Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/S1kW1dWYYAUdp34Ffvr3hqq6tx4.roa
File: S1kW1dWYYAUdp34Ffvr3hqq6tx4.roa (raw, json)
Hash identifier: HPlJ0x+8hEc9+twnaORN/j75RT2RjTnSkW49RshA3cE=
Subject key identifier: 4B:59:16:D5:D5:98:60:05:1D:A7:7E:05:7E:FA:F7:86:AA:BA:B7:1E
Certificate issuer: /CN=88a94a4140e19b32063fc6e779f59314a74a0c51
Certificate serial: 01941FFA5A5135EBE2C6717A295382C2D0F5
Authority key identifier: 88:A9:4A:41:40:E1:9B:32:06:3F:C6:E7:79:F5:93:14:A7:4A:0C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/S1kW1dWYYAUdp34Ffvr3hqq6tx4.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44018
IP address blocks: 195.8.121.0/24 maxlen: 24
195.8.122.0/23 maxlen: 24
2001:67c:2590::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5a:51:35:eb:e2:c6:71:7a:29:53:82:c2:d0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a94a4140e19b32063fc6e779f59314a74a0c51
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b5916d5d59860051da77e057efaf786aabab71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:a3:e6:64:b7:98:99:ed:04:b8:a8:5e:d8:
ba:88:90:9d:f5:a7:27:a6:85:77:f9:24:98:b9:6d:
13:92:9a:a0:f4:a5:9d:89:8e:f6:b9:84:e2:61:c8:
a2:e4:ea:70:86:91:b9:66:90:c2:21:56:c6:25:d3:
e9:70:d5:1c:d4:23:30:fe:5f:40:37:29:ce:ad:b8:
7a:a8:ca:50:fc:93:90:a2:3e:ac:83:21:bc:89:07:
85:48:ac:bc:cd:79:24:95:0a:42:60:e5:d1:42:37:
81:2d:88:04:0f:ec:bb:44:22:dd:63:a6:e7:97:97:
42:29:d6:3c:eb:1d:0f:7c:a7:a4:93:bc:54:41:e2:
0a:7b:0c:1c:6d:26:7b:44:0c:b8:d8:7b:b6:9c:9d:
e0:72:3f:be:63:46:5d:5c:4f:53:b7:a2:46:5e:3f:
a5:33:df:fa:df:c2:9d:85:c8:67:a5:5a:4f:5d:59:
92:55:86:2b:b4:24:ca:83:0b:01:0c:83:3c:cc:10:
c3:ca:82:de:9e:9c:88:7a:29:c4:26:6a:b7:77:4b:
a8:e0:50:bb:06:29:f3:00:df:6e:bb:2f:07:66:cc:
b1:18:e2:d5:e4:4f:d8:4f:6b:c8:6e:da:e9:1b:75:
a9:33:2c:c0:f8:30:91:74:ec:19:4b:01:20:ad:29:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:59:16:D5:D5:98:60:05:1D:A7:7E:05:7E:FA:F7:86:AA:BA:B7:1E
X509v3 Authority Key Identifier:
keyid:88:A9:4A:41:40:E1:9B:32:06:3F:C6:E7:79:F5:93:14:A7:4A:0C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/S1kW1dWYYAUdp34Ffvr3hqq6tx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.121.0-195.8.123.255
IPv6:
2001:67c:2590::/48
Signature Algorithm: sha256WithRSAEncryption
13:44:b2:fc:ee:cc:04:f0:36:ca:9c:cc:da:76:0a:66:10:b2:
6c:d3:e3:16:d0:88:af:8f:aa:7c:a6:17:35:a3:8e:c5:70:f0:
3f:c5:4a:49:ca:8d:3c:32:cc:d8:be:59:19:a3:7a:1e:19:af:
d3:5a:45:43:3c:b3:7c:e6:22:78:d4:8a:4e:6a:e9:2c:b1:63:
2b:05:c1:16:18:ba:dd:b3:17:5c:52:9b:34:2e:c9:b8:3d:05:
8f:78:12:8a:60:84:04:79:7c:28:f8:bc:f9:a2:3e:77:55:c0:
f3:da:4c:6b:fe:63:5a:0a:f8:5e:ec:83:e8:c2:75:f4:d6:34:
3f:cb:a7:61:8c:6e:10:95:51:dc:f4:f8:68:ae:21:96:7b:f5:
d7:a0:d9:9c:e4:03:c8:5d:62:ac:79:c8:93:96:4b:8e:b4:9d:
e2:fd:c1:74:91:5d:b1:7f:1d:80:28:2c:cf:a4:62:a8:31:a5:
98:eb:ef:b2:5d:ca:6b:d2:83:66:70:56:f5:ee:66:63:85:44:
86:e1:e8:ca:5e:4e:d7:7d:09:97:ea:1c:18:9a:4c:2c:45:fa:
4e:61:3d:cc:d0:43:db:07:fa:22:04:85:31:e8:85:d9:ca:36:
e5:49:4b:03:87:53:af:7a:b8:40:5c:04:03:ee:7b:29:93:e0:
ea:cf:22:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:29:16 2025 by rpki-client