Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/AJZHmYeOjA6WzhCmkrG9-Q9R6e0.roa
File: AJZHmYeOjA6WzhCmkrG9-Q9R6e0.roa (raw, json)
Hash identifier: 2w9YT9FL9nWS9KMiSVT8Wf4Dme3XTUtS7KQ1r9kXdzY=
Subject key identifier: 00:96:47:99:87:8E:8C:0E:96:CE:10:A6:92:B1:BD:F9:0F:51:E9:ED
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 019425FC4008C3377D3D579B28F13A3F67C6
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/AJZHmYeOjA6WzhCmkrG9-Q9R6e0.roa
Signing time: Thu 02 Jan 2025 07:47:55 +0000
ROA not before: Thu 02 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59720
IP address blocks: 213.166.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 20:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:40:08:c3:37:7d:3d:57:9b:28:f1:3a:3f:67:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Jan 2 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00964799878e8c0e96ce10a692b1bdf90f51e9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:bc:da:fe:d4:0c:39:02:38:f0:41:22:77:
d8:02:d6:42:d1:00:39:7a:f3:5f:d1:f4:3b:60:88:
50:eb:3b:fd:ba:6e:8b:95:18:e6:fa:a7:a0:64:8b:
b1:cb:1a:82:26:15:74:75:68:11:fc:37:af:72:6c:
e2:f9:76:9a:8a:51:6d:41:d6:17:40:c0:68:3c:03:
8f:32:7a:b9:82:26:4f:4d:da:ee:e0:e3:d6:9b:22:
54:42:50:07:e3:a6:7e:a4:40:ed:e4:ac:cd:75:93:
07:4d:4a:c5:00:df:46:d5:fc:fc:50:47:b7:e9:1e:
2e:f4:6d:d0:95:93:ea:0a:5f:51:5d:6f:6f:75:15:
8b:c7:8d:e8:fd:71:cd:ce:ea:bc:d7:a5:af:e6:b6:
a6:4d:b5:b7:51:4b:61:cc:95:6d:10:8f:a5:2b:48:
f7:36:33:b0:ca:9f:00:58:41:05:23:52:61:55:29:
10:b0:55:c8:2d:a2:84:52:7c:ec:2c:d1:fa:8b:99:
8c:4e:cb:ef:e4:f6:95:bc:21:22:0f:0c:1d:91:9a:
e8:50:07:f3:3e:98:b3:e1:24:6e:ca:fa:66:81:31:
43:1c:3d:32:70:31:32:1e:a1:75:a6:04:46:3e:2e:
d0:8e:c6:fc:57:b2:d7:f2:44:ca:f8:50:0b:2f:6a:
bc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:96:47:99:87:8E:8C:0E:96:CE:10:A6:92:B1:BD:F9:0F:51:E9:ED
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/AJZHmYeOjA6WzhCmkrG9-Q9R6e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.166.184.0/23
Signature Algorithm: sha256WithRSAEncryption
96:bc:55:46:66:51:4d:cb:66:b2:7a:b7:41:fc:82:53:12:62:
40:8a:d5:1f:59:33:d4:ee:89:1a:dc:1b:62:a7:b4:ad:4b:b9:
9a:5b:72:e1:5d:3e:6b:b7:f3:3b:db:93:b9:df:20:ff:0b:23:
c8:3e:85:f3:72:fa:2f:64:d3:65:d0:d8:a8:3e:3b:19:10:3f:
bc:92:42:8a:b4:0d:47:e0:40:78:33:2f:3b:18:65:d6:40:86:
8e:42:8b:62:82:0e:b2:3b:34:09:bf:70:64:3f:77:ca:4c:d0:
e0:0d:ae:7c:2a:b9:32:82:ec:bf:4e:8f:19:2d:d5:0a:05:67:
70:dd:51:9b:cd:3f:89:39:49:ec:8b:24:b9:4d:ac:8a:61:75:
3f:e7:2a:11:96:06:a8:4f:25:e5:96:9b:d6:28:1d:7a:fd:ec:
8d:65:3e:6f:3a:ed:17:9d:07:82:eb:06:7d:71:de:49:aa:de:
fd:f0:16:f3:ef:fa:4d:14:39:d5:7e:d8:1f:0c:da:0f:cb:71:
7c:cf:67:9d:08:8a:79:f5:0c:35:e0:72:f3:91:6d:cb:33:45:
1e:0e:78:5d:b9:d5:9a:e3:36:33:ca:19:b2:a0:2e:30:8c:f1:
2d:e3:d5:3f:aa:06:8b:55:23:40:3a:92:e1:f3:9d:fa:c8:88:
8b:97:9e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 05:14:12 2025 by rpki-client