Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/1utcwuOmOI7txytHlcapG00bDWQ.roa
File: 1utcwuOmOI7txytHlcapG00bDWQ.roa (raw, json)
Hash identifier: KoDsbv2AuvIm5mO9VxRMXrTvsRyvxgVtQhUhy9Zv0J4=
Subject key identifier: D6:EB:5C:C2:E3:A6:38:8E:ED:C7:2B:47:95:C6:A9:1B:4D:1B:0D:64
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 019425219413D847BB82692A3AA1FE16ED42
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/1utcwuOmOI7txytHlcapG00bDWQ.roa
Signing time: Thu 02 Jan 2025 03:49:04 +0000
ROA not before: Thu 02 Jan 2025 03:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20704
IP address blocks: 81.92.240.0/22 maxlen: 24
217.196.64.0/19 maxlen: 20
2001:1408::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:94:13:d8:47:bb:82:69:2a:3a:a1:fe:16:ed:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Jan 2 03:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6eb5cc2e3a6388eedc72b4795c6a91b4d1b0d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:0b:17:b8:21:0c:c3:11:23:d2:31:0b:43:
01:1b:70:88:c0:66:97:af:01:64:72:86:b9:5b:6c:
b1:d3:e2:4e:e4:32:4e:cc:33:34:8f:5f:8c:e3:72:
9c:46:0f:5c:11:56:82:f3:d5:ec:4c:bd:a2:3b:ad:
80:1b:a6:c5:bd:a1:87:c6:0d:3d:35:35:a2:ed:02:
43:2e:33:27:af:14:b5:c0:22:33:f6:90:27:79:00:
a8:b5:43:62:e9:1a:f3:2e:c1:1f:73:a6:e3:c0:0f:
af:ff:11:ce:60:bd:3a:9b:7e:6c:c7:9c:d5:d8:0e:
95:03:77:33:68:fd:a5:db:b9:1c:09:32:ca:96:65:
9d:7e:8a:10:3b:27:18:e1:32:5e:74:6b:64:f8:75:
ab:99:f8:97:8e:48:34:94:42:67:99:c3:8c:00:ed:
06:85:31:4b:00:e0:d5:61:30:db:6f:3c:e8:f5:4c:
55:ad:80:b7:db:b9:aa:77:c5:a6:c3:aa:d0:b4:ad:
89:10:dc:57:b1:3f:09:56:49:f7:33:dc:9f:10:28:
c5:05:08:96:b2:8a:9e:0c:75:40:8c:25:29:de:c9:
87:57:57:87:36:4f:3f:12:2f:09:93:32:96:80:06:
fe:37:4d:55:d5:28:e7:79:5e:60:6f:ee:6f:98:de:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EB:5C:C2:E3:A6:38:8E:ED:C7:2B:47:95:C6:A9:1B:4D:1B:0D:64
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/1utcwuOmOI7txytHlcapG00bDWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.240.0/22
217.196.64.0/19
IPv6:
2001:1408::/32
Signature Algorithm: sha256WithRSAEncryption
af:38:79:cf:72:aa:35:69:a1:aa:d0:a0:09:bf:b6:70:96:39:
b7:e7:10:01:d3:e6:7f:c5:5b:00:c5:3f:58:c5:5c:e7:f8:53:
9b:27:8a:4e:06:b7:7f:b8:f5:da:8d:53:34:59:af:be:55:0e:
aa:0e:92:b6:20:64:8d:af:31:95:0a:85:57:8f:4d:68:06:71:
ac:ec:27:6b:4b:bb:e9:42:9c:5d:5b:a4:0a:91:45:0c:e8:e9:
36:f2:b7:99:93:b0:82:d8:ed:5a:7b:3b:cc:28:18:e1:3c:a9:
54:97:0b:5f:bd:70:ed:0a:58:59:28:5a:55:d0:99:48:b9:78:
8a:07:b9:64:5f:68:04:58:e3:6f:cd:44:39:4d:7c:67:91:d1:
81:f9:e1:6b:fb:e4:1f:9e:cf:ea:0a:b1:85:19:cf:84:f2:ff:
3f:71:eb:7e:2a:62:d7:86:97:d8:75:a1:f7:95:0e:55:22:2a:
39:68:d9:d0:b9:73:49:0c:05:1f:1e:bd:be:3c:00:ab:19:71:
02:c4:8c:d2:5f:1e:1e:56:d9:8e:e9:98:c7:10:9d:6f:58:b4:
f8:18:51:be:8e:63:99:54:d0:81:50:84:cd:a2:69:fb:cd:7d:
65:d3:a0:fe:ed:29:11:31:20:71:de:ff:d2:10:8e:1a:d4:27:
26:d6:5b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:32:00 2025 by rpki-client