Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/1-H8zwtiCrpCtpPhtU8BmTU4NN8Y.roa
File: 1-H8zwtiCrpCtpPhtU8BmTU4NN8Y.roa (raw, json)
Hash identifier: HRd7vxIurfbLc/eN8InR+wycqakqAWrM7JwDvrxV96A=
Subject key identifier: F8:7F:33:C2:D8:82:AE:90:AD:A4:F8:6D:53:C0:66:4D:4E:0D:37:C6
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 019651E2F4CD1949ECFD933D18DBD3EA330C
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/1-H8zwtiCrpCtpPhtU8BmTU4NN8Y.roa
Signing time: Sun 20 Apr 2025 06:29:10 +0000
ROA not before: Sun 20 Apr 2025 06:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22773
IP address blocks: 203.81.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:e2:f4:cd:19:49:ec:fd:93:3d:18:db:d3:ea:33:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Apr 20 06:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f87f33c2d882ae90ada4f86d53c0664d4e0d37c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:5a:a6:7b:68:a8:57:a5:5b:e0:21:b5:67:
c4:5f:3f:42:84:8e:62:e9:da:23:89:70:ae:9c:c4:
d4:13:fe:7e:7f:42:e1:a9:fc:80:99:3e:ab:60:4f:
be:d6:03:33:e0:dd:86:f4:8a:6e:59:7d:1d:65:e5:
c1:0b:c6:e2:9b:ac:fe:ef:ee:bd:40:53:dd:11:82:
0b:e1:75:df:4f:2f:d2:ee:73:eb:86:b3:b4:6b:09:
67:33:68:cd:91:b5:93:98:5d:e2:9e:bd:e9:8c:f8:
41:60:6b:c9:e4:7f:a2:ec:68:41:e9:81:b4:92:77:
3c:cc:5b:7c:14:94:ac:e3:7b:8f:51:bb:49:0e:d6:
bd:e0:33:28:a8:f1:2c:b1:c2:1a:60:8c:28:69:fb:
4b:36:2b:2d:2b:49:00:e3:19:6a:27:dd:7f:1c:a0:
44:94:5c:8e:6a:41:e4:7f:6c:81:eb:aa:96:8a:06:
08:42:66:64:ca:0d:47:f2:63:81:ad:03:30:4c:91:
72:64:d9:1a:ef:55:e7:6a:1a:46:99:d3:ab:90:9d:
aa:00:0e:c3:a0:fe:59:dd:9c:75:03:60:24:33:84:
8d:64:25:49:00:ea:ad:61:df:c2:6a:56:c9:0c:f6:
cd:0f:05:23:09:3f:06:ef:80:b5:fa:e9:dd:45:3b:
2f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7F:33:C2:D8:82:AE:90:AD:A4:F8:6D:53:C0:66:4D:4E:0D:37:C6
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/1-H8zwtiCrpCtpPhtU8BmTU4NN8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.81.192.0/20
Signature Algorithm: sha256WithRSAEncryption
62:36:97:b1:81:7b:85:82:eb:1c:a6:4d:3f:91:12:fa:df:b0:
e4:73:23:18:93:86:81:42:23:b5:1f:60:de:26:81:d2:66:38:
c6:8d:3f:f8:bc:a3:2d:0a:a1:c9:24:49:26:fa:5c:1d:74:22:
c4:ad:2f:ea:95:aa:c3:29:79:a6:ff:9e:18:4b:08:6a:fe:29:
1c:a3:7a:93:7d:70:da:db:da:cc:88:49:7a:41:ff:13:cc:1e:
c2:2c:d0:9d:cf:60:16:13:38:f3:86:38:2f:53:59:0a:1a:79:
b3:ae:0b:a9:c2:0b:a1:d6:47:ad:0b:f0:1a:c6:67:17:27:cc:
af:7b:79:84:d0:35:16:d4:0e:03:06:f1:de:0e:94:ab:22:0b:
63:39:63:41:00:ca:c5:11:ee:8b:e9:21:a9:2c:20:fe:0d:b0:
14:a8:1d:64:80:d5:8a:fe:b5:25:b6:5e:10:f4:fb:af:2d:52:
e7:1e:ee:a5:39:51:54:0f:31:11:16:63:3a:36:cc:a2:dc:ca:
09:8b:57:14:27:eb:b0:7e:50:20:8c:76:4d:95:01:f3:64:c0:
96:f8:a1:0e:be:5a:90:40:77:a6:88:0a:ad:b1:e5:9c:b6:92:
57:27:a1:ce:cb:05:a2:61:42:5e:67:8a:ba:7f:0d:93:8e:07:
1c:23:07:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 16:44:36 2025 by rpki-client