Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/VIrZrIPn5JgwIWuerakwG37U7jA.roa
File: VIrZrIPn5JgwIWuerakwG37U7jA.roa (raw, json)
Hash identifier: +9EBlzR1H7BphSJTPeOlUDa4YDh16MokR5NsBCSFTMs=
Subject key identifier: 54:8A:D9:AC:83:E7:E4:98:30:21:6B:9E:AD:A9:30:1B:7E:D4:EE:30
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 0194258F9E1CF6A46BB6ABA72A60C04C12A0
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/VIrZrIPn5JgwIWuerakwG37U7jA.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20719
IP address blocks: 213.244.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9e:1c:f6:a4:6b:b6:ab:a7:2a:60:c0:4c:12:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=548ad9ac83e7e49830216b9eada9301b7ed4ee30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:62:50:86:d3:ef:31:d2:00:08:18:4d:fa:
4b:bd:09:34:cb:76:dd:e1:06:5a:ad:80:25:a3:0b:
6b:c7:c4:74:d4:86:fe:2e:0f:64:db:dd:1a:17:56:
07:64:af:2d:70:db:13:11:0b:a1:0e:c0:26:f7:6f:
b1:b3:f8:11:09:30:b9:57:f5:68:4d:0f:fe:65:c4:
f9:28:56:bd:ab:59:44:99:16:59:05:39:27:20:0f:
5d:f2:99:11:37:53:c4:0e:c8:8a:10:4b:e8:ec:f8:
17:f8:28:67:57:76:00:42:17:e0:cf:c8:05:e9:2a:
86:de:ee:af:60:d0:9d:8f:49:09:62:5e:6b:d8:70:
ec:0f:8d:cc:d5:82:57:6e:cc:e7:02:cf:51:a8:75:
06:14:5e:41:5f:0c:b0:c4:f3:23:0a:92:d9:03:a0:
bc:fc:c4:59:58:69:0a:b4:de:5c:c4:a6:bd:6c:1e:
2b:40:05:5f:f1:ea:c3:67:f4:a9:f8:99:63:3a:c6:
40:8c:11:bb:27:06:a4:45:1f:74:d2:22:4e:1b:68:
cb:07:49:70:2c:2d:89:0c:8a:3a:7a:9b:6b:13:d4:
00:90:53:cd:e9:ae:fc:ba:ae:7f:0a:76:b4:56:d7:
73:0a:33:70:c2:81:4c:03:4b:18:fa:54:49:40:e6:
4c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8A:D9:AC:83:E7:E4:98:30:21:6B:9E:AD:A9:30:1B:7E:D4:EE:30
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/VIrZrIPn5JgwIWuerakwG37U7jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.244.124.0/22
Signature Algorithm: sha256WithRSAEncryption
29:ad:42:38:01:34:40:29:eb:4a:32:38:63:d1:f4:e8:15:fc:
b7:6d:27:6e:24:5a:fb:68:d5:0a:2e:ba:cb:b4:b6:37:03:9d:
f3:75:10:e7:67:70:31:94:ad:d2:89:d4:1d:f8:ce:59:a7:dc:
09:0e:46:34:ab:d1:f5:72:f9:b4:0c:ca:c6:3a:d2:72:eb:96:
e4:c8:de:44:66:40:4e:69:0e:99:94:8a:b7:f2:9e:68:c3:16:
df:74:e4:ac:2a:8a:48:67:05:a2:f9:4e:36:05:96:4b:82:8b:
af:6a:9a:58:4a:c7:a4:52:01:49:f3:c8:1a:cd:36:6d:65:38:
96:b1:d4:b7:0c:db:d1:c2:73:40:83:9e:20:7a:a9:62:44:83:
85:01:f3:aa:7d:d2:fb:06:b1:f1:51:d7:46:4f:fa:c3:f0:1a:
f4:8f:62:04:71:c9:81:7f:88:d7:e0:a4:9f:a5:8c:0e:6c:6e:
1d:73:3c:ca:a7:f1:25:a7:e7:87:95:bd:35:4e:12:88:ea:07:
f5:ea:4c:57:68:ad:d4:20:0b:3a:cb:ee:75:81:e8:b1:aa:7d:
b0:75:14:ab:2a:a6:2b:65:9b:e8:13:74:29:51:33:18:8b:e9:
2b:ae:ad:2b:bf:39:2a:fe:c7:4f:13:0b:8c:27:6d:08:f7:d6:
7c:6d:5a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:39:08 2025 by rpki-client