Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/JWpMTh79Cpipv8z2TiqFetsx4Z0.roa
File: JWpMTh79Cpipv8z2TiqFetsx4Z0.roa (raw, json)
Hash identifier: EeuLpYtgLdl6hvIb6vNrTtAuFpAgpCnIwfpYkuwZmkQ=
Subject key identifier: 25:6A:4C:4E:1E:FD:0A:98:A9:BF:CC:F6:4E:2A:85:7A:DB:31:E1:9D
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 019421B232DFF4757AA575F2DDFBDB2514D7
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/JWpMTh79Cpipv8z2TiqFetsx4Z0.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211456
IP address blocks: 185.7.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:32:df:f4:75:7a:a5:75:f2:dd:fb:db:25:14:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=256a4c4e1efd0a98a9bfccf64e2a857adb31e19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:f8:88:f7:f1:ae:69:fe:85:ad:be:3f:52:
0d:e9:0e:19:68:e1:71:ae:5d:1d:ba:1a:b8:be:c3:
02:17:e0:4d:55:0f:e9:72:46:4a:99:ac:8c:d7:38:
3a:0c:35:33:d2:d7:f1:7a:3d:0a:87:58:21:e0:e7:
07:95:47:ff:a1:79:7e:90:d7:b3:7d:be:32:41:98:
33:8e:b2:30:7b:27:a3:28:09:71:e8:51:4e:6a:05:
fb:78:e9:87:a3:f1:a7:ce:10:fc:0e:56:b1:5c:3e:
34:50:f2:58:76:e8:cb:1f:0c:df:9c:e7:6f:a7:2b:
a3:4d:cb:10:99:a3:3f:9d:c7:1e:86:75:d4:2f:08:
8a:e8:8b:64:f1:7e:18:21:2b:a2:c9:69:fb:47:fe:
8b:4f:1d:f0:3c:d7:8d:7b:b3:2a:9c:b6:b6:fe:d7:
08:64:3f:eb:8e:64:b6:b2:80:f3:6a:12:ee:27:99:
22:6a:49:3c:0c:19:62:49:14:5d:31:5c:7b:8c:31:
be:05:01:0d:03:a3:0e:d1:9c:c4:b4:c4:6b:0c:7f:
4f:d4:ba:24:c5:cc:38:4d:8f:5b:3e:7e:de:6f:3a:
fb:41:f8:b7:c4:96:56:2c:4e:9c:6e:bd:86:4e:f6:
4e:d9:71:42:98:1a:7c:c0:65:37:94:3a:db:ad:cd:
38:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6A:4C:4E:1E:FD:0A:98:A9:BF:CC:F6:4E:2A:85:7A:DB:31:E1:9D
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/JWpMTh79Cpipv8z2TiqFetsx4Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.218.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:55:2a:3a:e1:88:a6:a5:7b:d7:cb:ca:6b:4b:ea:bb:4d:7c:
7b:f7:16:49:fa:08:a5:7c:9b:a7:df:70:cc:b6:83:06:48:21:
5d:2a:19:36:2a:69:18:93:39:51:86:eb:b4:04:b5:42:40:56:
27:1d:3c:2c:1b:ec:33:72:05:4a:43:1e:1d:24:da:97:78:97:
b1:cd:33:73:93:ef:58:6b:fd:e1:1c:01:53:fd:4c:73:a8:9d:
43:49:45:23:d3:14:fb:74:e5:d5:61:ff:44:a8:7a:6b:4b:dd:
9e:48:fe:01:ce:8c:ea:5f:69:55:5e:ba:64:9e:bf:fe:99:d5:
16:c6:05:f9:4b:c9:0c:47:ae:79:35:3d:da:28:f9:3f:48:f4:
b4:14:04:f4:4c:fa:a3:e3:29:0d:96:77:90:d5:1f:5a:42:c2:
02:1d:33:42:3b:24:3f:fa:18:60:9b:ff:30:e7:2a:6e:34:47:
f1:1f:10:7b:24:90:52:06:c8:df:b4:4c:64:ec:02:a4:6f:4a:
c2:a4:31:5f:b6:6f:8b:6b:a6:9c:7a:12:fa:52:e7:8c:62:28:
2c:6b:04:ee:29:b3:81:11:b3:3c:b7:14:d5:76:f2:88:7f:6e:
23:7a:63:ff:0a:59:b3:61:7f:ee:4d:f0:7d:ad:1b:e5:69:e2:
5b:27:29:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:39:04 2025 by rpki-client