Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/syUhUvk4XSRdOD4q8FIu6rWpI_8.roa
File: syUhUvk4XSRdOD4q8FIu6rWpI_8.roa (raw, json)
Hash identifier: z4jUAGjLivoPmkuH39qm92p7hczubySYWCKkuXeheR4=
Subject key identifier: B3:25:21:52:F9:38:5D:24:5D:38:3E:2A:F0:52:2E:EA:B5:A9:23:FF
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D70F3A40E34C92B1CBCEF3AF3AE7BD
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/syUhUvk4XSRdOD4q8FIu6rWpI_8.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50040
IP address blocks: 213.108.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0f:3a:40:e3:4c:92:b1:cb:ce:f3:af:3a:e7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3252152f9385d245d383e2af0522eeab5a923ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:44:41:ee:63:5b:c2:d7:e3:db:78:61:06:9e:
46:15:fc:8b:b7:60:ce:c5:2c:9b:fa:df:a3:02:e2:
6e:cc:24:85:57:87:e9:a5:01:c4:20:14:12:1f:6d:
82:0b:b6:9e:03:88:31:24:87:ef:26:0c:bb:ab:34:
96:1f:80:40:58:b1:55:ed:05:22:cf:b9:82:66:e7:
51:5f:34:61:b2:86:de:c0:3e:b6:47:7a:92:07:93:
40:33:e8:e9:c5:6d:32:79:21:6f:45:05:15:df:55:
38:c3:2d:53:a0:0a:64:91:53:bc:96:2b:fb:79:97:
b4:bc:b1:c1:f5:5d:79:ec:7b:25:86:90:0d:81:7f:
9b:0e:bf:25:92:f6:15:7b:d4:53:be:63:b0:6b:58:
4b:70:ab:c6:48:5c:04:3c:6c:0a:0b:01:5c:78:c9:
a3:2b:dc:5e:24:bd:23:cc:37:04:af:82:38:97:70:
fa:6a:8e:16:f1:ac:83:af:f4:28:fe:f3:7d:19:08:
5d:b3:52:b1:76:26:44:76:22:7f:58:9f:38:0a:3f:
2c:4d:fa:82:0e:11:d6:a7:94:ff:90:78:be:ce:47:
1b:cf:cf:ac:42:5b:fb:0f:10:20:4e:f6:11:51:12:
ea:91:e9:fe:87:b2:56:ba:6d:b3:07:e8:c7:26:10:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:25:21:52:F9:38:5D:24:5D:38:3E:2A:F0:52:2E:EA:B5:A9:23:FF
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/syUhUvk4XSRdOD4q8FIu6rWpI_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.197.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c9:4e:6a:45:85:31:09:af:76:09:71:cc:cd:9b:db:cd:55:
74:ef:1e:99:a4:be:36:27:3f:d1:b1:92:28:07:12:f5:b1:c8:
0b:84:66:31:cf:7c:1c:02:2f:df:0f:01:ae:18:d6:ef:5e:44:
9a:b7:2b:a2:54:c1:82:b6:fd:ff:ff:31:c3:a2:1f:be:b3:3b:
a6:1b:22:68:39:5a:4a:6e:b4:52:99:3b:1c:90:75:79:7d:b6:
30:eb:3b:c2:97:98:01:a0:69:43:69:2d:12:d0:e6:42:3c:f3:
45:42:be:88:b4:bc:64:72:ea:8e:14:65:be:93:71:7a:70:ef:
07:68:97:64:7b:4f:22:b9:20:9f:34:2d:c3:58:63:85:27:54:
71:3a:35:90:8a:73:56:b9:e1:a7:07:7d:90:45:23:77:fc:26:
b7:51:17:57:a3:74:6f:2f:0f:c4:2c:b6:50:e3:e5:bf:f6:41:
1f:1a:08:34:be:df:3a:08:ba:78:bf:1e:fc:1f:4d:19:fa:a0:
de:29:62:ac:33:9c:3b:bc:94:80:71:7f:b0:30:de:3d:6c:d7:
f6:28:4f:70:29:a5:fa:0d:bd:e8:1c:ca:2e:d2:df:59:96:99:
e7:54:de:b7:71:cd:40:79:3a:c0:c8:30:e3:70:3a:16:9d:15:
d6:4e:6d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:35:27 2025 by rpki-client