Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/dnpPBfT4bmiOS3mfW0PEIvKlsSA.roa
File: dnpPBfT4bmiOS3mfW0PEIvKlsSA.roa (raw, json)
Hash identifier: elaV/sSOolml1e7b2P/423WbtRl5G6MQ1029UvSTXoA=
Subject key identifier: 76:7A:4F:05:F4:F8:6E:68:8E:4B:79:9F:5B:43:C4:22:F2:A5:B1:20
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B24C200F907CE1ABCB9EC2DB0B0AD1
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/dnpPBfT4bmiOS3mfW0PEIvKlsSA.roa
Signing time: Wed 01 Jan 2025 11:48:40 +0000
ROA not before: Wed 01 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211223
IP address blocks: 171.22.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4c:20:0f:90:7c:e1:ab:cb:9e:c2:db:0b:0a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=767a4f05f4f86e688e4b799f5b43c422f2a5b120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:1e:0b:22:a6:f9:b2:5f:11:5e:68:63:06:
6d:c6:35:52:fa:01:99:21:a3:1e:56:53:26:3c:93:
24:61:09:8a:d4:43:5b:53:93:6d:9d:aa:8c:dc:22:
b4:d7:09:7e:c9:91:c7:00:01:fd:0e:6b:ec:41:bb:
0a:6f:9a:e9:4d:35:55:80:69:25:a6:61:c1:40:4f:
1f:cd:61:54:8c:d0:49:bd:cd:60:b3:da:52:3a:7e:
3b:2a:5c:48:8c:2c:45:b0:7b:94:a3:f7:06:31:9e:
b0:74:46:78:e5:e8:11:b6:1a:4b:4e:25:dc:2e:f4:
60:45:c4:29:b8:d2:cf:33:07:45:8d:a0:04:ab:ff:
a1:5b:d5:25:60:52:13:d6:80:96:c6:c4:c5:65:00:
c1:3b:8a:08:64:ce:84:a2:8d:18:eb:b9:b7:c2:49:
6d:54:b8:03:f4:fe:c3:58:ba:92:c1:37:20:f8:ea:
65:79:0f:bf:fe:e4:29:db:cc:8a:68:c0:39:a5:ca:
65:2b:1e:eb:77:12:be:fa:ae:81:e8:5e:7b:93:d3:
89:2c:1c:ed:7c:d8:d5:21:ae:d5:40:98:f3:3f:34:
db:f1:aa:96:b2:ae:ad:8a:31:7c:be:a0:4e:74:22:
ad:20:f7:32:6c:1b:ac:e8:e3:1f:33:73:a1:dc:87:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7A:4F:05:F4:F8:6E:68:8E:4B:79:9F:5B:43:C4:22:F2:A5:B1:20
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/dnpPBfT4bmiOS3mfW0PEIvKlsSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.139.0/24
Signature Algorithm: sha256WithRSAEncryption
88:9a:41:b4:1e:22:ca:87:bd:65:27:89:55:52:c5:40:4b:10:
4b:67:6b:db:9c:be:ee:1d:86:f0:5f:6f:16:e6:23:de:cd:b1:
4f:6d:67:38:07:d4:2b:12:0c:8f:6d:12:57:60:cc:5f:66:ec:
20:7d:e4:d5:28:83:7a:71:9e:04:5a:1f:b2:77:22:a5:9c:69:
e3:0f:81:f4:79:6a:9d:da:0a:95:c2:9c:c4:0e:c9:7b:89:de:
f1:13:f6:ca:2e:32:bc:a2:43:94:bb:66:bc:b8:5d:d9:53:fb:
53:c1:2e:c5:c5:5b:d8:42:b1:41:c2:6a:af:4d:bc:d0:20:4e:
e4:5a:fb:51:ab:6d:d5:2d:2f:5e:98:1d:61:12:54:6e:98:76:
03:31:9a:71:c3:85:a7:ca:fe:7e:88:30:1e:09:63:e9:46:30:
bf:b9:ff:27:b0:35:17:eb:0a:b2:c7:0a:5d:87:0c:e8:dd:4e:
0b:a5:7d:36:4e:03:bb:ac:f7:33:48:9a:c1:93:d2:c0:f8:9d:
e9:a1:9c:56:00:cb:93:df:26:fb:21:84:03:79:cd:62:cd:a1:
72:36:de:19:66:c5:1d:c0:84:30:4f:ac:95:89:fb:f9:81:86:
8f:df:2a:9f:6a:54:65:7a:da:07:4b:66:59:44:43:6c:27:9e:
88:96:df:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:38:55 2025 by rpki-client