Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/VmdUY2uJ9NapTyZJ8UBdjlgGJQQ.roa
File: VmdUY2uJ9NapTyZJ8UBdjlgGJQQ.roa (raw, json)
Hash identifier: 53UxHJyDkYLtFVil6COplJSwSFn/MNxw2tMZPgc57WQ=
Subject key identifier: 56:67:54:63:6B:89:F4:D6:A9:4F:26:49:F1:40:5D:8E:58:06:25:04
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 019427B63A4B8BEE9A77C6A6B88F5D1E026B
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/VmdUY2uJ9NapTyZJ8UBdjlgGJQQ.roa
Signing time: Thu 02 Jan 2025 15:50:41 +0000
ROA not before: Thu 02 Jan 2025 15:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.5.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:3a:4b:8b:ee:9a:77:c6:a6:b8:8f:5d:1e:02:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Jan 2 15:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=566754636b89f4d6a94f2649f1405d8e58062504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:08:3d:36:dc:a5:22:fe:f5:f4:6e:b0:81:
31:a4:c6:2b:08:0f:d0:4b:57:7b:d5:1f:1f:24:8e:
0f:2f:6b:84:8f:6a:df:fa:f9:bf:91:4b:6e:e6:07:
86:8a:d1:1f:86:66:aa:62:7e:4d:d8:29:1b:a0:fe:
ca:c9:47:7d:6b:c5:de:0c:27:93:16:1d:04:ed:7a:
63:69:12:07:98:53:6f:5c:89:e8:8b:bf:84:b5:df:
c2:43:5c:b4:5f:8c:c1:0e:3e:00:81:5a:83:b4:d3:
2d:e7:7d:f2:68:b3:cc:9b:06:a5:3c:d6:b8:59:42:
9f:0f:b1:48:70:4b:bc:63:62:b3:e7:ab:b6:d6:09:
2b:f2:10:c5:90:c7:b2:b1:65:cc:b2:cf:18:ae:42:
4c:b2:53:92:0b:3e:df:5e:ed:76:8d:91:4c:e9:e0:
5c:76:2c:27:d3:ef:7c:8a:bd:f5:5f:b4:48:79:f1:
c2:5e:8a:51:f5:74:6b:04:df:b0:01:29:a1:1b:f6:
41:40:af:a8:04:4f:f7:6f:fe:f7:bb:26:71:55:db:
88:c2:60:d0:8a:d1:5f:c6:c8:cd:d6:c5:ba:bc:4c:
38:b7:40:bc:9f:f3:67:4c:d1:cc:12:4c:41:7b:1a:
75:33:a0:bd:20:b5:1e:ae:95:c1:27:47:50:84:7d:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:67:54:63:6B:89:F4:D6:A9:4F:26:49:F1:40:5D:8E:58:06:25:04
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/VmdUY2uJ9NapTyZJ8UBdjlgGJQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.144.0/24
Signature Algorithm: sha256WithRSAEncryption
76:05:a6:fc:dd:1b:90:e5:b6:63:a9:5e:de:d7:1d:6f:e5:7d:
93:aa:51:0f:b4:2f:ec:25:e0:c8:74:40:56:4d:e9:ff:c4:7a:
af:d8:93:9c:06:02:44:7e:0f:d3:3b:4d:b4:6b:25:f6:2c:bd:
37:cd:c4:69:17:80:8e:5f:98:d1:48:5a:5d:36:d9:45:05:e9:
1a:e8:65:09:8f:6c:74:d6:f8:03:51:28:72:a5:dc:3d:ea:50:
a8:01:40:26:5c:8d:0d:d9:f7:84:5a:52:30:62:58:43:44:00:
07:1b:64:a2:57:12:20:bf:00:cb:4a:c7:17:72:90:7c:8b:6c:
24:0f:b0:3b:6f:52:bb:e4:22:c8:de:10:b8:ca:62:97:ed:5f:
fd:f4:a5:ec:3a:1c:51:28:11:fd:1b:55:ef:64:33:08:19:6f:
35:06:56:7e:32:7d:89:19:13:2b:5a:4b:95:c9:07:cf:8d:b4:
93:c1:6b:4e:ef:3c:ba:67:1e:76:ab:ee:91:69:8a:07:f5:86:
7d:a4:ea:53:19:cf:db:d6:c3:cd:db:0b:ed:6b:cb:1d:63:17:
58:39:d2:95:1b:3a:f7:33:9e:ee:d9:d6:83:39:46:c8:46:b0:
c1:1f:36:b4:86:33:46:27:c4:d7:26:d1:93:12:35:f5:8d:eb:
14:94:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:48 2025 by rpki-client