Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/SoyMCY3fXGCSj-XCTAHUr0hFf_A.roa
File: SoyMCY3fXGCSj-XCTAHUr0hFf_A.roa (raw, json)
Hash identifier: WHZNVk5rkxUgRKY5cx0WN0Gw305ahmbGMR8jfHweazo=
Subject key identifier: 4A:8C:8C:09:8D:DF:5C:60:92:8F:E5:C2:4C:01:D4:AF:48:45:7F:F0
Certificate issuer: /CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Certificate serial: 019426D97CF4BC6D9126894CD1780012C60E
Authority key identifier: 11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/SoyMCY3fXGCSj-XCTAHUr0hFf_A.roa
Signing time: Thu 02 Jan 2025 11:49:35 +0000
ROA not before: Thu 02 Jan 2025 11:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 559
IP address blocks: 130.125.0.0/16 maxlen: 16
192.42.42.0/23 maxlen: 23
192.42.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 21:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7c:f4:bc:6d:91:26:89:4c:d1:78:00:12:c6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0
Validity
Not Before: Jan 2 11:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a8c8c098ddf5c60928fe5c24c01d4af48457ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:79:e2:21:6a:cf:3c:8b:5f:bc:c0:8d:86:
4d:17:6c:c7:63:95:f1:30:09:e1:eb:20:28:77:d2:
84:c7:27:0c:0b:cb:be:b4:c8:d2:bd:9b:df:1f:6e:
52:ef:da:44:9d:99:79:2c:6a:64:2e:62:75:76:69:
6b:ef:b9:de:6e:b0:3d:63:c9:12:07:97:f4:7a:2d:
8a:c4:f7:f7:f7:6e:75:b4:7d:24:ad:42:66:cd:66:
8d:ed:34:1c:c4:b2:b3:85:79:72:bf:00:ea:70:87:
ed:0c:26:f5:6d:bc:37:15:b8:9f:6c:f6:56:08:97:
4c:28:6e:e9:bb:8e:20:1b:22:77:e7:45:7b:07:a7:
95:56:d2:9c:6c:2f:a4:6e:87:49:12:37:14:5d:98:
a5:4e:84:86:b0:6d:00:44:45:1b:04:e7:90:16:62:
d6:db:11:5a:21:0a:42:3e:e0:83:56:71:13:50:5a:
eb:d9:a2:a3:c8:50:bc:a3:8e:51:4e:83:90:67:ba:
2b:6b:10:74:5a:fa:70:56:b5:95:e9:5b:a1:df:df:
9d:3c:89:ee:a0:ec:b2:74:82:e2:a7:f6:33:a7:8c:
5d:00:1a:b5:ec:2c:d5:1c:e2:14:2e:65:c1:4f:2c:
25:5a:ae:22:5e:01:fa:88:1c:06:c9:f7:54:7a:89:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8C:8C:09:8D:DF:5C:60:92:8F:E5:C2:4C:01:D4:AF:48:45:7F:F0
X509v3 Authority Key Identifier:
keyid:11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/SoyMCY3fXGCSj-XCTAHUr0hFf_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.125.0.0/16
192.42.42.0-192.42.47.255
Signature Algorithm: sha256WithRSAEncryption
21:29:64:6e:31:2f:f9:8e:08:cd:5c:97:a3:d8:55:10:41:c2:
14:ff:86:57:52:ec:6d:c4:08:12:d2:35:35:9d:c5:80:3a:c8:
98:71:91:d5:c8:ef:ca:84:c3:78:9f:31:35:ba:06:9f:c7:b9:
44:09:2c:74:a5:d8:b7:71:00:28:44:97:32:5d:cd:0e:29:38:
08:f6:ae:a4:54:b9:8b:87:59:b8:42:94:e3:93:21:45:d2:ec:
4f:be:33:bb:f2:eb:ab:3d:f2:03:2b:23:1c:df:be:64:d5:b1:
f2:8c:47:bf:a1:4b:2f:cc:ca:f0:b3:66:8e:d2:ab:6e:81:b7:
95:52:46:5d:60:6f:dc:a6:ff:bc:0e:91:9a:da:6e:48:1c:be:
79:6c:1e:d1:7b:52:71:c9:b1:1a:ad:44:26:fd:e0:bd:2f:d0:
a4:03:3f:f7:82:26:47:31:05:85:11:71:38:3a:40:5f:1e:7d:
b9:bc:1e:15:92:09:f8:f3:13:7d:ad:3a:3a:34:e7:85:3a:49:
95:15:bd:41:a7:32:92:2f:0e:76:3c:84:73:18:84:cb:6a:72:
a4:56:c5:50:b3:1a:ad:a1:bb:e8:de:2e:e5:e0:d5:4d:47:d5:
c4:38:dc:4f:fd:02:4d:1c:63:46:0d:37:e3:75:de:be:8b:a4:
ca:7d:0e:7b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 11 05:24:18 2025 by rpki-client