Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/0s_8uV4y_4Qh9izsXyjdTvFnvko.roa
File: 0s_8uV4y_4Qh9izsXyjdTvFnvko.roa (raw, json)
Hash identifier: eOw9cupvDiGzZK06bLbmO3r71BcAglZ1z0oB7mRXjtY=
Subject key identifier: D2:CF:FC:B9:5E:32:FF:84:21:F6:2C:EC:5F:28:DD:4E:F1:67:BE:4A
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D75D44C4D6ABD699F872F6A7667CF6
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/0s_8uV4y_4Qh9izsXyjdTvFnvko.roa
Signing time: Wed 01 Jan 2025 21:48:24 +0000
ROA not before: Wed 01 Jan 2025 21:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22400
IP address blocks: 5.1.92.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:5d:44:c4:d6:ab:d6:99:f8:72:f6:a7:66:7c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2cffcb95e32ff8421f62cec5f28dd4ef167be4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:53:d4:c5:54:71:91:5f:2f:f9:9c:b1:e5:
6b:db:7f:d9:c1:c9:13:12:14:af:b5:d9:b9:74:d9:
72:94:cf:39:d2:79:3a:5a:95:b8:1f:8b:a6:c0:6d:
ca:58:33:6a:18:84:0b:46:28:c5:79:ca:88:f1:0e:
f2:a2:50:54:74:6a:ae:21:71:0e:4c:84:8a:fb:c0:
e2:85:e8:fa:f9:2a:f4:7f:c3:28:bb:cd:38:3a:6a:
91:78:47:69:86:73:24:1e:d6:1f:02:11:11:e4:4b:
fd:b6:81:f9:31:6c:d1:b3:05:a3:e3:13:34:9b:74:
79:fd:01:4c:83:a1:2c:cb:54:de:c3:a1:50:6c:d2:
63:5f:a0:cd:c8:a3:1b:0d:ff:ff:d9:26:18:4f:a5:
bc:8d:a2:7f:8d:3f:61:bc:af:01:51:81:ab:fe:60:
09:15:e3:4d:95:d1:c2:ac:f9:c1:72:60:1a:ed:59:
52:c5:2b:30:94:6a:b1:26:08:83:15:41:82:7a:36:
e8:ae:92:7a:4d:e5:63:10:81:9d:a5:c9:da:48:67:
e9:b4:a7:e2:43:4c:b3:dd:6a:c8:fb:e6:dd:6a:8b:
4c:66:40:b3:38:ca:86:c7:19:d7:38:33:9c:45:23:
b5:a1:57:0c:1c:fa:75:ab:65:cd:43:f2:c2:74:90:
b8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CF:FC:B9:5E:32:FF:84:21:F6:2C:EC:5F:28:DD:4E:F1:67:BE:4A
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/0s_8uV4y_4Qh9izsXyjdTvFnvko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.92.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:28:fb:f3:3f:f4:a4:47:b5:dc:68:ea:28:8b:d2:e7:c0:fc:
77:27:9b:16:d3:fd:c9:e4:08:f4:97:99:35:7f:08:55:6b:07:
d4:65:a7:56:83:43:e8:5f:00:07:91:1d:fe:35:7b:29:3f:90:
09:e7:0a:66:a5:52:e2:10:de:38:f3:30:16:90:e2:52:df:82:
0f:4d:5c:13:17:34:98:59:50:c2:f7:bb:ed:34:82:0d:ff:31:
94:bc:59:d0:42:2d:b7:d5:23:b3:8f:6f:21:75:3d:3d:b3:24:
93:b0:b5:68:e5:89:db:47:1b:f2:eb:85:c7:b8:f4:28:58:90:
04:93:d7:11:2e:97:a5:93:63:a1:5e:9d:35:46:a0:c8:f3:fd:
15:78:b4:6b:6a:ae:51:98:c6:9a:6b:d6:a6:5a:b0:c0:39:3d:
72:89:7d:0b:16:95:de:fa:bf:ac:1b:4e:e5:11:4f:80:0c:58:
86:9b:07:0e:24:0f:c7:83:25:b1:3f:90:34:3d:33:b7:a3:03:
39:c3:4e:53:3e:fa:88:54:38:69:01:3b:6a:87:7d:c9:95:76:
6b:3b:ac:d9:d4:2f:c6:8f:6c:b9:71:8d:6a:3f:a7:17:f3:e7:
50:54:33:48:00:98:1c:c1:dc:9a:ae:60:ca:15:09:f1:36:2e:
13:01:d3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:23 2025 by rpki-client