Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/dIkGudwt-RR6RWXajZoxz1vlHzU.roa
File: dIkGudwt-RR6RWXajZoxz1vlHzU.roa (raw, json)
Hash identifier: OKPlohfOihRtk51p5gTQk9DKoBwl84PalakI/wclgFg=
Subject key identifier: 74:89:06:B9:DC:2D:F9:14:7A:45:65:DA:8D:9A:31:CF:5B:E5:1F:35
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 019423D756F64D0FE4463087E50B613B1F16
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/dIkGudwt-RR6RWXajZoxz1vlHzU.roa
Signing time: Wed 01 Jan 2025 21:48:22 +0000
ROA not before: Wed 01 Jan 2025 21:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210097
IP address blocks: 5.40.136.0/24 maxlen: 24
62.82.51.0/24 maxlen: 24
82.159.153.0/24 maxlen: 24
84.124.62.0/24 maxlen: 24
95.39.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:56:f6:4d:0f:e4:46:30:87:e5:0b:61:3b:1f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 1 21:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=748906b9dc2df9147a4565da8d9a31cf5be51f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c9:57:08:63:47:41:3f:f3:bf:4f:32:1a:0c:
8c:f2:d8:54:97:2f:f5:74:2f:00:07:7c:d8:e2:eb:
7c:a5:b5:c1:41:48:91:22:4e:83:13:15:08:d4:84:
18:fc:69:22:69:e2:d8:5d:fe:a0:62:ce:45:74:46:
61:f4:1c:4a:54:06:cc:4c:34:ab:8e:0d:c0:f7:f7:
ad:b2:df:e2:c9:ba:da:c0:ee:6a:e7:5d:23:92:c8:
29:9c:d2:0f:7a:42:61:07:f4:5a:d4:c9:fc:85:e8:
9a:16:53:51:12:0b:21:b0:ee:f4:5b:4c:1b:9a:67:
35:82:2f:10:64:8f:a1:0b:7c:8b:74:30:69:79:8a:
8a:14:e5:0f:d6:fc:e0:5f:43:b3:cf:f1:0a:94:59:
e6:66:c5:e6:dd:23:ce:ce:66:50:0d:ac:c6:32:4a:
74:6b:5b:66:f0:54:55:fc:1b:e7:75:69:9e:ec:ca:
0f:3a:9c:4a:30:4c:7f:21:45:82:f7:e8:70:c5:b1:
40:33:7b:e8:d4:f6:c9:b3:2f:43:63:58:20:dd:ed:
b3:7e:1f:da:11:51:9a:32:f8:69:8f:a9:2c:18:c4:
27:12:0c:60:5d:53:0a:a5:40:4f:cb:85:82:fa:90:
31:b4:4a:ed:4d:e0:d3:2c:dc:e6:e4:30:47:d7:05:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:89:06:B9:DC:2D:F9:14:7A:45:65:DA:8D:9A:31:CF:5B:E5:1F:35
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/dIkGudwt-RR6RWXajZoxz1vlHzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.40.136.0/24
62.82.51.0/24
82.159.153.0/24
84.124.62.0/24
95.39.61.0/24
Signature Algorithm: sha256WithRSAEncryption
84:6a:48:b3:4c:2f:c9:3f:cd:bc:06:b4:0b:93:56:ff:81:5e:
51:8e:0f:53:19:ae:6d:00:ae:b4:ed:24:e3:18:df:99:85:44:
e8:3f:42:c7:d1:ad:98:9d:b3:da:7e:db:9a:4c:d0:64:50:ff:
35:9d:10:8b:3f:0b:f7:65:f5:84:96:af:59:bb:75:05:ed:2e:
e3:07:ee:ae:7d:45:b9:8a:8b:59:e8:51:d6:c7:9b:d4:1c:ac:
2b:3a:28:25:1b:23:d9:4c:be:d9:bd:9f:a9:c4:ac:e5:6e:09:
51:00:11:95:b2:69:0b:42:25:d1:9b:9b:4f:e0:40:67:a0:6f:
e6:47:7d:7d:51:bc:fe:f3:4a:e8:65:5a:48:c2:58:63:b9:ee:
10:ef:e4:46:c2:c7:f9:a9:c3:2c:91:cd:52:a2:b4:bb:0c:3b:
db:ec:7f:61:b9:34:af:e3:65:ba:f5:00:e6:1d:bd:70:e5:48:
84:eb:f0:94:de:5b:f6:3e:ea:0d:dd:8b:cd:30:ea:e9:6b:63:
e0:7a:d9:e6:d5:93:98:f9:c4:e4:70:d9:b6:fc:91:50:51:62:
a3:7a:95:ca:6f:19:c3:d5:ac:bf:a0:d4:71:1f:af:16:03:c6:
51:7d:25:aa:fc:2b:16:eb:54:ca:7e:96:5a:22:0c:0e:f7:dc:
bd:3f:4b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:15:27 2025 by rpki-client