Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/RTuoPdvywC_wXQboVeXZhnsBE8c.roa
File: RTuoPdvywC_wXQboVeXZhnsBE8c.roa (raw, json)
Hash identifier: eSP6Qd1xbWVau/rn0W/JU8IDdXr668CVKvYbLZet0E4=
Subject key identifier: 45:3B:A8:3D:DB:F2:C0:2F:F0:5D:06:E8:55:E5:D9:86:7B:01:13:C7
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 0196440DABF1509DFC647EFE62B44305D052
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/RTuoPdvywC_wXQboVeXZhnsBE8c.roa
Signing time: Thu 17 Apr 2025 14:01:08 +0000
ROA not before: Thu 17 Apr 2025 14:01:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198292
IP address blocks: 5.133.61.0/24 maxlen: 24
5.133.62.0/24 maxlen: 24
5.133.63.0/24 maxlen: 24
134.255.160.0/22 maxlen: 22
134.255.172.0/22 maxlen: 22
185.11.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0d:ab:f1:50:9d:fc:64:7e:fe:62:b4:43:05:d0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Apr 17 14:01:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=453ba83ddbf2c02ff05d06e855e5d9867b0113c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:97:e2:25:1e:8f:20:7d:e0:56:c2:fc:71:
0f:62:2d:ab:8a:72:b6:19:8c:52:09:07:eb:76:ce:
4e:26:59:ba:ef:25:a9:99:79:2e:8f:91:6e:ce:e5:
16:37:69:1b:c3:f9:78:b7:64:09:d6:23:07:9f:5e:
a8:23:b8:72:8b:d6:55:52:06:26:dc:4e:87:bc:4d:
a4:42:b5:5c:bf:c7:4a:c6:53:69:55:5d:d9:4c:c5:
2d:ce:b7:75:ab:48:cc:81:72:49:1f:4b:a4:77:56:
3a:60:e0:58:45:f1:d9:d1:01:76:0b:33:ab:af:30:
03:01:d7:ae:e3:35:1b:36:e9:a0:37:0f:18:59:e4:
a0:7a:30:9e:ec:a2:94:d3:ea:9f:aa:44:77:d2:24:
cc:13:e5:92:0b:a6:d2:a3:52:2e:a0:2a:7f:71:5f:
60:92:18:9b:0c:1e:1f:6b:32:bc:29:d6:0f:7a:04:
39:02:03:40:67:43:44:5d:5c:fa:2f:cb:51:99:05:
f0:a3:d5:8e:97:32:b8:9f:e7:50:ef:a8:5a:bb:21:
ee:23:a6:e0:45:37:1e:64:23:7f:c1:ab:1d:61:89:
a7:2a:6e:a3:96:60:05:40:25:97:49:a2:46:dd:28:
73:7f:3d:11:22:df:84:1e:20:3e:21:e8:20:ae:55:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3B:A8:3D:DB:F2:C0:2F:F0:5D:06:E8:55:E5:D9:86:7B:01:13:C7
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/RTuoPdvywC_wXQboVeXZhnsBE8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.61.0-5.133.63.255
134.255.160.0/22
134.255.172.0/22
185.11.224.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:1d:95:4b:a0:ac:05:59:23:3a:b7:4d:ad:03:70:c5:39:cf:
ac:4e:fa:f7:f8:27:42:c9:95:cb:75:35:b7:69:ef:33:ec:2f:
e0:da:87:43:1e:d7:a9:7f:46:ba:c5:53:0c:e6:a7:a3:21:04:
af:29:6a:42:2c:89:b9:03:38:9f:a8:41:ba:1c:c5:a8:9b:8f:
76:1a:2e:6d:a3:b5:5a:90:4a:ec:be:81:b3:61:b1:a2:58:f4:
60:b8:39:48:08:50:3c:ae:c4:e2:95:11:0d:0e:ae:60:c8:16:
77:a0:76:e9:86:df:a3:87:4e:8b:9f:03:af:d8:e3:4f:4e:ba:
ad:7e:e2:2b:cc:75:48:94:90:4e:84:f6:f7:56:54:a3:48:7d:
8a:b8:d0:00:a4:1a:3b:e1:8c:1d:52:53:fb:01:83:fd:ba:3a:
74:c3:34:83:7a:36:0c:6e:57:ca:77:63:d7:aa:c0:b1:b4:1d:
d8:9c:aa:ed:b3:b0:a5:f4:da:c0:d1:38:21:86:b5:fa:00:06:
12:d1:60:88:98:27:4e:43:06:56:a8:ff:16:79:53:1c:bc:84:
90:2d:96:72:25:f5:39:00:d0:b0:db:0e:2e:a5:70:47:7e:e1:
f3:34:7a:41:e7:40:86:ba:f9:47:1c:63:f0:b6:95:ad:00:d8:
33:dd:68:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:06:26 2025 by rpki-client