Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/CsTskpGu2067EbH05wfUIZUPjxk.roa
File: CsTskpGu2067EbH05wfUIZUPjxk.roa (raw, json)
Hash identifier: CGKvFO8hPB5WwPOizq8WbZfwBPb68T3rzaJWX9q+khg=
Subject key identifier: 0A:C4:EC:92:91:AE:DB:4E:BB:11:B1:F4:E7:07:D4:21:95:0F:8F:19
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 01956CE14E17040B12F8A3BFBDF36421D2F6
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/CsTskpGu2067EbH05wfUIZUPjxk.roa
Signing time: Thu 06 Mar 2025 19:14:19 +0000
ROA not before: Thu 06 Mar 2025 19:14:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203551
IP address blocks: 217.11.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6c:e1:4e:17:04:0b:12:f8:a3:bf:bd:f3:64:21:d2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Mar 6 19:14:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ac4ec9291aedb4ebb11b1f4e707d421950f8f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fb:88:7a:94:89:2e:86:1e:5c:72:8c:ee:a1:
07:97:d8:18:cb:57:d9:7c:19:9f:3d:93:2c:bb:16:
fe:22:29:de:84:41:f8:e9:47:db:f2:03:5c:2f:59:
15:5b:0b:b5:93:71:1b:55:e1:3a:35:a2:b9:27:87:
09:6e:31:82:b8:94:a4:ad:12:c6:86:e1:e7:a9:8b:
7c:5b:ff:27:db:c8:ae:84:bc:04:2a:3a:8e:b4:49:
2b:17:e6:48:2c:7b:95:0a:f4:a8:13:2d:c1:8b:a1:
2c:72:e4:f4:e6:f7:4a:c1:e1:12:a7:70:57:5b:07:
00:46:52:a2:3a:14:08:39:22:51:a6:ce:9a:3d:9a:
67:b6:16:0f:e7:ff:f3:c2:c5:b3:cf:6b:55:5e:ff:
0c:86:b3:08:d5:2b:f3:7a:d5:b7:9e:96:fe:eb:b1:
09:88:88:24:5e:43:be:bf:35:24:cd:d0:a3:5c:5f:
ab:a8:e2:5a:12:16:e0:c8:c8:d9:2d:81:9e:cf:ba:
7a:54:9c:ef:ce:db:f4:b5:93:45:ec:c3:b4:85:b7:
e6:97:25:37:eb:95:38:13:85:93:0e:de:de:92:01:
19:b2:67:64:97:50:51:b1:9a:fa:6a:6e:e9:52:c1:
4b:da:c3:51:78:3c:63:03:ae:0d:f9:3e:14:77:a5:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C4:EC:92:91:AE:DB:4E:BB:11:B1:F4:E7:07:D4:21:95:0F:8F:19
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/CsTskpGu2067EbH05wfUIZUPjxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.11.142.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a0:9e:31:dc:6b:23:ac:ff:02:52:e5:c5:58:50:fd:19:04:
ce:cd:6f:16:3b:e3:d7:0a:ef:96:b9:a2:49:b0:0c:29:2d:c5:
96:68:eb:43:ed:5a:e1:eb:2d:f2:88:2d:32:d7:10:3c:53:23:
e3:0f:fd:ca:cb:cf:3b:67:c0:ed:b3:f1:56:ab:48:9f:4f:28:
44:ec:fb:5e:ca:56:8b:4b:fa:7c:2d:13:50:f5:ad:3f:cf:df:
6d:63:ac:5e:48:4f:a1:b2:e1:74:be:8e:99:88:25:41:10:41:
42:da:07:08:19:ec:04:37:97:84:48:17:0e:c6:b7:da:15:89:
84:88:45:ad:7a:a1:6d:68:bc:4a:ec:97:62:c5:8c:00:f6:fb:
e4:38:3c:17:f5:67:d2:8a:07:9f:cb:14:d1:3e:8a:15:cb:e9:
4e:9d:0d:ae:df:2c:74:c7:45:be:ad:d9:fd:d8:92:12:72:a8:
37:90:c7:9e:21:84:d8:36:6a:67:37:db:59:1a:e8:96:f4:50:
3d:f6:60:f2:25:b7:8c:b5:83:60:14:58:62:c6:94:9f:70:fb:
bb:2e:5c:64:a9:14:d6:41:aa:af:fc:a7:30:1b:60:10:c0:cd:
5f:56:11:7c:a4:80:06:b1:4a:32:4c:33:d8:3e:c6:09:03:e3:
96:e6:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:56:44 2025 by rpki-client