Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/7wJbNCUcwtFlKnAHPgTuv8Sn0i4.roa
File: 7wJbNCUcwtFlKnAHPgTuv8Sn0i4.roa (raw, json)
Hash identifier: Yg17vxRzYWiVt6fOmSwVpKWZGt89EQyeG3U2CWqSktI=
Subject key identifier: EF:02:5B:34:25:1C:C2:D1:65:2A:70:07:3E:04:EE:BF:C4:A7:D2:2E
Certificate issuer: /CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Certificate serial: 0194244563AA41846D3AB2261240E951EECC
Authority key identifier: 1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/7wJbNCUcwtFlKnAHPgTuv8Sn0i4.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44066
IP address blocks: 5.132.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:63:aa:41:84:6d:3a:b2:26:12:40:e9:51:ee:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4a2020b82d0294e90a2d6b2c0f28d1173b6465
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef025b34251cc2d1652a70073e04eebfc4a7d22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c1:d8:13:7a:13:2c:26:50:80:35:be:3b:01:
ab:89:93:37:13:18:86:85:47:6e:2d:c1:47:c9:4e:
55:b0:4e:5b:0a:99:5d:c9:02:4c:72:94:60:35:91:
16:9c:fd:ca:d5:6b:2d:b5:4e:51:bb:05:c5:67:4f:
ae:e0:b6:71:17:8c:e4:0a:89:58:6c:a7:2d:c4:60:
cd:0a:84:ab:86:31:8b:b8:d8:ec:49:a5:86:86:25:
8a:f6:45:33:39:51:90:1c:00:65:ee:fa:a6:2e:b3:
f0:9f:71:8c:d4:fe:35:e4:6c:69:6c:2e:a4:64:eb:
f2:c1:de:2c:f2:1b:2c:52:a4:82:ca:14:4e:2f:49:
94:22:8c:94:30:d7:9d:e8:74:98:67:a9:16:1a:76:
0a:60:41:81:3c:a0:23:dd:b7:18:db:ca:ae:a6:e7:
9a:f9:e9:bc:42:36:c9:21:ef:85:e2:d0:a3:8d:94:
68:be:36:3f:a9:72:8f:d5:59:fe:14:cf:d7:26:45:
b4:76:dc:e3:17:a2:a5:83:5e:86:cf:3c:62:8e:d8:
9a:6d:46:5c:80:ce:c8:44:f8:02:34:b4:0a:08:fa:
4f:cb:98:bf:ce:de:de:92:70:99:c9:30:1f:65:ec:
75:b3:c4:fd:42:03:24:a3:c3:06:3e:b9:ad:26:f6:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:02:5B:34:25:1C:C2:D1:65:2A:70:07:3E:04:EE:BF:C4:A7:D2:2E
X509v3 Authority Key Identifier:
keyid:1E:4A:20:20:B8:2D:02:94:E9:0A:2D:6B:2C:0F:28:D1:17:3B:64:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkogILgtApTpCi1rLA8o0Rc7ZGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/7wJbNCUcwtFlKnAHPgTuv8Sn0i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4c48bb-366c-41f5-9b2d-530440c4fa29/1/HkogILgtApTpCi1rLA8o0Rc7ZGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.132.158.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:57:45:dc:3a:54:bc:a7:e4:58:71:9e:ab:47:b2:0e:68:8b:
97:0d:7b:a9:1b:03:40:d1:0f:60:cf:cf:ef:0a:bc:69:6d:5d:
f8:19:9a:74:18:0b:fe:e7:19:e7:1e:80:95:bb:9e:fb:01:eb:
b0:e5:65:80:b5:96:b1:a6:c9:ca:f7:f4:15:0d:a7:07:dc:88:
49:68:f8:45:27:f5:d9:e7:8d:c3:ae:24:71:e1:cd:ce:57:6f:
aa:2d:05:3a:f6:ae:23:17:87:c0:da:7a:2b:c6:ba:51:b6:e9:
e9:9c:26:62:3c:fb:30:8b:2e:43:d4:22:57:88:dd:5e:27:fd:
01:3a:2a:09:20:23:3e:65:b4:48:e4:4a:9f:c0:0d:48:e8:14:
b2:b3:84:a6:51:2d:53:c5:dd:2e:89:02:42:ef:59:ca:c8:1a:
2b:80:57:06:d8:20:47:f5:95:4b:c3:ac:7c:11:4e:33:6c:fb:
1f:07:ae:ad:98:65:5c:df:dc:fa:14:9c:16:6f:7b:77:1a:b9:
0f:5f:29:bf:d1:02:49:ec:96:b6:af:b4:48:8d:68:04:81:70:
27:74:ac:21:35:9a:77:0e:7e:d9:ac:29:7b:13:80:79:b9:8a:
2d:fb:1e:0a:6b:d5:a8:26:e9:64:c8:60:b1:10:30:24:3f:58:
a1:16:64:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:21:17 2025 by rpki-client