Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/dp_LSTj4OfynvxVQdwxdbvvJRtw.roa
File: dp_LSTj4OfynvxVQdwxdbvvJRtw.roa (raw, json)
Hash identifier: RClfGuB/R58TJYAlZ9ywB8wnB/nprtZr8tokSX9rMxI=
Subject key identifier: 76:9F:CB:49:38:F8:39:FC:A7:BF:15:50:77:0C:5D:6E:FB:C9:46:DC
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 0196ABFAEBBB07B40FD48D02C46B07C5BFA8
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/dp_LSTj4OfynvxVQdwxdbvvJRtw.roa
Signing time: Wed 07 May 2025 18:21:10 +0000
ROA not before: Wed 07 May 2025 18:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211851
IP address blocks: 82.129.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:fa:eb:bb:07:b4:0f:d4:8d:02:c4:6b:07:c5:bf:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: May 7 18:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=769fcb4938f839fca7bf1550770c5d6efbc946dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:6b:4d:88:30:e6:c6:c1:b3:d4:c4:81:d3:
52:67:ef:bf:ee:f4:95:5f:bc:d0:89:46:0f:f8:a9:
b3:1d:9b:f5:0a:43:1f:49:a0:74:87:ef:cd:d0:25:
59:e7:33:e3:75:6f:8c:f8:dc:58:09:b4:24:31:c7:
13:e4:0b:c5:c9:22:eb:6e:6c:74:38:29:c2:89:c1:
ee:d6:21:ad:cb:a2:ec:76:81:1b:1c:7c:29:79:33:
7d:46:06:17:5a:55:52:60:41:f0:95:9e:bf:04:c5:
bc:ac:32:d1:82:45:5d:c7:8c:20:37:34:5f:a7:18:
b2:1a:b8:ed:20:cf:48:c0:75:4f:ae:d2:0b:5d:ed:
b4:2a:6f:9a:6b:06:77:97:18:30:48:78:37:b5:af:
b5:93:fa:94:46:20:e3:a1:4e:af:4e:d1:bd:ee:1d:
a0:07:7d:da:f2:3f:89:2a:5f:90:3b:39:d2:3e:22:
78:03:e7:02:b8:76:23:e7:2b:00:11:d0:e9:88:ec:
49:b3:cb:89:c1:70:2f:38:68:42:2f:a2:02:1b:19:
66:7b:b4:83:36:f5:99:d5:d7:98:c1:47:82:f6:1b:
0e:93:47:a5:75:ab:52:1c:43:77:66:d2:d4:67:96:
65:84:f0:6a:d6:79:bd:b0:82:3f:47:c6:b9:96:db:
7d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9F:CB:49:38:F8:39:FC:A7:BF:15:50:77:0C:5D:6E:FB:C9:46:DC
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/dp_LSTj4OfynvxVQdwxdbvvJRtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.129.4.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c3:2f:bb:2d:dc:7e:48:67:25:37:50:b1:9d:5d:bd:19:94:
06:40:77:7c:c4:a3:44:78:01:83:23:1a:59:81:9c:27:c2:c9:
0c:ab:64:2a:0a:b5:fb:31:f3:73:38:f2:46:52:76:97:2f:07:
20:39:aa:e6:20:d6:38:91:50:ce:8c:a6:2c:a0:3d:62:17:3d:
2f:24:b7:58:c9:7a:2c:ca:ef:32:ea:4a:4d:4d:56:8b:a2:cc:
c8:a1:51:2b:f0:f7:0d:fb:d8:f9:3c:c2:00:49:4b:06:ec:b4:
90:1a:f5:14:88:f9:ae:c5:a5:33:d2:83:64:bc:49:39:9a:76:
2a:28:b6:95:1e:a3:5c:ef:3e:7d:7f:b2:ab:4d:ea:08:a0:92:
79:fb:e3:2e:09:4d:5d:e4:51:27:6f:79:a9:40:b7:6d:19:e8:
1c:aa:1b:6d:11:5d:df:9d:6f:8f:bc:ae:1a:28:46:b7:90:e7:
08:32:b4:95:49:3b:79:cc:62:95:ed:a1:3e:89:a3:c3:6b:1e:
6e:b5:76:1d:3c:94:1b:10:03:0a:52:a8:45:60:90:89:27:b9:
56:8a:c5:fa:8c:15:cf:d7:ef:68:92:b6:04:22:59:c9:d9:a1:
4c:bd:02:38:0a:4d:c8:2d:2e:b8:44:4e:8e:bb:ab:95:b6:e0:
f4:d5:e4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:03:28 2025 by rpki-client