Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/S11P7YKPNs_v7YdolA0FgB6j23E.roa
File: S11P7YKPNs_v7YdolA0FgB6j23E.roa (raw, json)
Hash identifier: TBKKGcG+I3pRwCi4L7A30ry5+YnjawyAWGjuVum7Pns=
Subject key identifier: 4B:5D:4F:ED:82:8F:36:CF:EF:ED:87:68:94:0D:05:80:1E:A3:DB:71
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 019425FDBC44F93E6EB2586C96516DF9E519
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/S11P7YKPNs_v7YdolA0FgB6j23E.roa
Signing time: Thu 02 Jan 2025 07:49:33 +0000
ROA not before: Thu 02 Jan 2025 07:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34762
IP address blocks: 213.158.78.0/23 maxlen: 24
213.158.84.0/22 maxlen: 24
213.158.88.0/23 maxlen: 24
213.158.90.0/23 maxlen: 24
213.158.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:bc:44:f9:3e:6e:b2:58:6c:96:51:6d:f9:e5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Jan 2 07:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b5d4fed828f36cfefed8768940d05801ea3db71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:90:eb:53:5a:95:23:e4:7d:05:89:60:7c:
c3:d5:ce:da:a8:8f:07:f6:08:b9:02:ff:c5:ff:8b:
2d:1c:34:a2:1a:b5:30:27:0e:51:1f:a5:17:af:58:
94:8d:55:95:f7:22:88:45:b8:90:29:ee:07:3d:99:
95:f0:f4:66:6e:f0:07:55:a8:93:9f:78:cf:fe:af:
c2:18:32:95:21:09:13:31:2e:18:8f:e6:5d:75:07:
4f:0d:97:a9:ae:f1:82:81:b3:41:23:d8:6a:35:1b:
d1:8f:68:bf:79:5e:47:81:46:a6:c0:c4:f7:8d:65:
ed:b8:db:64:ef:7f:03:7e:5b:03:e0:df:b9:e6:43:
65:86:dc:aa:ba:e1:59:ac:b7:63:12:b7:c3:93:60:
69:86:d6:66:da:03:40:bd:01:67:53:bb:2a:0c:78:
3a:c2:5c:8e:4f:8f:ea:d9:97:ba:98:11:df:95:05:
04:8e:01:10:8e:46:11:f3:47:b2:59:ac:3c:40:8c:
87:f3:66:14:78:27:33:de:a1:74:bd:eb:ac:b9:e0:
9c:80:24:cd:9a:2f:cf:bf:37:ea:46:d2:6b:29:79:
69:a3:0a:f6:d0:9f:cf:d7:7f:a8:ab:57:05:a1:16:
29:4e:41:f5:b6:5a:d1:33:82:8a:9a:f1:af:4e:19:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5D:4F:ED:82:8F:36:CF:EF:ED:87:68:94:0D:05:80:1E:A3:DB:71
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/S11P7YKPNs_v7YdolA0FgB6j23E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.158.78.0/23
213.158.84.0-213.158.95.255
Signature Algorithm: sha256WithRSAEncryption
58:eb:c4:66:37:6d:03:cf:e3:88:80:26:d4:b5:4d:8d:0b:d9:
8b:3e:a9:d1:62:20:97:8c:61:b3:99:d7:b7:03:30:1f:49:a7:
90:06:a6:b4:ed:f3:96:a8:73:73:35:7c:5e:c8:ad:a0:c2:6e:
67:a2:e0:bb:a7:dc:2c:9e:29:ae:1a:df:1b:c8:c7:d9:46:9f:
34:24:6e:a9:07:bb:4a:33:2c:f6:e4:aa:39:c7:a2:ff:bf:0b:
27:46:6d:c3:00:39:53:cf:1b:56:d6:25:3b:5a:cf:22:3d:3f:
e6:3f:be:ff:3e:a9:9e:87:6d:a4:08:67:af:98:16:f5:b0:c0:
25:c0:0c:26:fd:b4:3e:c2:53:d7:bb:c2:14:78:04:72:b9:3e:
35:a4:aa:c6:6d:32:ed:00:5d:b5:a8:b8:db:ab:fd:c4:98:19:
8d:fc:6b:9b:e4:1b:ef:16:6f:bf:f5:78:3a:f3:7b:dc:c4:5e:
82:2b:2c:c9:25:bd:97:93:20:a9:02:ff:cf:fa:3b:e2:15:aa:
19:09:f3:a4:7d:48:90:b4:47:94:78:ce:a3:a6:db:ef:b0:e9:
53:8a:c6:c1:23:69:88:d2:89:d8:98:e3:7c:8a:04:31:97:6c:
8f:63:4f:ff:e0:bc:f2:8c:ab:2c:c3:b8:13:61:f4:92:09:2b:
ad:ed:1b:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:07:26 2025 by rpki-client