Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/A3dj5P_xKMDJjc-IVzSyCe735rY.roa
File: A3dj5P_xKMDJjc-IVzSyCe735rY.roa (raw, json)
Hash identifier: +ztHeCTdZHE/HgThAQ7CjX7HR6VG5JPZ0GRqUwHJv5U=
Subject key identifier: 03:77:63:E4:FF:F1:28:C0:C9:8D:CF:88:57:34:B2:09:EE:F7:E6:B6
Certificate issuer: /CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
Certificate serial: 019421440D3ACB06375377067FE21C9A017A
Authority key identifier: 64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/A3dj5P_xKMDJjc-IVzSyCe735rY.roa
Signing time: Wed 01 Jan 2025 09:48:15 +0000
ROA not before: Wed 01 Jan 2025 09:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207294
IP address blocks: 188.190.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0d:3a:cb:06:37:53:77:06:7f:e2:1c:9a:01:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
Validity
Not Before: Jan 1 09:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=037763e4fff128c0c98dcf885734b209eef7e6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9d:4d:1d:fe:2d:39:1b:2d:95:aa:aa:01:ed:
25:46:e6:21:48:ca:8d:61:9f:a5:b2:18:d5:e8:77:
e0:b1:af:52:ce:81:90:bc:8b:b6:78:60:f7:69:d4:
9c:98:c6:a2:7c:7a:a0:b7:3a:8f:d9:fd:0d:f5:fe:
cc:f5:e8:de:40:d7:e3:30:32:e2:cc:48:99:35:40:
28:b3:47:8e:e4:70:6d:b4:f4:57:58:64:a3:17:79:
4f:dc:b0:84:05:2e:c9:6a:58:4e:1a:ac:d2:56:eb:
8d:f2:da:55:ac:5c:8d:68:b3:ff:a9:99:95:34:30:
8e:62:0e:c3:d6:90:e1:fa:4c:ee:a4:8d:a6:d7:69:
fd:56:9f:30:3d:88:da:32:2b:22:cc:63:90:bd:a5:
f9:d0:6c:fc:af:41:bf:4e:ed:3a:61:eb:95:d6:91:
1e:eb:f8:0d:4b:11:36:a4:4e:ec:7e:02:74:d0:34:
f5:72:54:f2:c9:99:f4:cc:fa:1d:ae:1e:b6:50:17:
d8:91:88:c6:2e:f6:aa:ba:85:19:3f:7e:31:f5:b9:
08:85:f3:36:53:7e:68:22:af:09:07:7d:1f:a8:5f:
1b:83:2f:87:13:3b:04:88:89:67:98:85:f5:ad:98:
83:9d:01:cc:dc:75:c4:d6:1d:4f:45:c7:63:78:86:
30:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:77:63:E4:FF:F1:28:C0:C9:8D:CF:88:57:34:B2:09:EE:F7:E6:B6
X509v3 Authority Key Identifier:
keyid:64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/A3dj5P_xKMDJjc-IVzSyCe735rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.124.0/22
Signature Algorithm: sha256WithRSAEncryption
01:24:b8:1a:8e:5d:a3:44:05:36:97:b1:5d:75:95:ec:e8:a7:
6c:9f:aa:06:ad:d4:4d:34:b6:33:e5:b9:9f:6d:11:b2:99:b5:
e9:e8:55:cb:25:12:a0:89:03:e1:37:3f:c1:d8:dc:fd:cb:8c:
ee:68:67:34:bc:76:4d:23:c1:3d:88:08:58:3a:fe:66:f9:2e:
aa:b9:8b:cc:82:09:92:53:6d:db:80:e5:d5:bb:8e:d4:20:08:
d8:57:32:31:b0:6f:ed:19:6b:e4:24:9c:44:9f:62:41:6a:62:
9b:2a:54:52:81:fd:3a:e3:df:fa:00:c6:24:62:7a:60:49:fc:
76:f1:81:05:86:b1:e1:1c:c2:7d:2d:92:c0:ce:4b:68:7a:30:
35:b9:12:ab:31:52:d7:06:0d:72:08:58:e2:77:0c:19:ce:4a:
85:27:6b:32:4d:7d:b7:eb:ec:10:f2:2a:c2:ab:0a:fe:f7:f8:
f7:10:74:f8:e4:eb:8e:56:c8:96:08:69:7d:8c:09:9f:7d:a1:
ac:21:22:8d:99:58:44:4a:5e:bd:48:44:a7:94:21:16:94:83:
14:35:de:8a:0c:37:03:df:2e:69:0b:0c:37:23:bc:7c:e6:7e:
2e:9d:9d:36:99:0f:c0:89:ef:eb:3f:54:ce:df:d3:37:e0:cb:
a6:26:5c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:54:26 2025 by rpki-client