Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/30FXUVnarbL0GjkvKeRwjePJ-94.roa
File: 30FXUVnarbL0GjkvKeRwjePJ-94.roa (raw, json)
Hash identifier: w3ArHa2Xe04OwAG/G7XOfvacJT+uwVTSzzeS8Z01wes=
Subject key identifier: DF:41:57:51:59:DA:AD:B2:F4:1A:39:2F:29:E4:70:8D:E3:C9:FB:DE
Certificate issuer: /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Certificate serial: 019423D7D409C9DAA0ECCAD3303A66D90E98
Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/30FXUVnarbL0GjkvKeRwjePJ-94.roa
Signing time: Wed 01 Jan 2025 21:48:54 +0000
ROA not before: Wed 01 Jan 2025 21:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25591
IP address blocks: 5.183.64.0/22 maxlen: 22
5.188.144.0/22 maxlen: 22
185.104.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d4:09:c9:da:a0:ec:ca:d3:30:3a:66:d9:0e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Validity
Not Before: Jan 1 21:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df41575159daadb2f41a392f29e4708de3c9fbde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:f9:22:01:a7:86:80:09:6e:38:dd:99:e7:
2b:6f:34:c3:96:9d:56:20:70:3e:70:38:df:32:28:
af:03:bc:86:11:d6:4a:a8:1e:31:37:10:bf:2e:7a:
02:84:0d:87:4d:e8:45:7e:c9:c9:e6:e5:0a:67:9d:
fb:d1:8d:db:d9:5c:9b:5e:74:54:95:43:3a:93:05:
ff:ef:dd:e1:c5:6b:4b:7d:bc:5e:62:a3:67:6f:72:
86:b7:19:1e:0c:79:07:22:6d:44:f9:7c:0f:46:cd:
0f:c6:bb:dd:56:0f:7c:57:15:8a:0e:5c:05:81:31:
43:f2:86:07:d6:58:ca:da:13:a6:6b:89:b6:f1:76:
4f:26:bb:06:cb:95:0a:6c:83:58:3e:7b:01:6b:d4:
45:02:eb:2c:0d:4c:66:af:a2:e8:56:f8:1a:29:c2:
5b:26:25:ad:86:09:04:bf:fd:92:14:2d:84:94:d8:
c1:a5:53:d1:db:41:ad:2d:f7:9f:b0:30:ec:8b:0a:
a9:0c:b0:24:f1:fd:fc:27:c7:33:f4:f0:6b:9c:c2:
d8:54:c6:9e:82:8d:34:a5:7e:cf:2d:fe:8f:35:95:
86:18:d5:76:f8:af:85:8d:cd:24:98:92:b2:99:35:
f8:b2:9c:b7:10:eb:4c:10:c0:16:ea:15:82:2e:67:
56:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:41:57:51:59:DA:AD:B2:F4:1A:39:2F:29:E4:70:8D:E3:C9:FB:DE
X509v3 Authority Key Identifier:
keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/30FXUVnarbL0GjkvKeRwjePJ-94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.64.0/22
5.188.144.0/22
185.104.4.0/22
Signature Algorithm: sha256WithRSAEncryption
82:ce:f8:4b:9a:ba:06:98:22:56:b9:0d:e4:5c:e9:53:23:af:
cd:e9:6e:2d:79:a6:59:22:9c:9f:43:9c:1f:cf:62:4e:9f:1b:
98:f8:35:fc:cc:7a:fd:d9:b4:0f:a8:16:1c:7f:7c:80:68:8d:
78:fb:68:81:c2:2f:50:04:e3:75:d4:71:05:be:e6:ea:b4:7a:
a3:da:50:54:94:7e:b5:61:62:55:7a:fe:bc:47:b3:c0:03:a5:
8f:64:64:b8:3b:56:10:57:aa:19:6e:13:8e:ce:4f:31:01:45:
ae:18:17:34:06:ed:a8:b6:6d:0f:a7:92:02:fb:a0:ff:53:fa:
7b:ba:28:82:51:b6:36:b8:e7:e2:7f:92:0e:de:d2:82:1f:17:
06:59:72:bc:5f:37:99:60:59:4d:a1:0e:fd:e2:3d:3e:ce:8d:
9c:84:7e:0c:7c:47:14:8e:dd:46:cf:31:f5:12:a2:5a:a0:76:
2c:8f:9b:b3:01:f3:32:31:af:be:1d:0c:4c:b9:55:d2:73:0e:
30:23:8c:6c:06:7d:cf:09:23:8e:26:fb:85:8a:66:c3:9f:d4:
22:05:29:88:ab:2d:00:96:8b:96:62:0f:f9:10:a0:f8:47:6a:
12:41:12:9d:b5:71:39:7c:66:ea:b2:ef:26:49:40:97:1b:ed:
fb:d4:e2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:01:50 2025 by rpki-client