Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/w_7-SYv5bHiwdydNGFlWuXsDXgg.roa
File: w_7-SYv5bHiwdydNGFlWuXsDXgg.roa (raw, json)
Hash identifier: KW5l2Z272khkMu93M3YIBl32KtQLTDgrGalDxIjvjZI=
Subject key identifier: C3:FE:FE:49:8B:F9:6C:78:B0:77:27:4D:18:59:56:B9:7B:03:5E:08
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01942521666F7C9479DAC784446CF619AC28
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/w_7-SYv5bHiwdydNGFlWuXsDXgg.roa
Signing time: Thu 02 Jan 2025 03:48:53 +0000
ROA not before: Thu 02 Jan 2025 03:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 151.145.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:66:6f:7c:94:79:da:c7:84:44:6c:f6:19:ac:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jan 2 03:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3fefe498bf96c78b077274d185956b97b035e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:24:c3:09:76:b9:dd:2c:76:70:ef:f5:d4:b1:
10:48:6d:24:75:29:cc:14:45:e3:62:f6:8d:4e:2c:
b7:2f:c4:3b:55:79:f9:c5:5a:8b:fa:60:3f:c4:4d:
06:cf:4e:ac:64:b5:bf:87:47:78:2d:12:cd:49:4f:
29:00:42:5e:01:20:7f:e2:c3:10:7a:65:22:81:3c:
04:0e:2d:3c:ab:5d:bf:64:c7:21:02:65:0c:54:97:
ac:34:fc:22:b1:03:d5:85:72:2e:40:d8:1d:81:71:
72:34:26:74:e9:97:9d:c2:e2:7c:e3:48:bf:fc:73:
0e:64:77:f6:21:09:b2:41:a9:1e:63:96:4b:a0:3f:
ba:21:df:98:27:34:d6:80:e6:f0:92:bb:1c:de:7f:
e7:26:f0:2e:bb:51:30:e4:39:6a:75:0f:74:35:79:
c1:74:f3:ec:a4:79:60:9d:c0:c6:c7:87:49:08:53:
ff:fc:16:9a:c7:93:7e:8f:f9:6b:a4:03:92:db:0c:
23:8e:45:07:0c:65:d9:d7:3d:d6:f5:8b:fa:67:d1:
75:30:02:ac:6a:55:65:f7:dc:e4:9e:44:48:88:c5:
2a:e3:e1:8f:0b:76:cf:00:40:95:57:4b:10:cc:54:
d7:9c:1e:bc:88:ac:a7:55:21:72:97:50:d1:63:20:
2c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FE:FE:49:8B:F9:6C:78:B0:77:27:4D:18:59:56:B9:7B:03:5E:08
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/w_7-SYv5bHiwdydNGFlWuXsDXgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.145.160.0/19
Signature Algorithm: sha256WithRSAEncryption
2f:7b:f0:55:03:eb:17:70:27:57:46:a2:55:62:3a:e1:66:3f:
0f:3e:43:a3:48:92:0e:12:14:85:63:7b:4b:1d:93:89:7b:15:
5a:0a:15:43:1f:e9:3e:98:08:2a:79:42:3c:10:8f:3e:33:5f:
87:51:a7:8a:71:4b:47:ce:d4:89:f5:3a:fe:9f:96:02:2b:1b:
ea:e4:9e:5f:a0:d3:27:c7:b7:c2:45:50:fc:d6:9f:62:bc:89:
5c:06:43:0f:af:f0:4c:90:ce:61:ae:84:63:89:20:43:52:c5:
23:54:80:a3:01:76:b5:1c:c1:fc:57:9b:3c:d8:14:c6:d3:46:
d3:7f:c9:a5:d4:f7:77:36:0b:f2:15:c6:b6:15:60:0c:80:26:
19:7c:bc:d2:aa:ea:ee:f8:53:08:ed:d9:ec:8d:e2:0c:33:56:
9e:ca:9c:37:b7:4a:08:e1:6d:30:e9:e8:b4:ee:16:11:49:e2:
4d:e5:1d:9a:8d:0d:da:74:7a:3f:08:ee:db:4f:3d:c7:83:ef:
a7:7f:db:14:77:a0:cd:03:30:28:1b:72:64:c8:5d:3e:3a:db:
bc:d0:c6:66:d4:66:ee:14:51:be:8b:60:ac:af:77:b7:9e:4c:
2f:d3:57:bc:04:44:ed:e6:15:81:2c:fd:04:d0:49:30:d4:3b:
22:de:41:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:48:54 2025 by rpki-client