Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/5A1rFRWiaoMZrd1W-j1DOiNHcxg.roa
File: 5A1rFRWiaoMZrd1W-j1DOiNHcxg.roa (raw, json)
Hash identifier: V+WxsJZcqfyEzzmw0OXvgqJRZOf8o70VUJRyRrh0lh8=
Subject key identifier: E4:0D:6B:15:15:A2:6A:83:19:AD:DD:56:FA:3D:43:3A:23:47:73:18
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 01942220399E606A6F4D4B121D3F4F466647
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/5A1rFRWiaoMZrd1W-j1DOiNHcxg.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 164.10.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:39:9e:60:6a:6f:4d:4b:12:1d:3f:4f:46:66:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e40d6b1515a26a8319addd56fa3d433a23477318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6e:45:88:3f:7c:6d:cc:ba:93:c1:13:16:bf:
9c:0e:a3:27:a6:a2:48:2a:04:b5:4c:3e:be:74:95:
83:74:3b:dd:c9:41:86:3b:b7:63:1a:36:f3:ae:14:
c7:b6:8b:70:d1:87:e5:46:40:24:c9:3d:56:95:e0:
14:a7:18:7a:80:7f:7f:60:b1:0e:15:14:13:55:5e:
a6:cf:33:b2:d9:d5:d5:1f:a9:83:7c:21:51:76:7d:
21:cc:e6:fc:9c:ae:5a:c9:0b:54:84:59:6f:1f:66:
c0:e2:9d:17:96:15:fa:a7:e5:87:15:51:21:e9:db:
5b:7f:35:1e:6b:5e:de:0c:35:76:57:3d:37:9d:82:
2e:1e:02:e8:1c:eb:ee:76:d4:06:62:2e:75:4f:49:
2a:db:59:b4:63:8c:8f:87:b6:bd:0a:9c:64:94:b7:
77:13:9d:3d:16:44:dc:e1:d3:a3:3b:21:31:37:a0:
6f:f5:bf:01:37:d0:fd:bb:86:40:1d:6b:ee:0c:73:
f9:be:89:84:19:d2:55:23:a0:a3:69:64:e1:65:18:
98:50:75:c3:ec:8b:dd:fa:a4:66:99:0f:10:82:76:
24:bc:55:03:d0:f0:5d:9e:21:f5:fb:f4:dd:62:f6:
c9:a9:e1:eb:6d:94:98:78:5b:5a:a0:a7:e8:e6:43:
c6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0D:6B:15:15:A2:6A:83:19:AD:DD:56:FA:3D:43:3A:23:47:73:18
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/5A1rFRWiaoMZrd1W-j1DOiNHcxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:8f:4e:45:0b:50:b3:81:2f:97:43:93:75:de:98:f5:c5:0a:
c9:48:fc:71:13:29:e6:d7:ce:eb:cd:79:ef:92:bc:70:19:66:
e2:c7:c1:7d:6a:dd:40:12:3d:c7:ac:44:f9:b9:6c:5d:73:70:
db:0d:ac:83:f8:bb:f5:f9:3e:15:47:f9:0d:32:58:9a:58:aa:
bc:57:fc:e6:81:78:cd:2a:4a:d7:97:4a:12:31:ce:92:1e:97:
3f:d5:3c:20:20:14:48:be:7b:33:de:88:68:7b:ef:b7:49:6b:
b6:76:c9:36:17:fe:d2:a6:71:c4:68:3d:25:74:33:b8:ee:44:
10:00:f6:63:46:5e:64:63:a8:33:b9:e7:a2:fe:5f:01:61:66:
34:a8:2b:67:21:92:f8:f1:e4:81:9f:0b:db:9f:9d:ab:05:32:
df:cb:ca:b5:3c:a0:e9:22:06:d1:d9:bd:ab:4b:18:6f:dc:2b:
9c:0d:65:24:64:fc:f0:99:c4:7e:1b:3b:0d:26:d4:6e:39:bd:
e5:6d:6e:76:08:75:9f:7c:77:87:fd:28:fa:0b:09:57:93:d1:
3e:74:f0:7c:1b:3c:27:c7:9f:f7:58:ca:b4:35:e3:40:2e:a9:
3e:8e:cb:66:7c:77:a6:25:22:cd:0e:d3:80:a6:64:d4:cf:22:
96:06:cc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:17:37 2025 by rpki-client