Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/1RGgWDKxb5y298L2tt-0tOvqbNw.roa
File: 1RGgWDKxb5y298L2tt-0tOvqbNw.roa (raw, json)
Hash identifier: 2bZZWO6omsg2Mwm30E/Z1rRX+nPqPKuGxYg/2ZzCe0k=
Subject key identifier: D5:11:A0:58:32:B1:6F:9C:B6:F7:C2:F6:B6:DF:B4:B4:EB:EA:6C:DC
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 0195907918A607A774A2685A9C7A8DEAEF03
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/1RGgWDKxb5y298L2tt-0tOvqbNw.roa
Signing time: Thu 13 Mar 2025 17:06:50 +0000
ROA not before: Thu 13 Mar 2025 17:06:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214435
IP address blocks: 151.248.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:79:18:a6:07:a7:74:a2:68:5a:9c:7a:8d:ea:ef:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Mar 13 17:06:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d511a05832b16f9cb6f7c2f6b6dfb4b4ebea6cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:3e:01:87:d9:59:f5:af:e0:68:fe:a6:57:
fe:35:e6:e7:94:fc:cb:7b:4b:2d:9a:86:c7:e5:a3:
8d:c1:5d:d1:c9:cd:a6:ee:8d:e5:79:a4:c0:af:a0:
61:19:1e:4d:d0:5e:57:8e:2f:2f:aa:38:85:8d:c1:
58:38:a7:66:53:d8:63:74:0f:f3:30:92:91:24:bc:
04:b3:a6:3e:5d:cb:ee:7a:b5:62:45:12:ba:27:6a:
a6:fc:12:8e:43:60:ab:a9:a9:b5:59:ef:4d:6a:1e:
38:9e:1d:7c:2b:e9:18:64:0d:ed:4e:51:7e:b0:20:
65:e2:72:c7:d1:9f:21:54:26:d9:7b:df:1b:4e:a4:
63:54:df:01:b2:47:55:eb:17:8b:8a:3a:48:05:de:
58:24:26:54:6c:b0:fb:21:3d:59:8b:92:6d:a2:f6:
f4:c8:92:81:93:71:7c:7e:c1:a6:5d:a9:c1:55:73:
48:6f:91:fd:e1:e9:99:ca:08:3e:4b:2a:12:a2:07:
50:b8:28:dd:1e:7a:eb:0e:aa:d3:36:34:a5:52:37:
23:d7:9e:6c:63:ad:b7:1c:49:3b:7c:ae:75:6b:dc:
00:59:ca:73:90:1c:59:49:82:68:49:ba:db:da:7a:
28:a5:c4:38:fc:25:90:0d:e4:d4:c1:96:c1:2e:d4:
a0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:11:A0:58:32:B1:6F:9C:B6:F7:C2:F6:B6:DF:B4:B4:EB:EA:6C:DC
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/1RGgWDKxb5y298L2tt-0tOvqbNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.15.0/24
Signature Algorithm: sha256WithRSAEncryption
65:51:23:8d:85:59:5b:ed:c0:98:e7:1a:59:af:03:5c:22:8a:
17:76:c5:68:07:0a:dc:b1:bc:f5:de:b1:65:ab:2f:41:2c:74:
07:f2:a2:0f:23:a4:f1:e1:45:c2:de:69:10:1a:a6:22:42:dd:
10:90:39:2f:45:74:ff:05:8d:57:5b:e8:87:f4:04:5d:19:50:
ff:36:a6:3a:c6:bb:0e:1e:42:46:a6:38:73:95:73:56:e4:54:
cf:cb:f2:2f:4a:6c:4f:c1:74:f9:78:5e:69:16:8e:e8:1d:b1:
f9:67:00:00:c8:50:50:ce:4a:4e:0f:11:de:35:98:b4:92:6b:
f3:70:8d:ab:66:36:e0:6e:86:89:7c:31:25:1e:ff:0f:bd:ff:
23:cf:55:3b:0e:aa:21:26:aa:61:9c:7b:28:85:78:50:f8:6c:
26:84:c2:95:92:8a:15:b1:52:fb:bd:c9:f0:1c:0e:fd:d8:96:
a1:2c:7c:50:70:8d:ea:0e:9c:7c:df:8e:1c:50:3c:ce:4b:26:
cf:3c:0d:a8:b6:7d:96:2b:75:d2:6c:fd:59:ff:76:76:c2:5b:
d3:c8:88:05:3e:aa:09:20:a1:f8:cb:e5:5c:55:2d:e0:b6:2a:
b1:13:00:f6:c9:cc:49:a3:0f:0b:39:4c:28:93:62:8e:38:c6:
f9:23:b2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:07:32 2025 by rpki-client