Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4DDgki3uw7xaQV1MD7gt6tSOJZc.roa
File: 4DDgki3uw7xaQV1MD7gt6tSOJZc.roa (raw, json)
Hash identifier: GBN+XX+IFgyw0gvM6mY2nHgkhro5QVdWTuqFzEt2quk=
Subject key identifier: E0:30:E0:92:2D:EE:C3:BC:5A:41:5D:4C:0F:B8:2D:EA:D4:8E:25:97
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428277780F55C249B9234C29727DBDA71
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4DDgki3uw7xaQV1MD7gt6tSOJZc.roa
Signing time: Thu 02 Jan 2025 17:54:22 +0000
ROA not before: Thu 02 Jan 2025 17:54:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216013
IP address blocks: 2.57.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:77:80:f5:5c:24:9b:92:34:c2:97:27:db:da:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e030e0922deec3bc5a415d4c0fb82dead48e2597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f6:e9:81:b7:a5:f2:58:e7:2a:b6:7c:d8:75:
af:74:c6:b4:0a:2e:71:df:d6:29:1e:79:30:ea:4c:
62:0f:b8:7d:48:0e:83:c2:bf:f9:75:96:e9:47:32:
1b:9f:bf:31:9b:71:3d:ff:b5:93:42:a8:50:03:ef:
b2:87:59:f3:bf:da:3a:1b:b8:2e:0f:c7:5a:d3:42:
bd:3a:6f:26:2f:c9:52:ec:ec:f1:e3:ce:5b:49:a8:
35:82:3b:f0:1b:97:02:67:87:82:67:66:15:72:df:
4c:0e:9a:c1:7e:20:44:f0:52:1a:c3:4c:1a:43:f4:
4b:7c:d3:27:33:dc:92:65:4f:60:73:52:cf:9b:21:
e8:ed:3f:fa:2b:53:8a:a6:a4:40:19:23:5d:1d:f3:
0d:9f:52:14:db:c6:1b:09:12:71:12:2b:1b:e2:7b:
c8:7a:33:6d:16:3f:8d:a2:8b:74:f8:04:d9:1b:ec:
c6:fd:d7:7e:88:67:4c:79:2d:c9:fb:f5:83:e7:d2:
8f:a4:e0:22:ab:07:fd:39:ea:96:d7:f4:e8:ac:95:
ed:9b:da:50:ce:18:66:85:77:fc:80:c3:a1:82:f8:
84:35:eb:0e:ec:7c:89:9c:4f:fa:2f:c1:42:df:09:
f8:a6:ed:0c:cd:9d:22:fc:90:b0:71:87:6e:7e:b5:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:30:E0:92:2D:EE:C3:BC:5A:41:5D:4C:0F:B8:2D:EA:D4:8E:25:97
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4DDgki3uw7xaQV1MD7gt6tSOJZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.240.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:b7:e9:82:34:66:3b:d0:30:d0:6e:d9:82:8b:b2:a9:61:62:
7f:75:ee:68:43:4c:44:34:15:97:2a:fb:05:09:4f:17:1f:d6:
b7:6c:3a:bd:b4:4b:87:18:fa:c8:b4:ee:2c:c3:3a:b4:5f:15:
49:c7:38:60:7a:8b:07:3a:e3:1c:ed:e8:25:01:e8:32:69:9d:
ef:7e:be:33:61:38:aa:8b:4e:6f:a8:29:54:a3:93:d5:f9:3c:
c5:a8:65:4b:f4:93:7e:5a:45:90:95:10:5a:3c:e5:50:de:55:
19:a9:54:8a:6a:3b:fb:8d:de:21:43:b7:1f:76:42:19:07:d1:
54:51:09:ec:e0:f4:96:1a:77:e8:f6:91:94:60:23:4d:59:5a:
65:70:1b:25:e8:49:d3:d8:61:a6:55:a8:fc:fa:b5:e4:86:10:
b9:51:aa:df:f2:98:ba:12:2f:03:8e:b7:09:6c:96:de:e7:59:
5f:65:8f:0d:72:00:3d:5b:56:49:8b:ae:48:58:54:4a:6e:ef:
f1:95:33:12:37:4e:2c:ef:0c:be:9d:c1:b7:3e:e7:d7:43:fa:
e8:2f:84:bf:c6:4a:a1:16:7b:52:79:4f:d3:7d:f7:be:b8:c6:
42:9a:90:e1:89:54:a5:dd:64:78:3b:c5:46:4d:a2:75:79:92:
ce:3b:04:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:50:04 2025 by rpki-client