Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/54hiEVCu42nmTIhQ3bS5shMqgPg.roa
File: 54hiEVCu42nmTIhQ3bS5shMqgPg.roa (raw, json)
Hash identifier: Rk0IIWWSef2+X2JeCku/njRK3YOnsndfGq7YFCHBZaw=
Subject key identifier: E7:88:62:11:50:AE:E3:69:E6:4C:88:50:DD:B4:B9:B2:13:2A:80:F8
Certificate issuer: /CN=b561ab100017a6125316fcc613384aafbde60189
Certificate serial: 019473BCE462ECCC07931EED595749726ABF
Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/54hiEVCu42nmTIhQ3bS5shMqgPg.roa
Signing time: Fri 17 Jan 2025 10:09:06 +0000
ROA not before: Fri 17 Jan 2025 10:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 192.42.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:bc:e4:62:ec:cc:07:93:1e:ed:59:57:49:72:6a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b561ab100017a6125316fcc613384aafbde60189
Validity
Not Before: Jan 17 10:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e788621150aee369e64c8850ddb4b9b2132a80f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:52:45:79:01:ed:ce:5a:59:40:4e:39:d5:
b3:cc:85:93:37:df:90:f1:93:de:ec:2b:94:3c:5b:
95:71:15:cf:fb:a9:ca:0f:30:31:20:82:d2:9e:49:
61:97:f4:1d:dd:ef:d9:a9:ea:a6:08:45:40:4f:0d:
4b:08:19:b0:58:63:3b:a7:66:7d:fc:91:66:ac:e3:
66:95:f3:82:2e:05:b4:a1:6b:76:df:3a:76:82:2b:
8a:bb:24:0c:94:69:56:bf:56:f3:76:63:7d:4f:57:
de:2c:1f:71:34:ce:b5:bf:0c:da:07:ef:a8:3a:cf:
fb:7e:d5:a0:3a:2d:e9:19:08:16:36:7b:8f:45:a4:
50:6e:b2:d7:57:17:27:1b:1d:86:6e:fa:5b:88:0e:
1a:26:f3:d1:d3:7c:c0:58:96:9f:d1:dd:c4:b5:3e:
58:93:e4:58:9a:1f:bf:83:c8:39:25:4e:aa:47:bd:
5a:09:cb:7b:4d:78:a8:63:ee:01:0b:b3:8e:3c:92:
d1:cd:f5:df:0c:c4:0c:1b:29:63:70:86:7c:06:8b:
af:7c:ae:db:1e:5b:ec:09:e6:9b:25:ab:50:04:5b:
7c:dc:4f:8e:f1:30:4b:85:2c:b0:b4:01:0e:2f:53:
83:a6:ad:c9:54:a7:11:ec:ed:ce:96:6b:b5:9b:95:
92:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:88:62:11:50:AE:E3:69:E6:4C:88:50:DD:B4:B9:B2:13:2A:80:F8
X509v3 Authority Key Identifier:
keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/54hiEVCu42nmTIhQ3bS5shMqgPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.42.124.0/22
Signature Algorithm: sha256WithRSAEncryption
42:c1:bd:5c:6a:df:90:30:99:74:2d:8e:a9:e5:66:8a:4f:6a:
bd:50:07:7e:09:33:d8:a1:31:16:da:ab:3e:64:54:0c:b9:c9:
99:a9:dc:ec:b0:c6:01:f4:92:69:98:dd:63:21:27:69:97:44:
b4:00:76:b3:a7:14:05:0e:d9:7a:b7:0d:53:10:c9:4a:2d:50:
17:44:ed:44:a2:79:1e:a2:73:65:f6:29:05:f6:59:3c:27:fb:
87:f2:d1:15:16:6e:2a:ed:c6:d1:e2:31:e1:8a:e0:e3:85:d3:
d5:82:90:37:8b:39:70:31:5b:db:7c:59:da:18:63:4b:f5:ed:
de:47:2f:77:f4:14:0a:0d:3f:ab:71:de:f1:99:a5:bd:5d:bb:
71:83:c7:66:da:7d:47:bc:a7:11:8a:50:c0:f3:27:6e:60:a4:
83:a5:49:46:97:4b:98:4c:f2:db:b2:26:58:a1:65:ae:43:4b:
de:f1:c8:b3:d8:cc:f9:8b:e0:2d:a7:01:fb:30:3d:c5:02:d0:
01:91:51:99:35:77:82:4e:49:42:ac:a6:45:59:93:db:ba:ad:
ce:1d:58:59:0a:b1:38:82:37:e2:66:f0:82:17:c3:44:03:c3:
bd:d8:0d:55:42:1f:79:8b:13:4d:07:72:76:18:60:8c:30:c0:
0c:d8:a4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:27 2025 by rpki-client