Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/CL5GDI7AL5f3-MMAg1KGH-qZ_X4.roa
File: CL5GDI7AL5f3-MMAg1KGH-qZ_X4.roa (raw, json)
Hash identifier: 1+cCs2zFwxJkW1OoUx7Jz3Uxj06h6MGbFiXw6q5dy7M=
Subject key identifier: 08:BE:46:0C:8E:C0:2F:97:F7:F8:C3:00:83:52:86:1F:EA:99:FD:7E
Certificate issuer: /CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Certificate serial: 01942522395EA7AA16E963A9CFAD5978DD0C
Authority key identifier: 7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/CL5GDI7AL5f3-MMAg1KGH-qZ_X4.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42093
IP address blocks: 185.140.20.0/22 maxlen: 22
2a07:3c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:39:5e:a7:aa:16:e9:63:a9:cf:ad:59:78:dd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08be460c8ec02f97f7f8c3008352861fea99fd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e1:4b:6b:ac:64:a1:b6:d9:f4:95:16:8f:d8:
ba:78:cb:08:1a:e3:06:cb:e4:65:c1:47:5f:70:64:
c8:d6:40:f2:80:95:4d:eb:67:c3:37:e0:fd:c7:a5:
5f:aa:1e:fb:fb:cc:f0:e3:62:c5:41:98:4a:13:33:
ec:be:98:9a:95:59:ab:79:c7:34:2a:a1:dc:bf:61:
ab:e9:2a:1e:44:c1:8e:56:e9:92:ac:75:5f:a9:3e:
e1:73:1e:69:5c:4a:ab:1b:0e:f6:b5:cc:73:89:5f:
d7:7b:a7:28:ec:76:85:14:2e:a8:20:2b:21:d8:ec:
ed:9f:5a:f1:a2:81:7e:d4:8f:01:b5:ad:50:12:78:
b5:f5:8a:06:19:43:ca:a8:f7:19:72:42:8e:43:28:
5f:16:b9:ae:54:62:6d:4a:05:39:ce:ac:81:07:b5:
5d:98:40:87:32:83:33:da:cd:54:1a:3e:a8:80:55:
12:85:80:05:4c:04:1b:fd:79:40:59:2b:8c:de:f1:
08:03:dd:22:d7:93:30:04:41:8c:27:ec:32:7d:2e:
bc:64:49:16:bf:93:10:8f:ad:eb:c6:1a:99:73:68:
70:85:7b:af:af:86:15:ef:f7:36:bc:97:cb:a6:0a:
57:b3:63:64:61:44:61:6f:5a:8d:13:d3:bb:c3:ea:
ab:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BE:46:0C:8E:C0:2F:97:F7:F8:C3:00:83:52:86:1F:EA:99:FD:7E
X509v3 Authority Key Identifier:
keyid:7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/CL5GDI7AL5f3-MMAg1KGH-qZ_X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.20.0/22
IPv6:
2a07:3c00::/29
Signature Algorithm: sha256WithRSAEncryption
e2:a8:d5:ea:07:a8:07:ce:86:4e:af:b1:8c:cf:c7:90:42:e6:
c5:a2:13:98:5b:e7:42:17:40:1c:9a:3d:a4:ac:44:41:29:59:
bd:6f:7a:20:e0:9a:b8:24:08:03:f0:27:f0:ed:4e:d4:02:5c:
70:ab:e3:15:30:4d:c7:41:10:7c:db:9c:6a:36:4d:a9:38:e2:
b6:48:b8:4d:ba:c4:4e:39:b5:58:6c:ee:c5:1a:21:77:87:b7:
ee:c8:4a:f1:04:71:45:15:ea:01:df:ed:ac:2c:d3:90:ad:a1:
19:07:c1:d9:a3:6e:08:33:02:9b:a0:3b:be:90:4a:02:89:7d:
10:d1:4b:df:61:08:fc:be:da:a5:4f:23:ac:b2:e2:45:85:1b:
11:44:33:e1:8c:87:3a:1d:77:b2:33:d2:ae:17:04:41:85:29:
42:ea:b8:fe:26:76:b1:b2:0e:6f:4f:f3:80:cb:b5:9f:5e:f2:
cb:10:18:13:21:67:01:9a:83:67:52:db:8a:f3:a2:23:cc:1b:
41:93:e3:18:ed:13:83:6a:99:72:80:7b:70:4a:6a:b2:06:48:
ad:8d:a8:6e:e1:e5:a3:e1:b1:33:1c:a0:87:6d:3a:03:f7:8b:
1b:b2:68:be:36:a0:54:bb:4c:bc:c1:13:fc:3e:c6:90:2b:3d:
ea:a4:05:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:55 2025 by rpki-client