Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/1-PzmF4tvuhKnjwj3wR1qNsz6zbo.roa
File: 1-PzmF4tvuhKnjwj3wR1qNsz6zbo.roa (raw, json)
Hash identifier: rCQ1A+S4WfDslZlckjYnZ133GXKciaH3+lfRZ8R/JEo=
Subject key identifier: F8:FC:E6:17:8B:6F:BA:12:A7:8F:08:F7:C1:1D:6A:36:CC:FA:CD:BA
Certificate issuer: /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial: 01942445520192051BF9B98C7404D48E1F64
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/1-PzmF4tvuhKnjwj3wR1qNsz6zbo.roa
Signing time: Wed 01 Jan 2025 23:48:30 +0000
ROA not before: Wed 01 Jan 2025 23:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201921
IP address blocks: 5.63.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:52:01:92:05:1b:f9:b9:8c:74:04:d4:8e:1f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
Validity
Not Before: Jan 1 23:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8fce6178b6fba12a78f08f7c11d6a36ccfacdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:14:02:e6:d8:3a:81:1f:3b:8e:9c:e0:de:
68:8b:32:09:83:e6:33:b7:de:66:47:ef:c1:c7:cc:
09:27:24:d0:46:b7:ea:0c:52:bf:75:db:53:77:e7:
13:e3:3c:10:53:1c:b0:63:79:de:0b:cf:8a:77:f8:
71:eb:7b:47:8b:c5:ec:13:32:32:6f:d7:f6:92:34:
6d:41:b4:3c:ca:78:79:4b:69:d9:44:5a:ac:73:40:
5e:a3:3e:0b:a0:93:15:4b:79:d6:81:91:ca:2e:58:
91:f2:36:ed:56:a5:2d:f8:2f:51:69:8b:a2:fe:d6:
e1:d2:60:4b:69:bf:ff:22:40:d5:af:af:3d:0b:57:
ea:84:81:94:96:b3:20:c6:7f:64:e2:c9:61:ec:7b:
5d:41:54:40:4e:a4:21:63:6f:09:5e:7b:1a:28:07:
b7:0d:8f:99:db:6d:74:ca:9b:87:e4:25:c3:db:f2:
40:fe:2e:38:0d:47:49:2b:9a:94:e0:01:d8:81:15:
0c:71:f9:54:58:bd:48:d1:cf:69:d9:7a:2c:f1:f2:
57:94:df:60:fc:e3:bf:6d:2f:c2:e0:09:c5:b5:77:
42:54:0f:ad:f2:d2:85:f3:5e:f2:a3:f8:bb:20:7e:
45:24:94:4a:87:c6:f7:6d:ca:61:36:88:83:d8:74:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FC:E6:17:8B:6F:BA:12:A7:8F:08:F7:C1:1D:6A:36:CC:FA:CD:BA
X509v3 Authority Key Identifier:
keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/1-PzmF4tvuhKnjwj3wR1qNsz6zbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.160.0/24
Signature Algorithm: sha256WithRSAEncryption
64:90:6b:be:05:a6:4c:ac:b9:06:cf:06:48:6c:7a:01:72:ef:
b6:95:17:ce:7a:33:17:0c:98:43:62:34:d8:9a:00:2e:3f:2d:
24:9c:ee:6f:05:39:32:91:d1:37:a9:ce:8e:99:ac:82:6b:93:
c7:8e:f5:9a:40:0a:72:b5:9f:60:ca:b8:b2:ff:aa:75:58:ae:
1c:c4:7d:64:d3:47:12:1c:00:42:8f:c5:36:1a:7d:de:29:d1:
05:2b:eb:a9:b3:a3:1f:fb:df:b3:46:32:6a:72:61:9e:a9:e6:
c7:73:1b:45:4e:73:d7:6a:b3:c0:91:b3:1e:31:ec:41:f6:1f:
c8:59:bd:12:6f:48:eb:4d:9e:48:9d:22:59:f0:2e:8a:e1:eb:
8c:1d:25:79:9f:6f:23:1e:12:f7:c7:8b:de:ba:b8:9d:b4:3e:
bb:01:42:07:40:70:00:57:ca:56:85:f5:76:5d:94:98:4b:13:
92:2c:c8:cc:75:8f:83:01:1b:35:3a:ba:b7:e6:82:c6:5c:de:
39:bf:ca:a7:6d:26:55:0e:db:9f:d6:84:81:7e:7b:60:20:3d:
92:b6:fd:83:8b:c0:05:15:4d:16:84:7b:79:fd:dc:ba:14:62:
17:50:c6:a7:a7:85:1a:94:d0:1b:65:7c:7a:f3:f1:31:e8:9b:
41:bc:30:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:54 2025 by rpki-client