Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/544qbizQi-bIdkw3-dYqPJlzThI.roa
File: 544qbizQi-bIdkw3-dYqPJlzThI.roa (raw, json)
Hash identifier: +gEWQ7alsMrRoKZmorV8F7Ob4+H0fyVPG8B4nJMMSoA=
Subject key identifier: E7:8E:2A:6E:2C:D0:8B:E6:C8:76:4C:37:F9:D6:2A:3C:99:73:4E:12
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 01941F8C5E9C07859D37D16BC5DEE91CEE5E
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/544qbizQi-bIdkw3-dYqPJlzThI.roa
Signing time: Wed 01 Jan 2025 01:48:00 +0000
ROA not before: Wed 01 Jan 2025 01:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 92.51.20.0/24 maxlen: 24
92.51.21.0/24 maxlen: 24
92.51.22.0/24 maxlen: 24
92.51.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5e:9c:07:85:9d:37:d1:6b:c5:de:e9:1c:ee:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jan 1 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e78e2a6e2cd08be6c8764c37f9d62a3c99734e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:a9:44:f8:54:05:39:f7:1b:31:21:05:2d:
c3:52:af:59:85:c8:a2:f7:3e:c2:ec:5f:3f:dc:55:
e7:03:84:32:14:15:ea:f6:86:53:1b:90:08:40:13:
86:f6:2e:9e:75:e2:79:8d:d2:7d:6c:84:03:f5:59:
73:bf:b3:48:8a:87:3b:b6:37:26:d2:79:35:d1:0c:
9d:70:83:b8:b5:6f:96:86:75:5c:cd:0e:65:0c:1d:
c8:42:cc:46:37:3b:e7:23:ea:76:9d:01:f3:24:c2:
f5:ca:e1:e7:16:46:4e:5f:f0:e9:c0:93:2c:b6:99:
d8:03:0e:a3:9a:60:55:c3:4b:a4:52:eb:c2:fd:67:
32:d3:1a:9b:1b:ab:bd:d1:2f:c7:87:22:3f:0c:2c:
6d:93:68:eb:a1:ab:d5:61:5c:4a:37:67:fc:33:14:
3d:97:65:fe:9b:41:d6:64:7f:6d:cd:b3:66:d0:6c:
0f:f2:da:b9:57:e2:32:c8:3e:40:11:ac:ec:65:6b:
78:6d:6c:19:9b:3e:be:22:1a:fe:92:51:6c:ea:a2:
a9:58:4d:7e:b0:09:a4:23:9b:1c:d0:25:dd:ee:13:
b7:4d:7e:c3:6a:c2:f4:55:8c:9c:a8:7a:ff:16:f8:
a3:71:f4:32:63:8e:c5:db:85:1e:67:46:11:e3:3f:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8E:2A:6E:2C:D0:8B:E6:C8:76:4C:37:F9:D6:2A:3C:99:73:4E:12
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/544qbizQi-bIdkw3-dYqPJlzThI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.20.0/22
Signature Algorithm: sha256WithRSAEncryption
82:5e:80:56:83:c0:5c:fb:8c:76:88:7c:3a:cc:8c:cf:37:c2:
bc:ba:ee:cf:db:98:2f:d9:39:99:d7:53:eb:30:30:ca:d4:92:
15:fe:95:57:dc:b5:cf:70:7d:19:5a:a5:c5:97:ef:96:31:52:
8f:aa:4b:d1:e7:1d:2d:9b:c3:32:4d:c0:54:81:cd:99:45:e5:
97:e8:4c:d0:b9:a0:17:7c:ec:f3:ef:2d:06:d3:e7:e6:2d:50:
d9:25:5d:6e:a6:32:2c:59:ef:98:c4:94:5c:a1:de:55:66:5e:
43:13:8a:6e:1f:18:d1:24:76:aa:1d:fa:9e:e9:f6:fb:4f:1c:
3b:77:1d:a4:b3:d3:97:fc:ea:88:ab:88:aa:d9:af:ef:a9:b5:
b8:a2:5d:98:54:6b:86:dc:dc:e7:6e:c5:95:04:b5:7b:cc:15:
20:aa:15:01:56:38:26:f4:e3:83:bd:5f:f7:4b:a7:7d:4d:ce:
1a:92:e6:ab:ca:78:8e:09:5f:ef:3a:ff:ea:05:b4:33:de:fe:
c9:be:a0:8f:52:89:24:66:13:f7:f2:64:dd:db:d8:f5:4a:e7:
60:3e:31:c0:94:b1:e3:3f:73:e4:23:8a:95:b1:a0:c7:63:14:
1a:b0:13:d3:6d:25:f7:eb:24:41:41:75:58:ce:72:18:61:cd:
31:02:64:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:51:42 2025 by rpki-client