Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/0aVULxHFqdDfNnT5CqmJEz5qebM.roa
File: 0aVULxHFqdDfNnT5CqmJEz5qebM.roa (raw, json)
Hash identifier: p1YUyJePrroRXqe7gzHmSFVR4nwW1EVYKUdr7JKm3tY=
Subject key identifier: D1:A5:54:2F:11:C5:A9:D0:DF:36:74:F9:0A:A9:89:13:3E:6A:79:B3
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 01967C4A5E1F6D02A2845354CE8F9A1F8B93
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/0aVULxHFqdDfNnT5CqmJEz5qebM.roa
Signing time: Mon 28 Apr 2025 12:06:10 +0000
ROA not before: Mon 28 Apr 2025 12:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 137.174.0.0/17 maxlen: 22
137.174.128.0/18 maxlen: 22
137.174.192.0/19 maxlen: 22
141.137.0.0/16 maxlen: 22
147.123.32.0/19 maxlen: 22
147.123.36.0/22 maxlen: 24
147.123.128.0/17 maxlen: 22
147.123.208.0/21 maxlen: 24
155.204.0.0/17 maxlen: 22
155.204.119.0/24 maxlen: 24
155.204.128.0/18 maxlen: 22
155.204.200.0/21 maxlen: 24
155.204.208.0/21 maxlen: 21
155.204.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:4a:5e:1f:6d:02:a2:84:53:54:ce:8f:9a:1f:8b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Apr 28 12:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1a5542f11c5a9d0df3674f90aa989133e6a79b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:73:41:23:05:c0:d6:11:61:d0:48:06:f9:10:
d0:61:c6:ff:24:8d:3a:2d:a1:ef:0a:55:f9:50:f3:
9a:61:f0:79:6c:0b:6e:bf:d8:b0:e3:2e:2d:16:1f:
82:60:06:7f:b5:4c:7b:8d:40:39:f5:41:01:b1:43:
f1:16:53:a1:c0:20:ec:21:04:94:da:00:71:6d:7c:
f7:1d:b7:4d:38:97:99:2b:a3:d7:2c:af:69:50:d9:
74:ae:7d:2c:ea:39:e0:3b:93:5f:0f:88:21:3e:b0:
e9:61:2a:a6:fb:7f:a1:3a:84:da:7d:d3:a5:e9:66:
a7:d5:4c:75:9a:ea:8f:42:16:a6:e9:83:b7:d0:7c:
db:03:b8:34:90:42:09:c4:e3:ca:bf:c1:86:c3:95:
7e:b7:92:54:2e:42:ea:85:67:d6:a1:a3:e6:fe:ce:
a9:6e:e1:2d:96:d4:f0:f6:6a:81:99:9c:6d:cd:9e:
de:70:c5:12:28:a8:f5:fc:26:13:d3:62:b8:42:2f:
92:35:27:6c:3c:32:75:ad:f4:69:3a:98:23:94:56:
e4:5f:17:a4:0a:26:20:33:4d:90:a8:33:90:58:bf:
ad:9e:c7:df:99:12:a5:93:ea:9f:4a:ed:60:f4:9d:
d8:90:14:d1:15:05:09:f7:54:62:93:6e:ab:f0:70:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A5:54:2F:11:C5:A9:D0:DF:36:74:F9:0A:A9:89:13:3E:6A:79:B3
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/0aVULxHFqdDfNnT5CqmJEz5qebM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.174.0.0-137.174.223.255
141.137.0.0/16
147.123.32.0/19
147.123.128.0/17
155.204.0.0-155.204.191.255
155.204.200.0-155.204.223.255
Signature Algorithm: sha256WithRSAEncryption
9d:a5:69:da:ce:a9:c9:95:c5:e9:17:4b:e3:c0:7d:e6:8b:a9:
69:97:2a:c6:b4:5b:0d:94:3b:5c:a8:99:ad:c4:c4:c1:51:b5:
49:34:0c:e2:73:c9:82:79:f7:b6:f8:90:5e:10:29:4a:b2:05:
90:02:67:99:35:36:9e:ba:ed:eb:a5:19:47:6f:21:b2:b3:5c:
bb:d3:b9:40:50:e1:cf:15:13:6f:5c:05:ad:a0:ec:68:e7:a8:
18:72:44:0e:fe:e2:62:07:9b:df:51:bf:59:0b:fe:4b:87:f6:
20:bf:e9:45:1a:89:8a:d3:94:45:79:c7:89:18:7a:6e:fb:a8:
7b:64:78:c4:6c:a0:80:00:ec:c9:ce:aa:87:14:ea:7c:1b:e8:
5d:5c:44:8e:ed:7e:22:49:a7:9a:9d:09:91:50:4b:e2:a3:02:
e2:dc:27:13:9a:2f:21:a0:40:f6:e9:dc:4c:02:e7:9e:b2:57:
21:82:80:da:93:d4:30:90:d0:cc:ce:53:de:21:83:58:1a:1f:
0e:17:eb:85:b2:7b:e8:14:c3:04:20:cb:32:31:0c:71:11:16:
56:7a:47:db:3d:a3:79:ec:5b:f5:27:a3:d7:d8:d6:79:c1:b1:
f4:d0:9a:47:f2:50:46:ad:52:4a:e3:4d:1a:9a:1d:19:71:76:
2e:0c:c2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:06:40 2025 by rpki-client