Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/5osuIpQEXkmgGGfabxgkobMCOqo.roa
File: 5osuIpQEXkmgGGfabxgkobMCOqo.roa (raw, json)
Hash identifier: ar+Luee3A/qxuqFBW+KjI5NWMnxgfB2LrCoUMGMm2y0=
Subject key identifier: E6:8B:2E:22:94:04:5E:49:A0:18:67:DA:6F:18:24:A1:B3:02:3A:AA
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 0194252179AD475FCC46FE259C199AEA8AD4
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/5osuIpQEXkmgGGfabxgkobMCOqo.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 217.144.176.0/22 maxlen: 32
217.144.180.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:79:ad:47:5f:cc:46:fe:25:9c:19:9a:ea:8a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e68b2e2294045e49a01867da6f1824a1b3023aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:27:8b:61:43:52:f5:74:cf:09:3f:49:01:
8e:ed:af:d5:f4:0e:d0:cb:41:33:37:68:60:31:b3:
71:05:dd:9b:30:40:3a:38:c7:a1:cf:96:b4:2f:2b:
02:f2:cd:fd:44:97:9c:f9:45:ce:96:d0:50:13:67:
6d:eb:b2:96:3d:b8:ec:a7:74:b1:e7:1e:9a:c9:50:
60:1a:25:4e:26:b9:1b:fd:9e:21:70:b2:02:65:16:
91:f8:56:98:66:39:e7:f3:27:ad:f6:c2:2a:36:85:
34:52:06:db:5e:9a:8d:94:7b:3f:c3:f5:a5:2c:b7:
aa:2b:ea:ce:4c:b3:b3:97:ef:73:61:d7:d8:8a:f8:
04:29:ce:05:32:93:ca:a0:50:a7:8f:22:e5:ab:10:
f3:7d:c4:c1:1d:83:b4:f4:a8:c4:50:78:76:3c:48:
70:11:2c:60:9d:ea:d9:af:98:29:89:67:b1:6f:28:
64:85:d8:6c:6e:7d:94:e3:a8:88:e3:5c:2c:bb:9e:
1d:cd:a8:ca:33:08:52:02:af:96:65:80:90:a1:fd:
03:52:98:de:f7:0d:25:40:66:15:41:fe:21:29:ec:
3a:93:04:7b:7b:e4:5a:b9:02:2a:46:87:ab:8e:f0:
fb:33:2b:ce:11:96:5a:f5:f3:54:ac:c5:e9:58:ff:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8B:2E:22:94:04:5E:49:A0:18:67:DA:6F:18:24:A1:B3:02:3A:AA
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/5osuIpQEXkmgGGfabxgkobMCOqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.144.176.0/21
Signature Algorithm: sha256WithRSAEncryption
90:31:e4:ac:c0:b4:07:f7:ec:06:5f:0d:8f:8e:77:75:ad:63:
b4:ab:3f:9b:bb:78:65:fb:82:33:4e:ee:3a:37:d7:5c:96:ec:
bc:04:bc:68:5b:b1:e9:18:b8:8b:d7:3e:1a:21:ad:ad:0a:b2:
e7:0a:3e:77:c3:6a:7d:16:f6:b0:6e:c1:84:b3:b9:13:ab:6d:
ce:fd:bf:37:63:de:47:0b:9e:fe:1a:39:d9:dc:dd:5e:ac:60:
94:fb:11:77:3d:1c:1f:b0:5c:20:f4:d7:23:90:94:89:6b:76:
28:79:2b:8a:e3:bb:88:26:59:53:d0:5d:7c:1f:83:3f:91:86:
bc:6d:e9:4e:01:0f:7a:4f:57:f5:cb:3d:16:bd:0e:11:37:1d:
dc:6c:aa:46:69:9b:38:c8:df:ef:f1:78:95:71:ea:fa:47:5f:
73:1e:8f:cd:97:fe:20:c7:0a:be:46:ac:0d:00:d1:cc:eb:a6:
6f:ef:43:d3:4b:6b:e4:8c:13:10:be:61:ee:36:bc:9d:59:cf:
20:90:bf:92:85:78:3c:c4:84:ef:58:66:0f:a6:06:b8:af:c6:
55:28:70:7f:2a:a3:34:e4:e3:f4:88:0d:86:98:74:7e:a7:fe:
5d:dd:1a:7e:08:b6:c9:5e:46:fc:2d:40:b7:a6:62:9d:42:1d:
0c:60:22:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:46:20 2025 by rpki-client