Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/4NPOuZp1bS_Uz2zSSwivAhnZ4p4.roa
File: 4NPOuZp1bS_Uz2zSSwivAhnZ4p4.roa (raw, json)
Hash identifier: iVhV6w27cKWM7Kk6nyuzQNw7vPaZe1d0NSCMwXzWiZk=
Subject key identifier: E0:D3:CE:B9:9A:75:6D:2F:D4:CF:6C:D2:4B:08:AF:02:19:D9:E2:9E
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019684F859514A8E7FFB1BD607C39C795540
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/4NPOuZp1bS_Uz2zSSwivAhnZ4p4.roa
Signing time: Wed 30 Apr 2025 04:33:10 +0000
ROA not before: Wed 30 Apr 2025 04:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400696
IP address blocks: 66.56.83.0/24 maxlen: 24
124.198.133.0/24 maxlen: 24
155.2.193.0/24 maxlen: 24
155.2.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:f8:59:51:4a:8e:7f:fb:1b:d6:07:c3:9c:79:55:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 30 04:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0d3ceb99a756d2fd4cf6cd24b08af0219d9e29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:64:f2:ec:aa:c2:b8:e3:6a:0e:a8:40:90:bf:
d1:9d:9c:19:d8:1a:3c:24:d0:eb:dd:b8:15:f7:e3:
f1:50:21:b7:bd:93:a5:b5:d5:c2:86:10:70:a6:be:
35:21:d5:55:a7:3c:aa:24:c7:bc:03:ef:86:98:ab:
a7:b3:9b:16:a6:39:9d:05:2b:2c:47:59:9b:6a:7b:
9e:fb:7a:7e:7c:16:a1:d6:f7:39:a8:77:57:01:9d:
10:2f:eb:dc:cd:19:63:6f:f1:24:d7:ae:fb:a8:14:
5a:98:c0:33:d1:f3:6a:25:61:3c:df:b5:59:1b:9a:
74:8f:a1:81:47:11:c1:a1:ea:87:a0:31:76:44:06:
bf:cf:ca:67:b8:45:ec:83:10:b3:87:10:5e:d6:33:
ff:62:02:01:01:78:0d:8a:e6:22:b3:92:5b:93:0b:
f8:d3:28:ea:08:56:ac:23:d5:93:15:a7:06:1c:fd:
a7:2f:b1:7e:ca:f7:aa:79:31:d5:43:ad:8a:f6:a0:
cd:75:91:fb:b2:c6:ee:66:b4:d9:6d:05:cc:07:76:
a4:9a:5b:aa:5b:f4:b4:3b:8a:5b:58:20:ca:4a:89:
e9:a0:84:3e:7c:56:e4:25:d1:d3:e8:7b:18:d0:e0:
76:cb:84:27:85:54:a7:e1:b2:04:d6:83:f7:89:86:
b1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D3:CE:B9:9A:75:6D:2F:D4:CF:6C:D2:4B:08:AF:02:19:D9:E2:9E
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/4NPOuZp1bS_Uz2zSSwivAhnZ4p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.56.83.0/24
124.198.133.0/24
155.2.193.0/24
155.2.220.0/24
Signature Algorithm: sha256WithRSAEncryption
89:1f:8a:38:a2:d5:0c:45:12:36:65:a7:73:73:5e:96:56:5a:
06:b1:6b:2f:1e:f1:a2:9a:cb:1b:9d:13:5e:bf:b3:4f:fa:25:
5c:3e:80:29:08:e5:1a:cc:fd:ea:8f:26:af:9d:d1:7f:25:a9:
69:54:9d:17:b4:5c:1f:d2:24:ec:7d:40:f4:cc:a5:79:c4:6c:
c1:8e:db:89:86:5d:df:37:44:28:31:ad:7e:cd:28:6e:e8:d8:
56:e6:76:aa:fb:f8:c4:eb:07:6a:f2:5a:a2:38:3b:41:87:04:
78:9d:01:d2:89:0e:9a:e9:2d:55:6b:7b:1b:36:57:1e:a6:14:
8e:7b:70:d4:67:a8:60:ce:05:7e:b9:00:41:ce:e5:0a:b0:68:
0e:06:c5:35:2b:21:e5:9b:5e:fa:33:cf:fa:69:0f:c7:ea:3e:
70:f0:ba:9e:74:9b:0e:e8:a8:75:59:1f:21:db:f9:7f:85:c2:
ef:76:4f:27:97:35:19:eb:23:68:51:5e:68:6f:7f:f7:81:86:
ae:01:cd:6c:e7:b7:ae:39:03:84:39:4e:b8:be:41:61:ab:a5:
bd:7e:94:af:b7:70:44:dd:58:f9:d4:34:0e:e0:f7:14:ef:35:
63:ef:fd:d6:34:bb:40:e5:0d:3c:9a:80:3c:4c:38:a8:7c:a2:
36:c2:83:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 21:56:33 2025 by rpki-client