Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/AIvDmhuj2ZpytkvOeVyoUY_STpw.roa
File: AIvDmhuj2ZpytkvOeVyoUY_STpw.roa (raw, json)
Hash identifier: 3QHwujw/c7ulg8cAPCbEFjBitp9OHT3bIbRqwJYJDPk=
Subject key identifier: 00:8B:C3:9A:1B:A3:D9:9A:72:B6:4B:CE:79:5C:A8:51:8F:D2:4E:9C
Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial: 019422FB5C7417BA7C80FD7EAE9024D7297F
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/AIvDmhuj2ZpytkvOeVyoUY_STpw.roa
Signing time: Wed 01 Jan 2025 17:48:05 +0000
ROA not before: Wed 01 Jan 2025 17:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200590
IP address blocks: 5.188.174.0/24 maxlen: 24
5.188.175.0/24 maxlen: 24
91.192.82.0/24 maxlen: 24
93.189.59.0/24 maxlen: 24
213.183.34.0/24 maxlen: 24
213.183.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:5c:74:17:ba:7c:80:fd:7e:ae:90:24:d7:29:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Validity
Not Before: Jan 1 17:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=008bc39a1ba3d99a72b64bce795ca8518fd24e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:25:e6:53:35:7b:b0:96:53:98:d1:a9:a9:82:
1f:64:80:02:10:b2:78:c9:22:c9:1f:3e:ad:5d:42:
b0:81:72:66:94:be:33:24:2c:e8:64:fb:10:b6:7b:
f5:23:be:37:cf:bd:82:4d:1d:68:ad:eb:64:f6:f8:
24:8d:f7:c9:6e:28:79:c9:68:25:5d:d6:2c:96:bd:
56:44:cd:e0:89:29:43:9d:85:c0:8d:b7:f0:48:4d:
2c:91:42:ed:b7:81:36:a1:74:11:e8:3a:8a:a9:4c:
86:60:f5:3e:71:84:c9:3a:36:1b:3a:74:35:a4:83:
b3:7d:91:b0:69:8f:8a:76:fa:c8:2f:1d:ed:a3:91:
f5:58:39:c6:35:60:0d:3c:8c:5b:1d:46:31:69:dc:
45:fe:87:d9:c7:74:85:7f:b3:b5:b0:85:83:03:1f:
25:17:7a:69:6a:9e:7f:f9:02:e0:cf:ae:c4:8c:bf:
1a:46:7e:7b:c7:d7:5f:a7:4d:6f:1a:18:d6:0e:f7:
f9:ac:40:85:7a:40:ec:0f:4a:87:4b:f0:f2:26:42:
9a:21:aa:f3:e4:35:70:88:b5:51:0d:7c:f7:46:af:
37:ca:52:05:3c:47:7a:15:48:f3:ce:27:2c:d1:36:
83:b9:f1:7a:ea:4d:ce:45:b8:e3:0d:28:70:4e:9b:
62:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8B:C3:9A:1B:A3:D9:9A:72:B6:4B:CE:79:5C:A8:51:8F:D2:4E:9C
X509v3 Authority Key Identifier:
keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/AIvDmhuj2ZpytkvOeVyoUY_STpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.174.0/23
91.192.82.0/24
93.189.59.0/24
213.183.34.0/23
Signature Algorithm: sha256WithRSAEncryption
57:f5:b8:34:1e:e1:b5:69:e6:02:a1:4a:ab:ed:df:5c:41:ed:
28:ca:4d:aa:89:7f:a9:58:89:b1:7f:a1:0e:75:4a:55:d2:d0:
0b:14:f9:ec:41:38:ef:25:0b:90:8e:3a:87:42:74:3c:4c:17:
4f:77:4c:fd:95:52:6c:61:4d:9e:f0:f7:22:e9:70:5e:c8:3d:
8f:9e:c2:a7:e5:54:9b:31:d6:53:8d:dc:24:9d:bd:5b:ee:cd:
ad:6f:51:c5:25:10:b4:b8:52:de:bf:89:21:ad:04:7e:08:db:
c7:71:a2:6b:be:a2:09:c7:4e:3c:7a:80:ed:6f:87:28:99:cb:
ef:6d:6d:e5:9a:93:fd:94:be:7a:30:34:09:99:41:47:ad:d4:
54:9e:4f:c0:cc:94:4c:2c:5a:15:67:d2:f1:aa:9b:d5:c4:76:
e1:3b:64:2f:09:20:a4:74:09:f4:a3:c2:2a:2b:9c:ef:ac:b8:
48:64:6d:ca:63:cb:65:7d:61:b8:4a:74:fa:b5:69:3d:c9:91:
da:70:ca:62:a0:9b:45:08:fb:ec:f1:41:43:43:a3:71:fe:d2:
9b:c0:76:57:35:4a:1d:d6:99:3a:d8:2b:79:47:27:be:b1:ac:
96:64:ee:73:4a:a1:32:88:5a:dd:73:13:60:2c:1c:0b:73:ff:
f7:cf:0f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:18:30 2025 by rpki-client