Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/Ku4DjWMj_wrBqXvp8QwLCV7LvMQ.roa
File: Ku4DjWMj_wrBqXvp8QwLCV7LvMQ.roa (raw, json)
Hash identifier: MiHDGBqhLXLE6nmzkue9evydNoK6FMJwJm/pNx6ZNnQ=
Subject key identifier: 2A:EE:03:8D:63:23:FF:0A:C1:A9:7B:E9:F1:0C:0B:09:5E:CB:BC:C4
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 01941FFA2E072C36E55AC57E3ACB9E824DDB
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/Ku4DjWMj_wrBqXvp8QwLCV7LvMQ.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12085
IP address blocks: 137.174.152.0/21 maxlen: 24
155.204.0.0/22 maxlen: 24
155.204.112.0/21 maxlen: 24
155.204.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2e:07:2c:36:e5:5a:c5:7e:3a:cb:9e:82:4d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2aee038d6323ff0ac1a97be9f10c0b095ecbbcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:f4:07:b1:63:d6:12:bc:d8:45:af:04:f5:
a7:32:eb:9b:06:ff:7b:fc:77:c5:51:c2:16:d2:8b:
c9:12:c2:5a:0e:af:6f:1e:10:9a:b7:d4:d0:08:17:
42:27:b0:d2:33:db:5c:80:9e:9b:63:9b:62:2d:42:
73:2e:14:90:86:7c:d6:b9:6c:fc:4e:ee:b4:f5:12:
59:a0:02:de:e4:c6:8c:2b:dd:6a:8d:92:d5:27:c1:
0a:2e:96:2c:02:ba:1f:8b:5d:50:46:cb:1b:b1:19:
c4:39:95:49:c1:ad:6b:7b:29:73:77:3b:17:20:5f:
76:80:3c:7c:22:37:9e:b5:e7:06:a9:c5:e7:15:84:
e7:f9:5b:ff:63:18:c1:dc:9b:b3:96:46:b0:9c:be:
38:ed:9b:ad:47:8a:0e:70:07:e6:a2:3a:9d:e6:43:
c8:a6:65:83:39:d2:8e:6f:3a:49:f6:0c:2d:ce:82:
75:39:dc:c8:9b:59:f0:53:40:04:41:0f:0b:cb:da:
78:b7:7e:bc:e0:c9:01:8a:c9:44:4a:bb:36:e8:c6:
40:73:f5:e3:c5:d5:33:70:47:14:22:63:06:12:3c:
6f:0d:76:8b:91:7c:52:c2:4a:b7:64:59:53:7a:df:
17:ab:45:c6:5a:fd:dd:62:e1:ad:a7:f2:b7:ec:e3:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EE:03:8D:63:23:FF:0A:C1:A9:7B:E9:F1:0C:0B:09:5E:CB:BC:C4
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/Ku4DjWMj_wrBqXvp8QwLCV7LvMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.174.152.0/21
155.204.0.0/22
155.204.112.0/21
155.204.128.0/21
Signature Algorithm: sha256WithRSAEncryption
37:82:31:13:cf:93:cf:dc:b5:44:f1:bd:af:e0:8f:dd:04:8a:
1a:98:ce:8c:2a:47:ca:c5:6f:ac:3a:ca:51:13:3c:e2:41:ab:
53:10:3e:73:22:e6:59:3c:49:88:f2:4a:b0:ad:10:e2:7c:1b:
bd:f9:8f:ca:35:ed:d9:db:da:4a:3e:2d:96:e8:6d:53:0d:27:
9d:f7:a8:c6:ff:09:19:62:ca:f6:51:2f:1c:95:14:b0:cb:b9:
09:77:dd:38:64:6b:c5:af:a6:eb:22:95:0a:9f:35:4c:bf:e6:
b1:aa:db:84:1f:2a:c3:7d:10:41:a6:57:42:5c:c8:0e:7d:06:
43:aa:bf:a4:e4:c8:9c:61:5e:ad:c6:e5:2f:b1:39:a9:b1:c7:
5d:ce:4b:62:40:f1:44:c5:61:85:ce:4f:37:2e:66:d6:6c:6c:
8b:a8:23:23:c8:3e:c0:12:53:6a:3d:dd:40:1e:c0:ca:65:ba:
a5:26:f1:13:b1:09:c7:9d:21:0f:ea:45:e2:b2:4c:97:27:0a:
4b:0c:8d:7a:63:f0:82:77:b3:88:c1:c5:90:39:f1:91:48:90:
5a:a8:8b:68:e1:ee:5f:25:ae:d1:af:d8:a9:15:d6:ff:92:00:
58:4f:f2:27:af:f1:bc:2f:5b:ad:61:32:e4:83:dd:1a:f7:cc:
3b:48:d9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:07 2025 by rpki-client