Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/PSgnnJoiSIw5Hv12Voa8VUomZgQ.roa
File: PSgnnJoiSIw5Hv12Voa8VUomZgQ.roa (raw, json)
Hash identifier: aSwQ/+jyVOvQ9xtFsxD7WSERWfDCCWFCBTIigVEVgk8=
Subject key identifier: 3D:28:27:9C:9A:22:48:8C:39:1E:FD:76:56:86:BC:55:4A:26:66:04
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 01942368D1FA148CA7299BB96E84B609AB27
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/PSgnnJoiSIw5Hv12Voa8VUomZgQ.roa
Signing time: Wed 01 Jan 2025 19:47:39 +0000
ROA not before: Wed 01 Jan 2025 19:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51248
IP address blocks: 5.180.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 01:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:d1:fa:14:8c:a7:29:9b:b9:6e:84:b6:09:ab:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Jan 1 19:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d28279c9a22488c391efd765686bc554a266604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:87:e5:25:0d:c8:6d:da:b8:ed:1d:c6:3b:
62:6e:3e:14:3a:11:0c:da:63:d2:e5:ab:2f:ce:65:
76:c6:89:ab:f8:40:82:2d:3c:c2:48:db:be:38:65:
f1:b5:80:1a:49:56:23:19:c8:3d:ff:1c:86:e8:9f:
dd:c6:95:fa:0b:1d:cc:4a:3e:a1:04:10:aa:6f:01:
7a:36:bf:62:ba:54:c1:0d:04:47:da:93:f9:dd:03:
53:cc:80:60:0f:be:bc:da:5a:87:d8:74:d6:25:7f:
b9:e9:db:db:95:06:37:bd:68:48:8e:b7:06:f5:93:
eb:b2:95:93:6e:75:9d:34:0d:3b:aa:92:f3:82:f5:
82:aa:91:83:e2:e4:12:bd:f6:6e:ba:85:74:3c:e1:
9a:f1:17:10:8d:e6:8c:f0:6c:d6:31:2b:d9:a9:de:
6a:f9:41:bf:03:cb:72:c2:74:a7:5c:81:f3:a5:50:
a0:c7:63:5c:7e:86:a7:7a:f5:fc:15:09:f7:c9:38:
a2:88:9c:75:ce:98:61:26:e3:8b:aa:ac:14:6f:0a:
f3:85:12:48:7d:41:b7:39:00:71:20:8d:fd:d6:e8:
9b:0e:23:f7:2e:62:f7:20:98:07:df:10:77:ac:38:
36:b1:b3:13:1f:ce:86:7c:c8:e3:ef:fc:52:50:37:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:28:27:9C:9A:22:48:8C:39:1E:FD:76:56:86:BC:55:4A:26:66:04
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/PSgnnJoiSIw5Hv12Voa8VUomZgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.97.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f8:a9:f6:6f:91:7a:0f:23:69:49:a3:e5:27:69:6c:d7:d6:
47:fc:27:7c:93:2a:ec:f3:8b:be:e5:82:a6:ca:1e:be:fb:57:
c8:40:32:fa:4e:bc:e5:da:a4:e4:e6:4d:5a:0a:54:9b:2f:56:
44:22:47:7a:9e:d9:dc:83:ce:a7:ae:43:21:d3:19:33:aa:2f:
07:2b:7f:34:79:48:ef:ac:ed:be:7d:ce:de:57:8a:13:70:35:
74:9d:6f:b9:82:e7:76:0f:5d:71:a8:47:08:6a:87:04:fe:58:
ad:84:0c:2a:36:8a:d3:4c:26:82:07:12:39:1a:eb:4c:3a:da:
06:b4:36:f0:74:98:78:e3:fd:92:fb:1d:2c:d2:fd:56:85:32:
c0:0b:9e:48:5c:c4:63:af:11:6b:08:07:8f:7f:b7:eb:56:8a:
bd:b1:c0:57:8e:6a:ed:b9:f0:71:2a:9c:86:89:a3:58:f2:47:
51:c1:56:73:7b:bf:72:eb:69:ea:73:d2:84:fd:d9:83:93:2f:
21:54:d4:c7:80:9f:ac:df:7c:5a:f7:6c:0a:29:48:71:6e:0b:
5a:fe:a5:87:ee:0b:bf:77:31:5d:df:2e:7b:1b:34:4d:ea:b5:
3e:e7:22:5b:6a:8b:4e:da:6b:21:b4:cd:66:08:71:90:10:9e:
a5:17:25:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:11:00 2025 by rpki-client