Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/75tUj24Sz1np7niKzvR12f9WWo0.roa
File: 75tUj24Sz1np7niKzvR12f9WWo0.roa (raw, json)
Hash identifier: 37+oOch5GIb73IinVFHvfdIOejO/FeSmIhgqOGWbqGU=
Subject key identifier: EF:9B:54:8F:6E:12:CF:59:E9:EE:78:8A:CE:F4:75:D9:FF:56:5A:8D
Certificate issuer: /CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Certificate serial: 019421B1D8B1CC653D55D388549A7FC7E6C4
Authority key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/75tUj24Sz1np7niKzvR12f9WWo0.roa
Signing time: Wed 01 Jan 2025 11:48:10 +0000
ROA not before: Wed 01 Jan 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50767
IP address blocks: 176.104.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d8:b1:cc:65:3d:55:d3:88:54:9a:7f:c7:e6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef9b548f6e12cf59e9ee788acef475d9ff565a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:97:1d:3b:ad:99:4f:f2:77:ca:71:fa:0a:
94:24:db:c3:0b:df:13:4a:02:d9:f2:70:a9:71:b3:
77:7a:bd:45:d1:a6:68:4f:dd:9a:17:b2:96:49:cb:
79:94:6a:99:ad:93:6c:89:d8:5f:ce:21:0d:3d:a2:
02:8c:2b:fd:97:69:b4:af:3a:21:59:16:7e:d2:e5:
1b:fb:4c:3d:a4:63:47:e9:4c:9d:3f:2b:22:c2:f6:
e1:6e:d5:ba:2c:37:41:c9:e7:df:c7:3a:0f:26:7b:
91:9b:9e:49:94:92:e0:e1:54:cc:61:fb:df:80:e5:
d6:6c:68:d7:11:74:7d:f9:a9:db:fc:37:87:0e:ca:
77:bc:43:ea:21:1c:96:fa:94:20:07:60:49:b7:2c:
43:22:ef:ba:f6:29:9f:c9:9a:25:0d:75:8a:c6:71:
8c:78:0a:97:be:c8:41:1c:21:67:3b:4a:37:1c:0b:
a2:5b:e9:b1:4b:df:63:9f:d7:74:0f:5d:9c:71:a6:
36:83:cd:ea:36:71:c0:9b:89:77:1d:d3:ac:b5:d9:
de:31:73:a5:f0:7e:e1:09:cb:ff:72:ff:77:70:7d:
02:f9:ac:da:d8:d6:36:4c:96:3c:31:eb:c6:c3:3b:
b8:a1:57:85:12:aa:79:a5:a3:8c:ac:c7:6d:0c:3d:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9B:54:8F:6E:12:CF:59:E9:EE:78:8A:CE:F4:75:D9:FF:56:5A:8D
X509v3 Authority Key Identifier:
keyid:3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/75tUj24Sz1np7niKzvR12f9WWo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.104.176.0/21
Signature Algorithm: sha256WithRSAEncryption
d1:36:da:a4:27:db:74:23:8c:3e:c5:f6:d2:3b:1a:52:c9:27:
e5:98:05:ab:10:27:2b:9b:38:60:aa:a7:52:00:21:78:41:9d:
cd:d5:66:47:24:82:63:88:31:3c:46:c4:b1:47:d4:00:70:bb:
b2:a9:3c:95:b2:e2:c9:dd:8f:67:82:f2:ab:03:ba:51:12:b3:
d7:4d:4a:2d:a8:c0:bd:cf:90:47:81:70:85:1c:4d:69:d4:ad:
69:22:6a:ce:be:16:0e:44:61:6a:35:93:9a:94:e8:23:f4:4f:
d0:2a:63:15:5a:3b:29:a1:a4:c2:f8:06:05:11:f6:cf:92:0e:
02:04:60:e5:d3:6f:a2:e8:c3:a7:28:24:76:2d:99:21:9a:bb:
01:53:ea:6a:2e:6c:29:b5:cf:1e:7b:15:9d:6f:54:03:8a:1a:
c5:16:d8:2a:cf:20:9c:f6:07:cb:18:56:f9:f5:e6:2f:4c:34:
e4:f0:71:df:05:5e:3d:72:b9:a5:8d:a3:a8:c9:e3:31:e4:28:
8c:38:cf:10:14:ef:d6:56:03:bd:58:80:a5:20:92:86:25:ce:
c3:bd:88:7e:40:a6:b8:ba:48:2f:55:5d:5d:8b:2a:95:cc:da:
a2:e4:bb:0f:8c:08:d9:f6:4b:9e:d8:bf:87:90:b3:e5:c9:48:
e9:40:64:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:50:55 2025 by rpki-client