Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/_tveWUzwl0rRBJDPM4rGk0Xjwr0.roa
File: _tveWUzwl0rRBJDPM4rGk0Xjwr0.roa (raw, json)
Hash identifier: mX1Yyf8Gy2RZPiTSQJGBLTKD4Y7jjrTNhKRYdcriw7s=
Subject key identifier: FE:DB:DE:59:4C:F0:97:4A:D1:04:90:CF:33:8A:C6:93:45:E3:C2:BD
Certificate issuer: /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial: 0194258F5A8527A2C1B9A4D45755DCD3F724
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/_tveWUzwl0rRBJDPM4rGk0Xjwr0.roa
Signing time: Thu 02 Jan 2025 05:48:59 +0000
ROA not before: Thu 02 Jan 2025 05:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39257
IP address blocks: 194.156.212.0/23 maxlen: 23
2a07:e884::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5a:85:27:a2:c1:b9:a4:d4:57:55:dc:d3:f7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Validity
Not Before: Jan 2 05:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fedbde594cf0974ad10490cf338ac69345e3c2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:14:71:66:64:64:02:02:4f:15:7b:c2:36:
ed:d9:47:f7:a5:ff:a6:83:a4:98:4a:0f:71:3b:5e:
0d:a9:00:29:37:d8:4f:40:1d:dc:0b:7a:b9:2f:02:
02:48:56:75:ef:ff:06:b1:1e:b9:cf:54:e8:12:58:
e6:ff:89:7a:86:b7:d4:c0:c8:fe:c6:28:b4:a1:57:
91:fe:a0:05:8b:27:a7:37:05:3a:3b:c3:24:52:dd:
16:6a:2d:27:85:42:8d:3a:36:10:d3:ae:78:f4:68:
36:e0:ae:32:1f:de:67:fc:ff:7e:87:3c:17:9f:87:
82:83:2a:17:3c:96:34:dd:27:8d:49:d3:1a:ef:99:
e6:df:cd:c4:48:d6:73:81:02:97:9a:52:9d:86:14:
cf:0b:98:6f:2d:ec:dd:c1:97:05:7b:d0:d7:6b:e8:
cf:3a:9d:87:44:10:a3:de:47:e3:e5:8d:77:4e:3f:
88:55:cf:f6:42:6b:1a:37:07:c0:83:c8:ba:67:cf:
b2:f5:fe:4e:2b:41:84:65:0f:ec:30:2c:7b:63:e7:
5c:fb:5b:09:28:b3:0e:ed:88:b0:46:eb:09:83:34:
d6:05:bd:34:6d:f6:72:e6:63:78:1d:78:c2:4d:31:
73:cf:9f:f9:e5:4d:77:b0:73:67:21:a0:11:1b:d7:
56:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DB:DE:59:4C:F0:97:4A:D1:04:90:CF:33:8A:C6:93:45:E3:C2:BD
X509v3 Authority Key Identifier:
keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/_tveWUzwl0rRBJDPM4rGk0Xjwr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.212.0/23
IPv6:
2a07:e884::/30
Signature Algorithm: sha256WithRSAEncryption
bf:b1:29:97:48:15:c9:46:72:a4:9b:f7:1a:ca:7e:21:78:05:
74:4b:05:fa:3b:b4:57:89:f0:9c:45:04:65:47:93:07:f4:85:
dd:c0:b6:de:f7:94:e2:5b:20:d1:3a:2a:b1:ec:3e:10:33:0d:
a0:d2:0c:b4:ed:03:63:b1:c4:11:46:21:b6:0d:4e:7d:0c:ca:
54:86:7a:7a:4c:24:44:08:90:73:4f:3c:a9:08:20:7e:ac:5e:
c6:f6:98:d3:09:27:92:aa:e5:f9:80:de:c1:5b:bb:1a:77:bb:
b3:15:22:fd:5e:8b:3e:f7:7f:86:2a:cb:b4:9c:6d:63:04:2c:
65:f3:e0:51:65:53:1e:58:07:82:fd:ea:ab:29:33:2b:61:ac:
9c:8a:33:63:ce:62:39:80:42:d9:f4:a0:22:e9:84:f8:62:cc:
fe:f0:3b:e4:ea:57:d9:e3:be:f0:11:d4:fa:42:44:a3:fa:cb:
e7:e2:9f:b1:2c:99:a8:fa:fb:c1:dc:6c:75:f4:09:64:73:22:
da:a1:ec:7f:fa:fe:e4:c1:e7:ec:d5:e2:f4:84:a9:e8:ee:f5:
88:d0:91:67:e1:08:6f:84:1e:5f:be:93:fc:58:79:1c:44:16:
71:a1:d1:43:b8:7f:1a:5a:a7:d5:b0:0f:3b:57:8b:6d:ed:b1:
80:c7:e8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:53:36 2025 by rpki-client