Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/cmxdqS626N731JSDXMkhCrtA4_Q.roa
File: cmxdqS626N731JSDXMkhCrtA4_Q.roa (raw, json)
Hash identifier: LRekbyCIvJRl2MojJwg69VWuVHL2U6Aun+QU7GJY++E=
Subject key identifier: 72:6C:5D:A9:2E:B6:E8:DE:F7:D4:94:83:5C:C9:21:0A:BB:40:E3:F4
Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial: 01941F8C83DCB67A29DE4611A4F32124BD21
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/cmxdqS626N731JSDXMkhCrtA4_Q.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2200
IP address blocks: 140.77.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:83:dc:b6:7a:29:de:46:11:a4:f3:21:24:bd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=726c5da92eb6e8def7d494835cc9210abb40e3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:8b:03:8c:b2:4c:f5:10:a8:19:de:63:4b:
8f:b6:20:30:aa:8b:e4:f7:e8:12:4f:e7:d6:19:8f:
80:a5:1c:5c:ac:69:31:df:7c:a7:f4:27:47:41:eb:
9a:c2:9c:57:8c:0f:cf:3b:bd:7e:a4:61:3f:62:6a:
5a:ab:de:16:69:88:fe:95:49:68:e8:e4:5b:1a:58:
27:39:00:0d:e2:62:45:91:af:3a:7f:ec:a3:d9:89:
a3:d1:75:cc:6b:b2:da:38:45:6a:5c:d2:9d:7a:2f:
0a:13:cd:78:07:7e:34:12:77:79:15:59:e7:4b:1f:
11:79:b8:c7:8d:84:c5:18:05:1d:51:ac:e2:1f:f6:
10:74:72:4a:ab:ad:ca:97:7e:b9:8e:38:22:8e:22:
49:1d:c4:6c:21:1e:1c:08:5c:e7:ee:5e:c2:69:63:
97:da:ee:81:c8:66:49:f6:37:17:27:6f:9d:2c:f6:
2c:7a:7e:77:6c:a1:64:bd:81:fe:b4:f6:c7:4b:f5:
3e:ad:5a:a9:ac:8b:c3:51:b4:72:e1:e1:4a:5b:b6:
bd:c4:b7:3a:29:7c:60:2c:40:28:7e:9a:97:2e:0a:
f4:f0:81:f6:ef:4c:98:06:59:61:97:e8:d8:8c:d3:
f1:ab:df:5d:0d:a7:9d:64:2e:4e:d1:ef:74:00:ad:
26:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6C:5D:A9:2E:B6:E8:DE:F7:D4:94:83:5C:C9:21:0A:BB:40:E3:F4
X509v3 Authority Key Identifier:
keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/cmxdqS626N731JSDXMkhCrtA4_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.77.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:7c:b1:ab:2a:ac:96:39:0b:56:a7:d5:74:27:50:ba:05:5e:
98:29:46:66:b2:ce:a1:ff:e6:74:ed:7a:ef:f8:1a:88:80:46:
d5:e2:83:98:b3:3e:1d:ee:70:ec:9d:42:ef:05:38:8d:a0:29:
6d:cb:d4:1e:f7:ab:f0:76:09:96:c9:27:a8:9d:38:62:ba:61:
0c:04:f9:12:25:a7:72:b6:02:3c:17:d1:56:46:52:8f:d4:5a:
6e:11:8e:f6:1f:f6:2f:51:ba:b4:c5:93:22:08:46:e0:cb:d3:
6f:29:f3:9f:30:b7:ef:62:b4:5c:6a:d2:13:27:05:bc:e3:88:
dc:df:90:ff:83:92:f8:1e:d6:8b:5a:b5:03:3d:61:30:85:1b:
fe:5a:b3:06:49:6a:f1:c4:6d:1c:71:c7:99:53:36:86:06:85:
e4:ca:1c:7f:9f:6c:c3:fb:55:ba:df:b2:04:1a:4c:18:e7:d1:
ad:74:48:3d:a3:cc:91:01:40:ac:2a:ba:44:49:e4:4b:8b:17:
99:60:1e:4c:5a:46:66:d0:cf:f3:c1:1a:2b:66:8f:36:0f:9d:
4a:71:ca:9e:d9:93:b3:bb:1c:f2:21:f6:0f:d7:5c:88:37:0e:
85:4a:78:15:33:ed:44:76:60:13:82:c0:03:64:e1:92:79:7f:
90:37:8e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:19:20 2025 by rpki-client