Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/W5VtAzPYHnJg8m79kjyqgqKE878.roa
File: W5VtAzPYHnJg8m79kjyqgqKE878.roa (raw, json)
Hash identifier: Pv7+GoLFJlWTHtdGXau6mFaCy435N0A5ynkKLESZfdw=
Subject key identifier: 5B:95:6D:03:33:D8:1E:72:60:F2:6E:FD:92:3C:AA:82:A2:84:F3:BF
Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial: 019428278716B20A7722BA93499BA0FF8764
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/W5VtAzPYHnJg8m79kjyqgqKE878.roa
Signing time: Thu 02 Jan 2025 17:54:26 +0000
ROA not before: Thu 02 Jan 2025 17:54:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198558
IP address blocks: 37.0.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:87:16:b2:0a:77:22:ba:93:49:9b:a0:ff:87:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Validity
Not Before: Jan 2 17:54:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b956d0333d81e7260f26efd923caa82a284f3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:2c:bd:80:af:9e:f5:74:ab:4b:51:52:4e:
51:63:62:0d:c1:87:74:43:5e:de:74:05:9f:bd:d4:
bf:bd:16:87:7f:28:97:cc:ef:7e:a7:6e:b2:71:ab:
8c:07:26:78:f1:b1:85:1b:42:e8:fd:89:20:93:fa:
a2:7f:67:dd:8e:bb:66:60:26:e7:2f:c2:d1:c7:d8:
b9:62:97:44:93:28:3c:92:34:6f:24:6a:72:f1:8b:
88:60:39:82:cc:d3:22:db:05:7f:dd:7e:32:b8:7f:
57:73:92:98:b8:cf:1d:23:a1:f9:76:d5:4d:2b:9e:
ae:43:ed:87:49:0e:f2:95:f7:13:36:3f:0f:6e:a2:
0d:51:57:5f:0f:34:0a:ea:3a:1b:c5:fb:c2:3d:3f:
98:e5:78:ec:61:db:b8:13:bb:41:e7:aa:3e:f2:d7:
fc:88:78:7a:f9:a0:2b:89:dc:f5:b3:db:4c:b3:89:
64:1a:e5:aa:0e:ce:99:59:4c:c8:61:5c:01:4d:a5:
80:52:7d:c6:e3:89:5b:39:2c:be:51:f1:43:31:f0:
d1:60:84:7e:02:4d:07:48:fc:f4:e1:37:d8:32:5f:
dc:3d:1b:fd:4e:fa:b6:87:e1:b4:f5:b7:b1:2d:04:
bb:81:31:67:dd:bd:ac:c6:6b:8b:e6:d1:e7:33:15:
d5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:95:6D:03:33:D8:1E:72:60:F2:6E:FD:92:3C:AA:82:A2:84:F3:BF
X509v3 Authority Key Identifier:
keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/W5VtAzPYHnJg8m79kjyqgqKE878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.112.0/24
Signature Algorithm: sha256WithRSAEncryption
38:bf:a0:19:46:76:a2:6d:de:1b:ba:5d:e6:65:46:20:65:ba:
a2:10:55:5f:a2:ad:be:b9:2b:cc:54:c1:82:71:5b:c3:57:39:
d1:76:20:bb:ea:b4:9c:30:d3:1f:10:3b:f6:c2:a9:42:8b:64:
98:2b:ca:ff:e4:fe:34:f1:7c:42:c6:1d:a6:f4:b8:b5:da:bf:
13:5e:46:d9:dd:4f:87:ae:da:f4:a8:86:fb:be:2c:78:d3:16:
8c:05:61:4f:1b:65:f9:2f:06:08:fa:54:b0:ed:55:fa:36:39:
88:94:d7:3a:ec:ef:21:42:89:d5:55:03:00:a0:b1:5e:7c:ca:
a0:db:47:b7:85:57:16:8d:c6:5e:4c:1f:02:0c:7d:3a:24:e1:
3b:78:f3:14:9d:58:ba:1d:4e:5f:99:50:25:c8:a4:81:41:ea:
c0:69:a6:c1:ff:53:d1:8d:e1:e3:8e:90:13:aa:89:a9:78:53:
63:9b:ad:54:2d:79:73:54:21:c6:bf:04:fe:3d:30:d1:a7:7e:
67:10:c4:43:42:27:c9:86:76:86:66:a1:2f:23:4c:b3:58:b2:
de:aa:34:60:2c:ed:ec:85:b0:32:19:9a:99:aa:b0:72:6a:53:
b7:cc:26:2e:6d:d3:db:ed:46:03:54:2c:ae:a0:4c:e0:58:59:
01:b5:ba:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:37:46 2025 by rpki-client