Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/rbkwFcYLaEEcgP57xj9znwlpmj4.roa
File: rbkwFcYLaEEcgP57xj9znwlpmj4.roa (raw, json)
Hash identifier: enJo8AXIWRTz+79R6txrBmjabj1OaXyVz0RKSwmCnM0=
Subject key identifier: AD:B9:30:15:C6:0B:68:41:1C:80:FE:7B:C6:3F:73:9F:09:69:9A:3E
Certificate issuer: /CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Certificate serial: 0194258E7C1285C4AF6AD8648D9635FABD15
Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/rbkwFcYLaEEcgP57xj9znwlpmj4.roa
Signing time: Thu 02 Jan 2025 05:48:02 +0000
ROA not before: Thu 02 Jan 2025 05:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197157
IP address blocks: 178.249.136.0/21 maxlen: 21
178.249.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:7c:12:85:c4:af:6a:d8:64:8d:96:35:fa:bd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Validity
Not Before: Jan 2 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adb93015c60b68411c80fe7bc63f739f09699a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:ea:cd:fd:53:c0:b6:c0:0a:47:1c:17:36:
c7:83:7b:b2:9c:a2:73:1a:59:5d:03:7e:8a:a1:f4:
e7:5c:6c:96:c2:1d:5a:89:30:27:77:a6:fd:94:01:
7d:1e:bc:99:e2:d1:f8:d3:56:3f:87:71:d5:48:33:
21:db:a2:2f:6e:8a:e8:55:cf:3c:05:a7:9c:8f:55:
fb:ae:f1:ce:f4:16:04:45:a9:c2:d4:3d:07:03:d0:
13:77:7f:bb:8e:d1:87:c7:21:74:76:55:8d:f8:77:
e2:73:55:88:64:a9:e7:e4:19:83:04:41:cb:54:42:
13:d6:7a:a0:f7:4d:bf:8a:de:4f:4f:93:b7:f3:b8:
d2:4c:e2:72:da:b4:9e:4d:14:19:ac:39:35:43:df:
80:24:eb:69:75:de:fa:22:7a:c8:80:33:82:1b:58:
21:bb:f1:e5:11:3e:89:b9:47:fb:e9:1c:42:30:ff:
b8:cc:15:03:90:b0:5e:3b:c2:11:87:d2:a0:74:73:
77:ac:44:17:db:99:47:7f:70:be:ad:3a:9c:e9:a4:
14:4f:31:2a:42:31:c0:23:31:f6:af:65:d4:9b:8f:
e2:ed:c5:22:99:ff:ab:83:f2:ef:8d:a8:09:c9:6d:
c6:5a:e9:ca:72:20:ae:87:7a:2a:bc:0c:da:a4:f6:
25:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B9:30:15:C6:0B:68:41:1C:80:FE:7B:C6:3F:73:9F:09:69:9A:3E
X509v3 Authority Key Identifier:
keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/rbkwFcYLaEEcgP57xj9znwlpmj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.136.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:00:0c:5b:4c:0b:b5:96:f5:1a:3c:91:aa:7d:ed:30:b7:86:
87:b4:21:c4:a6:2c:22:93:c8:a5:c5:52:57:84:e5:af:3f:fb:
8c:57:6a:b7:45:d9:c7:d9:e8:da:c3:a4:c7:18:8c:97:18:95:
2a:40:eb:4f:f7:10:8d:20:1b:2a:1a:4b:3c:85:a8:21:d5:43:
22:8b:b4:6a:c2:99:93:6e:54:67:2f:76:87:ae:2b:4c:70:de:
86:3d:06:91:b8:dd:e4:a2:a3:f3:62:85:30:a7:9e:8e:9e:21:
91:9c:b8:c0:9c:93:c8:9d:31:17:68:d9:7f:a4:87:c2:8e:89:
34:91:d5:61:5b:a1:cd:7b:19:09:d7:a1:b3:fc:66:cb:b9:23:
ee:6e:c8:23:ad:04:e6:34:00:1b:57:31:e9:6c:4b:10:fd:2d:
bd:52:bb:c5:0c:b7:74:cf:e2:5a:c4:be:b6:65:3a:67:73:58:
9f:c4:dc:dc:2a:3b:7b:a1:63:6a:86:76:7e:56:0d:61:4a:62:
a2:9a:55:92:e9:1e:fb:c9:02:ac:90:a7:34:ac:f4:a5:15:b0:
86:bc:f0:37:3a:fa:1a:79:54:cc:96:db:dd:a9:fe:84:70:26:
8a:f1:9f:6b:67:6e:7a:30:9e:c2:f9:86:62:bf:29:70:fc:0d:
dd:ed:ac:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:08:16 2025 by rpki-client