Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/0WPky6Zd69joeWh7ssfVCeJsg9M.roa
File: 0WPky6Zd69joeWh7ssfVCeJsg9M.roa (raw, json)
Hash identifier: iEDnQGdWpat3aX+GkENZQ3IsUpSu287fkOvqghqZiUg=
Subject key identifier: D1:63:E4:CB:A6:5D:EB:D8:E8:79:68:7B:B2:C7:D5:09:E2:6C:83:D3
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01951EAF09ED7FA64A484104FF9F71C80560
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/0WPky6Zd69joeWh7ssfVCeJsg9M.roa
Signing time: Wed 19 Feb 2025 14:49:02 +0000
ROA not before: Wed 19 Feb 2025 14:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 155.254.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1e:af:09:ed:7f:a6:4a:48:41:04:ff:9f:71:c8:05:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Feb 19 14:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d163e4cba65debd8e879687bb2c7d509e26c83d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:37:e7:1e:8b:99:11:8c:ff:2e:07:10:28:
26:25:b3:d7:71:58:9c:ee:61:a0:e1:e9:a8:f7:27:
ef:17:f3:5b:23:5e:16:0a:70:ea:47:16:47:0b:9e:
2f:59:dc:45:3e:98:88:e0:16:ab:32:5f:fa:ce:f6:
36:a2:bf:47:a1:06:64:99:28:be:af:cc:8e:ee:9d:
6d:b6:76:81:14:9e:41:4d:ec:7f:59:06:3e:c0:3d:
bc:59:5c:c6:e5:d7:b9:19:ae:a2:40:bb:e7:76:22:
93:09:ee:92:89:f0:7b:96:aa:85:61:e4:db:9b:a4:
bc:02:5a:fa:0c:da:b5:4c:7d:e9:54:78:68:60:11:
6b:4a:77:28:1c:05:41:6d:af:7b:39:19:de:c0:08:
78:38:15:58:ce:6f:68:d1:a4:63:08:31:b4:c3:1d:
e8:68:1c:1a:19:e7:35:c2:95:4b:58:c9:75:bb:a7:
e5:44:a0:a1:46:09:ac:f4:12:96:57:86:51:e4:64:
f2:58:46:90:bd:49:eb:df:28:84:fd:28:4d:58:75:
b9:a0:a6:16:d1:02:31:04:58:81:e7:83:5f:45:4b:
6a:2c:f4:a2:d5:a4:f7:5d:95:dd:5c:35:fb:ed:85:
1d:df:ba:31:6c:79:c3:c5:ff:ef:cd:0d:9e:c3:46:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:63:E4:CB:A6:5D:EB:D8:E8:79:68:7B:B2:C7:D5:09:E2:6C:83:D3
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/0WPky6Zd69joeWh7ssfVCeJsg9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.254.62.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:77:75:90:59:b5:a4:51:43:b8:5e:db:d9:11:d9:2c:b9:58:
6f:f9:ae:bd:8a:2e:bd:d2:b0:e3:98:88:dd:ea:01:39:4a:a8:
45:0d:9e:d3:93:47:a5:96:3c:91:6d:2b:12:f4:a8:0f:fd:3f:
44:84:ff:db:5e:83:09:a0:1d:7d:07:e9:9e:fb:09:33:8e:ee:
e8:e1:d0:11:a7:f0:84:a6:a5:86:8f:f1:57:ef:84:f2:f0:5d:
e5:3a:0d:91:d7:46:70:64:1d:74:a3:25:8d:d6:c3:25:44:79:
81:30:0c:be:75:1c:39:ba:dc:63:97:52:0c:ba:9f:90:34:4a:
d4:72:a1:dc:ce:f7:4c:13:51:b5:28:6e:d6:53:2a:0e:55:58:
4c:b4:44:74:3e:7c:e4:64:00:bc:eb:d5:59:06:68:4a:1a:b8:
bb:74:53:4d:bf:dc:cc:4d:bb:c8:61:28:1d:b0:f3:82:0c:0b:
ab:e7:ab:87:a9:89:59:13:bc:64:51:c3:9c:f2:01:bb:64:8c:
37:b9:5d:d1:6f:e6:7d:65:a2:d0:00:f6:18:c9:38:dd:14:fb:
4b:d7:c3:aa:28:08:62:ac:9a:ac:94:37:b2:51:99:ec:fa:cf:
36:da:aa:21:9e:96:c9:80:f3:f9:83:86:6b:ec:4d:10:48:1a:
5c:74:c3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:08 2025 by rpki-client