Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/sSkBviWFyOvgQTudRyk5mYd_kRU.roa
File: sSkBviWFyOvgQTudRyk5mYd_kRU.roa (raw, json)
Hash identifier: jhS+aJTEZqE7DnDU2yfTSF2ZmpyKoHpjKIMh59arhFE=
Subject key identifier: B1:29:01:BE:25:85:C8:EB:E0:41:3B:9D:47:29:39:99:87:7F:91:15
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01954784CD5391640822BD33974282A12C2C
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/sSkBviWFyOvgQTudRyk5mYd_kRU.roa
Signing time: Thu 27 Feb 2025 13:07:20 +0000
ROA not before: Thu 27 Feb 2025 13:07:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211922
IP address blocks: 64.137.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:84:cd:53:91:64:08:22:bd:33:97:42:82:a1:2c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Feb 27 13:07:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b12901be2585c8ebe0413b9d47293999877f9115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:41:6d:6d:84:e0:df:68:fe:78:34:ad:2c:
c6:45:f0:43:73:3b:f6:61:88:1a:2c:62:73:b0:de:
58:39:31:7d:8e:91:20:87:ec:a5:7d:f8:7e:d2:93:
cb:8d:c7:70:02:75:33:1f:ea:23:9b:57:ac:1f:c4:
4f:7b:f1:fd:c0:2e:d7:71:10:c9:8c:43:2b:2b:64:
69:4d:d5:ce:3a:0b:53:b5:a2:47:1d:c1:68:d1:a8:
55:67:65:87:e9:01:4f:04:99:6e:16:49:41:f9:b0:
3d:66:fa:1e:0d:56:38:6f:62:61:73:49:f9:81:99:
9b:85:a8:0b:07:b5:98:8b:1a:93:99:d4:6e:b6:eb:
a0:f4:0a:10:1a:dd:e0:06:db:21:c5:2e:fc:4d:f2:
f2:ae:cd:9a:9f:9f:d8:32:39:fa:b8:b0:5b:af:6d:
13:ea:4a:e0:e2:a4:78:1d:7d:da:14:d6:aa:36:a5:
9d:5a:9c:a1:fe:f9:a5:47:bb:cc:33:3d:ef:c0:2d:
f2:51:00:ef:6b:1a:94:ed:ff:44:41:d4:09:aa:dd:
93:db:c1:fa:3b:d6:ad:05:a7:1f:9b:6f:e7:3e:0f:
09:ff:c4:3c:ce:42:f3:00:af:a2:d4:6c:a6:4d:07:
b9:4d:00:16:9c:1b:ea:8a:b2:84:72:7c:40:3a:41:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:29:01:BE:25:85:C8:EB:E0:41:3B:9D:47:29:39:99:87:7F:91:15
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/sSkBviWFyOvgQTudRyk5mYd_kRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.110.0/24
Signature Algorithm: sha256WithRSAEncryption
75:3d:f0:b2:01:e7:7f:b1:09:36:09:49:15:53:af:60:e3:29:
cb:38:2e:09:53:00:d3:6e:07:2f:71:c7:41:4b:57:fe:a8:69:
ea:74:5a:d3:68:3e:4f:5c:14:3e:ad:1c:e6:a3:06:cb:b8:9a:
8c:59:25:3b:be:46:3a:9b:2a:c5:ff:be:ae:41:60:4d:36:0b:
a1:b2:db:04:e9:f1:ea:bf:73:f1:c7:da:8c:69:e4:11:ad:81:
fe:7a:73:2b:7e:85:91:c0:e0:bc:29:42:b5:40:ad:d9:2a:d4:
5c:5d:b4:f5:91:d7:03:eb:8d:cb:bb:b2:e0:41:4e:a8:0a:e1:
fa:be:03:27:5d:02:b1:4b:a6:8a:7c:9a:97:ed:4e:9d:ce:9a:
72:86:f8:e6:37:97:26:b5:d4:84:2b:c1:55:71:56:29:5d:11:
cd:cd:36:da:1c:ff:29:39:e1:c9:0d:5d:b7:c6:bb:f2:27:87:
f1:94:ab:c3:0e:98:2b:f7:50:78:53:44:30:92:f7:56:9b:05:
58:8c:54:0b:95:47:53:ff:0e:91:e4:d8:bb:2a:72:3b:c3:08:
f1:27:3b:49:23:8f:b8:2b:dc:23:3d:62:61:c3:7c:c5:19:cf:
84:93:5d:58:d3:52:38:b5:ef:88:36:e4:e5:18:ff:f1:85:92:
32:77:2c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:12:08 2025 by rpki-client