Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5PgUPuZAFAJVUJRm51i9ubUccBU.roa
File: 5PgUPuZAFAJVUJRm51i9ubUccBU.roa (raw, json)
Hash identifier: +1SbePAF0T3lI2xErGNmfkl8KfXYdjBqHWt3QNQ18do=
Subject key identifier: E4:F8:14:3E:E6:40:14:02:55:50:94:66:E7:58:BD:B9:B5:1C:70:15
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019422202C75349CD8A1A3E2A50BA9F71D90
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5PgUPuZAFAJVUJRm51i9ubUccBU.roa
Signing time: Wed 01 Jan 2025 13:48:41 +0000
ROA not before: Wed 01 Jan 2025 13:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197759
IP address blocks: 203.159.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2c:75:34:9c:d8:a1:a3:e2:a5:0b:a9:f7:1d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4f8143ee640140255509466e758bdb9b51c7015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:ce:92:db:e3:8b:3f:53:ad:11:22:c1:a5:
3f:a8:09:a5:d0:f1:4e:93:4b:a6:41:44:45:69:a6:
d6:9a:65:d4:30:86:42:45:bf:52:b2:87:00:73:bc:
2f:f2:c3:c1:8e:60:1d:21:6d:5b:3b:5a:ad:7a:c1:
86:02:0f:2e:64:86:29:ae:6a:34:1f:ab:bb:c9:fc:
9a:32:a3:92:a9:28:f6:75:9a:53:ce:34:62:0d:4c:
27:3e:ca:de:37:0d:00:17:8d:a2:b0:48:a0:b3:4b:
fe:be:9e:f6:de:43:5c:3c:a1:a5:b0:01:2c:69:25:
0a:3c:a1:84:8e:7a:af:a5:05:2a:0c:ce:56:29:55:
49:29:71:2a:c3:72:a9:86:fc:0b:ef:56:51:1b:bf:
a3:5b:86:3c:66:e8:38:c1:29:56:5d:ee:cc:03:15:
df:eb:18:87:94:cf:c0:a0:9b:db:fd:2d:76:8c:4b:
e3:23:6c:85:07:23:58:7c:b1:ff:92:66:16:06:b0:
d5:9b:61:6b:da:a7:62:48:83:ce:26:18:95:ea:13:
a0:83:c5:59:32:07:0c:4b:b1:8b:cb:e1:18:8d:ae:
49:23:2f:c1:5c:bd:6d:50:29:d9:aa:cd:07:58:87:
38:62:4a:62:51:b7:23:d1:0d:71:0f:6e:05:7e:60:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F8:14:3E:E6:40:14:02:55:50:94:66:E7:58:BD:B9:B5:1C:70:15
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5PgUPuZAFAJVUJRm51i9ubUccBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.159.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:81:ab:53:0d:d1:41:66:3b:3f:38:66:4a:e5:f1:3d:16:4d:
93:ef:db:96:d6:42:92:73:ff:7f:fc:4c:d7:58:54:02:d0:bf:
a7:8c:bd:ab:82:2f:ad:fb:4a:f8:b1:7d:93:0f:37:2a:9f:21:
39:ff:65:75:de:71:55:da:74:9e:62:6b:0e:ab:cc:67:f5:72:
63:54:ea:84:92:ce:fe:10:4a:0e:c4:08:f1:6c:7f:60:2a:a2:
f6:36:73:bf:4d:e2:14:c7:11:06:bd:c6:31:a5:d2:77:75:be:
cf:0d:a2:1f:3a:c8:33:5d:dd:79:c5:ce:ca:2a:ca:1b:02:cf:
8b:8c:a8:67:4c:2f:23:ca:b8:bc:ab:94:3a:8d:17:c9:96:b5:
a1:2f:03:9b:d7:b2:bb:b7:21:40:91:c4:e8:94:6e:91:bf:b8:
e7:a6:92:70:4e:53:e1:11:aa:6a:e5:cd:67:09:ad:f6:eb:e3:
be:c4:5a:aa:0e:6e:11:ca:2a:15:ed:cc:0f:9f:24:97:80:95:
af:1a:87:ca:06:22:89:a0:8b:e8:1e:0e:1d:bb:51:f7:e1:07:
c4:e7:0f:63:87:ab:ec:16:ca:c0:66:c9:fe:30:67:7e:c7:0f:
86:3f:78:df:3c:2e:ce:e6:74:91:a0:09:74:6c:a8:a8:9a:68:
f3:92:b3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:41:41 2025 by rpki-client