Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1k-Viw_-2oc9MKKoL7uMIv7krOY.roa
File: 1k-Viw_-2oc9MKKoL7uMIv7krOY.roa (raw, json)
Hash identifier: /wGnPfB2Jp9tKSMIxt5NOa2ryBNE9YQJE5JIWsY5oec=
Subject key identifier: D6:4F:95:8B:0F:FE:DA:87:3D:30:A2:A8:2F:BB:8C:22:FE:E4:AC:E6
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B24329C516EC0FF4271C130C32B08A
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1k-Viw_-2oc9MKKoL7uMIv7krOY.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198351
IP address blocks: 5.180.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:43:29:c5:16:ec:0f:f4:27:1c:13:0c:32:b0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d64f958b0ffeda873d30a2a82fbb8c22fee4ace6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ad:04:40:de:b8:81:14:08:fd:17:94:82:8d:
5e:c0:23:d8:8a:cf:37:51:9c:0b:54:f2:0f:72:08:
90:3e:45:c9:94:7a:bf:e7:5b:a4:35:a2:89:5c:e0:
28:e0:f1:55:ba:a9:db:fb:ff:de:1b:75:86:cc:2a:
fb:21:38:4e:36:87:bf:fb:e2:8e:c4:f3:3f:46:30:
97:85:e4:f4:f1:fd:fe:51:50:97:9d:82:39:55:5d:
a3:0e:00:43:ca:16:2a:0d:1d:3b:80:54:c6:08:77:
35:e1:22:a4:c0:8d:b8:02:5b:b6:9e:5f:21:4f:3d:
b9:f9:4b:c7:3e:8f:ad:8c:b2:42:3a:eb:1c:8e:62:
f4:55:a7:0c:91:c6:3f:fe:02:11:bc:31:b1:f1:96:
cd:ec:98:bd:44:88:7b:a0:0f:3c:ad:90:3a:46:dc:
39:2e:d7:77:68:2d:11:cd:65:6b:8e:77:be:55:e2:
f3:1f:d8:2d:73:a3:5a:84:4e:5c:7f:d9:2c:ba:e7:
fb:60:a6:b5:5b:28:80:e9:00:24:81:21:5b:65:5d:
ba:e2:0c:90:3f:29:f8:18:15:9f:62:0b:7b:7d:c0:
33:e1:3d:91:62:54:7c:da:f5:79:68:65:02:1a:ad:
87:50:0c:78:1b:de:45:ef:8f:c6:41:d4:99:f3:31:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4F:95:8B:0F:FE:DA:87:3D:30:A2:A8:2F:BB:8C:22:FE:E4:AC:E6
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1k-Viw_-2oc9MKKoL7uMIv7krOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.232.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:0e:1a:0e:a9:a3:73:c4:40:b7:a9:be:92:14:ca:92:29:8b:
43:24:50:fe:7a:b2:aa:6a:8a:1c:4e:c2:41:b0:3f:50:72:9e:
7d:94:4f:ed:8f:d1:09:d2:0d:b1:0c:b9:a0:76:d5:cd:c6:86:
56:e9:77:eb:d8:ed:60:a2:3e:22:ca:61:d9:3f:e7:cb:2f:15:
e3:de:93:ad:ae:e8:cc:f4:f9:fb:43:4c:de:7c:c5:ec:d3:ff:
0a:c0:ff:fb:f0:43:79:4d:ad:5e:76:3f:4c:f0:ee:29:2f:11:
15:46:cf:54:e3:8a:fc:47:22:d4:85:9b:dc:e4:1d:cf:fa:a9:
ba:e2:d9:af:bf:f2:23:c3:15:c5:31:f5:3c:0f:63:54:92:31:
7c:ee:2d:b9:07:9f:7e:1a:24:c9:f7:d4:10:ab:a9:9f:a0:09:
39:e3:af:17:8b:2c:ef:14:43:85:7a:0d:bd:3d:af:37:20:01:
df:9f:7c:7c:e4:5d:1a:1a:da:a6:c6:ec:f9:14:df:9d:36:c3:
3f:90:45:d8:f3:54:4e:c5:e5:39:f8:2f:b5:88:ee:92:5c:c4:
85:15:b4:d8:e2:fb:df:c6:0b:89:39:c3:60:dd:60:2e:5a:50:
25:e4:c8:4b:d1:da:26:d6:40:f6:fc:48:4b:a1:2f:a4:c7:11:
51:0f:5a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:54:08 2025 by rpki-client