43
X509v3 Authority Key Identifier:
keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/AdoLpxkGdJU9MVB2mFDieYW6JUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.76.0/24
128.127.78.0/23
Signature Algorithm: sha256WithRSAEncryption
34:37:e6:ba:1a:3b:58:d4:ab:bd:3f:fb:1c:e1:c8:54:6a:56:
46:4d:cf:cf:53:d5:e0:7e:2b:8b:56:d7:47:67:66:66:6e:eb:
e2:01:e2:40:68:e2:c8:b3:4f:19:96:58:27:d6:07:37:83:94:
ce:2e:aa:82:75:99:88:bc:4d:92:e8:fb:a0:f9:9d:83:de:37:
f7:77:a4:b3:33:f3:dc:52:dd:0d:ec:5b:dc:18:38:f1:a4:c5:
98:67:e8:12:a9:3e:dc:40:75:f5:79:34:95:b1:4c:af:50:22:
28:85:ca:31:df:da:02:fe:7b:f3:c9:e2:e6:29:98:ca:ec:52:
ff:87:cb:b4:6e:32:99:a1:fd:d3:74:06:ac:75:cd:86:f5:05:
81:0d:17:78:cc:df:d5:c8:91:e3:4f:9d:bd:79:d6:ca:d3:a3:
5f:ef:90:78:33:c4:64:47:d9:0e:e4:f5:2a:4d:8f:81:74:ff:
bc:23:0b:80:ba:78:aa:83:24:da:5e:c1:16:a1:2b:27:50:32:
5f:e9:f1:cf:56:7a:63:3d:7e:6b:12:f5:9d:c1:24:2e:f5:9f:
4b:9c:0c:4d:7a:64:ac:2d:a6:18:61:ec:04:de:13:1b:e1:28:
9f:5e:33:ba:78:e6:dc:06:68:64:24:c5:74:ce:e2:61:9e:5d:
47:8d:a1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:03:24 2025 by rpki-client