Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PHt2QL78dbIT2h1GW3AvW-5TCS4.roa
File: PHt2QL78dbIT2h1GW3AvW-5TCS4.roa (raw, json)
Hash identifier: tHC4rPeDUuwVRchwwhV0y+l64t5C/jQMGQKDOS515zM=
Subject key identifier: 3C:7B:76:40:BE:FC:75:B2:13:DA:1D:46:5B:70:2F:5B:EE:53:09:2E
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0195B4693CD534E16B317EF49515FC459EEC
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PHt2QL78dbIT2h1GW3AvW-5TCS4.roa
Signing time: Thu 20 Mar 2025 16:35:50 +0000
ROA not before: Thu 20 Mar 2025 16:35:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 5.180.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:69:3c:d5:34:e1:6b:31:7e:f4:95:15:fc:45:9e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 20 16:35:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c7b7640befc75b213da1d465b702f5bee53092e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f5:c4:bd:bf:e2:c3:1d:ae:0b:06:d7:26:91:
1b:a5:76:c6:70:44:33:8d:98:f6:a8:ca:b3:c1:14:
96:27:a7:77:de:92:81:e5:65:19:02:23:24:38:85:
60:4c:5a:80:48:38:f1:ec:7b:b1:12:10:89:c2:7a:
f5:c0:31:94:b7:26:6f:8d:57:0b:a3:f5:65:60:ba:
de:14:65:24:60:c6:ae:2a:d4:06:54:43:9a:16:80:
a5:0a:a8:f0:84:20:63:3f:3d:7d:45:5a:75:26:be:
ae:ac:0b:7d:9e:7f:d5:00:52:d0:14:39:aa:5c:75:
5a:72:fe:29:7f:17:94:1f:74:70:d1:db:64:0f:e4:
dc:af:00:ae:76:71:ea:3e:88:9b:bc:70:a1:e7:56:
d0:8b:f1:e1:12:dd:1e:57:04:c7:eb:69:a5:30:53:
f2:ef:14:f0:3d:79:ad:67:46:ff:a2:34:e3:d8:f1:
67:ba:62:0b:10:b2:f4:38:5c:85:25:cb:23:f6:02:
94:f8:c7:4d:cc:48:bb:89:a7:79:ca:48:b2:1a:94:
ed:ef:00:f6:b0:57:74:14:7d:58:56:7c:ab:af:87:
67:d7:7d:f3:97:90:41:27:13:df:de:9e:7d:ee:da:
fd:35:59:c3:dd:12:fc:7f:d0:df:ea:c8:8d:87:52:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7B:76:40:BE:FC:75:B2:13:DA:1D:46:5B:70:2F:5B:EE:53:09:2E
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PHt2QL78dbIT2h1GW3AvW-5TCS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.234.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:3b:0e:cb:15:c5:9d:12:ea:13:ee:5f:a0:67:8d:9d:ba:03:
13:c3:d5:35:24:6f:d5:c7:60:02:16:16:42:17:8b:75:3f:62:
9d:2d:af:83:06:e1:6b:f1:c8:64:6c:da:ab:ab:b0:d2:1a:0c:
df:72:94:d1:71:b9:72:a7:a3:b2:6a:f8:a4:2f:3e:19:70:cd:
17:3f:c7:9d:16:1a:18:8d:43:e8:f0:f3:55:fb:3f:9d:3f:01:
38:37:a7:30:e0:e9:8a:4d:3f:a2:38:11:21:8e:57:d2:64:f8:
39:fa:1a:82:53:2d:c3:ec:a3:38:3a:50:1f:b7:50:9a:e7:8a:
4a:f3:fa:66:0e:75:84:77:2b:a3:9e:23:62:c7:ba:c2:1e:19:
96:e5:92:76:46:7b:a3:1a:f5:22:63:4d:e2:0d:1c:c3:15:5e:
80:5c:71:f2:ec:1c:ce:c0:96:cd:57:ac:bc:ed:28:f7:0b:12:
c5:a4:c6:3e:11:6c:17:90:91:c2:b9:ef:1a:92:24:d8:c5:25:
70:6b:42:55:83:0f:18:42:b2:42:98:c5:6c:02:4f:a7:19:5d:
aa:db:6f:ba:ee:4c:ca:a3:a6:6b:d4:0d:64:28:68:1a:5d:ed:
fe:da:5a:56:dd:74:4d:f2:af:cd:f5:96:23:f2:77:98:1f:5c:
e2:f7:cb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:26 2025 by rpki-client