Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/K5VqopWIERNLlg6XYIHxbSMQwf8.roa
File: K5VqopWIERNLlg6XYIHxbSMQwf8.roa (raw, json)
Hash identifier: 6CqhTE0o4WqNXO4cXlNrVv+QBipio9ZfLg1pbcvRhvU=
Subject key identifier: 2B:95:6A:A2:95:88:11:13:4B:96:0E:97:60:81:F1:6D:23:10:C1:FF
Certificate issuer: /CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Certificate serial: 019422201C55D3BF41B06A72DA622D551F5D
Authority key identifier: A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/K5VqopWIERNLlg6XYIHxbSMQwf8.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62302
IP address blocks: 185.137.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1c:55:d3:bf:41:b0:6a:72:da:62:2d:55:1f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b956aa2958811134b960e976081f16d2310c1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:7c:dc:0b:a7:4c:7a:84:dd:b2:bf:99:33:
e5:10:ff:d2:0b:f8:4a:69:27:5d:fe:a0:16:dd:06:
c9:ce:9b:85:4e:7d:39:62:79:6e:34:37:d1:1e:ce:
df:63:26:b2:2e:d7:2c:86:4a:e7:bb:fc:0d:a8:e1:
fc:3e:33:b9:30:9d:41:e0:4a:b7:d4:34:ac:45:b3:
18:8e:07:76:a4:6c:21:51:b0:ae:e4:6e:51:0f:9e:
8c:19:45:dd:31:62:3c:31:71:9c:c9:16:5a:c5:b8:
a4:45:62:ad:97:9f:d7:9b:18:3a:9b:d5:41:0d:48:
ce:21:21:bd:68:9c:41:87:ea:cc:9a:22:5b:fe:93:
d8:36:86:8c:17:16:45:1c:ee:21:89:8a:af:e4:a4:
7b:c3:f3:6c:52:e3:02:ff:cb:c8:e9:88:29:73:73:
de:d7:64:1c:94:ef:2a:78:8d:57:0f:3d:b7:a3:bb:
60:16:74:78:9f:55:50:d6:8b:20:71:64:b0:f5:a8:
4b:30:3c:e8:64:c3:27:5b:35:7c:c5:c8:3f:81:8d:
61:a9:ff:3e:c6:8e:53:32:c7:59:ea:e9:b2:63:48:
7f:4f:d4:ed:1c:85:6c:38:78:24:41:18:c6:23:a4:
c0:35:ae:5b:44:1b:17:f0:1a:5c:a6:35:19:f8:b0:
11:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:95:6A:A2:95:88:11:13:4B:96:0E:97:60:81:F1:6D:23:10:C1:FF
X509v3 Authority Key Identifier:
keyid:A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/K5VqopWIERNLlg6XYIHxbSMQwf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.132.0/22
Signature Algorithm: sha256WithRSAEncryption
57:86:1d:22:37:ca:24:8a:c4:e0:05:1d:c1:fa:54:80:00:f0:
41:23:88:25:ed:48:c1:d9:f1:29:0c:fb:10:45:0b:dc:5c:a7:
56:e6:8f:5d:42:66:72:4c:fe:3d:af:a7:41:2a:8e:d7:f0:d7:
a7:7f:92:a3:21:af:89:ab:ef:45:48:08:ea:21:11:41:7c:08:
66:5f:48:0b:5b:88:0a:8d:13:57:cd:b9:48:82:0a:64:35:87:
4e:bd:6a:77:a9:ed:55:68:0e:7f:be:27:41:58:12:02:5b:b1:
4e:e3:6b:e2:bf:f5:ae:bf:ee:5b:96:76:d1:f5:31:08:f8:6a:
8e:ac:c2:37:c6:7e:a9:ff:97:e4:9f:ca:36:19:27:79:0c:0e:
80:73:58:d9:71:95:0d:03:d5:53:43:66:43:cf:ac:d0:93:9c:
eb:28:69:24:f2:ed:39:58:c6:16:67:08:e8:0f:fe:4f:ab:97:
7b:a7:90:e9:5c:10:77:3f:e5:5d:2b:e5:d8:27:b8:cd:19:f5:
ab:60:d2:77:10:f5:c0:c6:25:c4:cc:cf:43:f9:8e:66:4b:67:
f4:2d:e6:9d:dc:ce:54:60:b7:55:3b:51:d1:0e:97:e4:84:38:
ed:c8:c1:56:0d:c0:d7:84:57:c3:87:44:f1:b5:57:cf:eb:63:
b6:9d:cd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:42 2025 by rpki-client