Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/_wDpItSC0HSOgvkQZmYWMWTXQro.roa
File: _wDpItSC0HSOgvkQZmYWMWTXQro.roa (raw, json)
Hash identifier: /5YtbpUy82u+cUJWT1RGpyakzo95z6EKYbAFHFrfUcw=
Subject key identifier: FF:00:E9:22:D4:82:D0:74:8E:82:F9:10:66:66:16:31:64:D7:42:BA
Certificate issuer: /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Certificate serial: 01942068657F6E2062195AD4B103B957F4F6
Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/_wDpItSC0HSOgvkQZmYWMWTXQro.roa
Signing time: Wed 01 Jan 2025 05:48:20 +0000
ROA not before: Wed 01 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42323
IP address blocks: 91.202.140.0/22 maxlen: 32
109.197.128.0/21 maxlen: 32
195.238.100.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:65:7f:6e:20:62:19:5a:d4:b1:03:b9:57:f4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Validity
Not Before: Jan 1 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff00e922d482d0748e82f9106666163164d742ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:b7:22:9a:fe:2e:dc:aa:60:79:31:05:a0:
d5:9c:64:9d:f9:cb:48:ab:7c:61:37:57:50:f3:a6:
7e:12:e8:3c:e0:ac:5e:28:f9:5a:82:07:6b:b0:a2:
2f:a2:47:82:41:e0:01:d2:87:5b:d0:cd:b6:ac:40:
6d:0b:a4:ce:e3:ac:0b:13:3f:52:f7:d9:54:4f:b7:
26:2c:a6:c6:d8:b3:93:31:d1:11:1d:9a:80:fe:fd:
79:95:78:24:d0:95:4d:49:c0:bc:db:90:db:3b:5c:
5b:34:31:41:02:35:2e:81:ff:42:d0:89:63:18:32:
c7:b3:2d:90:2d:b7:c9:50:7d:e3:c1:0c:4a:91:3e:
96:23:ce:b5:a9:52:a2:77:95:ae:66:80:d5:01:f6:
a7:31:92:63:47:97:ee:69:1c:3a:fd:72:53:19:61:
57:93:2c:51:e5:e8:09:39:13:c4:b3:2f:fd:a9:5b:
01:72:2e:f0:18:58:c4:8b:07:1d:c6:e2:77:8a:d7:
79:10:50:ce:4a:60:85:8c:98:0c:fd:11:d9:1a:4c:
e9:d0:01:80:25:ec:b9:86:49:47:92:51:84:48:81:
9d:85:5f:a7:46:c2:ce:17:2d:85:37:dc:1a:67:75:
51:13:b9:72:e7:5d:cf:d8:68:dc:ef:40:bc:f7:e5:
98:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:00:E9:22:D4:82:D0:74:8E:82:F9:10:66:66:16:31:64:D7:42:BA
X509v3 Authority Key Identifier:
keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/_wDpItSC0HSOgvkQZmYWMWTXQro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.140.0/22
109.197.128.0/21
195.238.100.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:83:9b:11:e7:c0:25:af:31:40:f4:c4:fd:b4:85:6a:a7:d8:
e6:67:ce:d7:f6:03:25:db:e8:26:ea:7b:57:dc:7e:7c:0d:0a:
d5:f9:54:5e:e0:4b:2e:68:46:c9:5e:3e:67:e4:25:79:4e:11:
f3:bb:62:04:f6:5a:70:b3:96:02:8a:3d:03:ea:7e:50:1b:a3:
ac:2c:cf:e6:24:5c:92:47:cc:20:a3:26:5b:a9:0a:cf:87:51:
24:92:81:09:09:80:ad:6b:58:3f:7e:d0:f0:eb:29:46:58:8a:
63:49:32:b4:4f:a4:dd:24:4f:f6:69:8a:79:59:da:cc:2e:68:
ad:ad:58:62:de:3a:8c:27:c2:e4:95:de:9b:39:3b:43:88:c9:
a8:7c:a8:75:f6:47:22:fd:13:58:a0:f0:16:17:41:4e:5b:d6:
18:0e:62:be:87:a5:d5:6c:53:82:5d:8e:1e:a2:6b:c7:5b:31:
d3:18:97:fe:18:60:87:1b:4e:57:19:c8:21:19:15:a7:5c:0d:
a4:60:59:a6:e8:d6:25:72:c8:fb:c4:d2:64:be:80:81:37:af:
a1:78:b6:22:40:4f:91:cd:0c:ba:e4:6b:1a:b0:95:59:8c:5c:
74:01:9b:9e:3d:92:37:9f:42:45:ae:34:cf:f2:6e:61:3b:3e:
28:ba:32:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:03:22 2025 by rpki-client