Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/ApRmxFrIHgDq0uE514jDIHsfIeg.roa
File: ApRmxFrIHgDq0uE514jDIHsfIeg.roa (raw, json)
Hash identifier: wwR59HFeyAkBUrzznAPWkLGe9T2sf1JpKPVH96BNgPU=
Subject key identifier: 02:94:66:C4:5A:C8:1E:00:EA:D2:E1:39:D7:88:C3:20:7B:1F:21:E8
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 01941FFAB5066815346FD5AF9D55CB70E7C2
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/ApRmxFrIHgDq0uE514jDIHsfIeg.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213117
IP address blocks: 92.119.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b5:06:68:15:34:6f:d5:af:9d:55:cb:70:e7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=029466c45ac81e00ead2e139d788c3207b1f21e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:a2:3b:56:47:5a:fc:b9:70:46:84:83:0d:
dc:cb:6d:d3:d2:64:ef:8c:e0:24:00:2b:30:f1:de:
c2:0e:8c:b7:ad:06:9b:51:e3:4e:a5:7e:d7:22:68:
61:f6:70:db:34:b7:71:4a:29:a2:29:ab:78:00:24:
ef:08:c6:e2:12:b6:64:f2:94:17:fd:50:10:f0:41:
ab:76:74:48:f4:91:af:d9:53:79:d4:10:87:c4:03:
34:52:dd:7c:bb:81:02:13:e2:1b:71:0b:9d:9c:a2:
a8:c3:c5:c5:58:4a:68:3c:8a:fe:02:34:3e:95:79:
e5:10:bf:c4:1a:5d:fd:4c:95:0e:8c:7b:42:51:60:
dd:4f:f4:96:a0:e5:5d:ff:d1:41:24:a7:bc:f1:a8:
6e:4e:95:c2:93:5e:ad:9d:e7:4c:c3:f8:59:4e:e4:
8a:37:9f:2c:c0:43:c0:29:da:4c:48:29:cb:91:0f:
a0:19:fc:e6:41:10:f2:bb:e6:ed:3a:de:54:b8:fd:
dd:22:a4:24:22:8f:44:d6:63:ad:43:b7:a5:e7:a8:
0d:f6:4b:5c:08:fd:45:06:28:f9:83:6f:2b:f8:ad:
d2:11:41:ed:fa:91:c7:fd:d8:42:23:cb:ac:f2:c8:
6d:ec:94:f5:3e:ab:a1:3e:f2:3c:e5:74:ab:a5:b6:
b3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:94:66:C4:5A:C8:1E:00:EA:D2:E1:39:D7:88:C3:20:7B:1F:21:E8
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/ApRmxFrIHgDq0uE514jDIHsfIeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.216.0/24
Signature Algorithm: sha256WithRSAEncryption
10:21:0c:bf:35:d6:6a:9a:d8:33:31:8f:33:7f:24:fd:63:89:
90:03:e0:a5:a4:31:18:22:b6:31:a4:78:75:b4:44:c9:ea:b8:
01:fa:75:49:da:a8:28:e0:45:62:3c:1c:c2:91:6e:c1:cd:78:
75:08:4b:ac:00:1b:ca:f0:ab:1c:64:d8:c1:3e:24:2f:d3:96:
69:0b:33:50:12:df:e0:9f:a6:e4:e1:87:6e:6a:4b:ff:2c:ec:
27:79:c1:84:a5:fa:9f:2e:39:e6:93:33:d5:dc:b2:7f:5c:07:
05:da:04:6d:d8:25:13:d8:53:17:aa:d6:10:a3:10:6f:f5:53:
03:eb:53:8d:15:c2:75:4c:fe:22:b3:cc:43:9a:46:d8:b4:5c:
ea:c7:24:5a:ea:fe:4f:ab:9a:a7:2a:58:34:1c:ca:05:b9:49:
e9:73:af:44:23:d9:c7:fe:17:ef:7d:9e:05:a4:ae:80:99:ac:
f0:89:72:ba:db:9d:be:cb:0e:b4:d7:39:ab:27:d2:33:a7:93:
14:eb:e0:c5:4c:a4:76:06:11:36:7a:fc:e4:6e:e3:48:38:f7:
95:53:43:b4:70:20:f9:76:5e:8b:de:02:b5:e1:39:ad:22:ba:
30:2c:16:9f:cf:85:d3:8c:0d:aa:95:c0:7f:46:c5:f6:92:66:
65:6f:3f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:31:18 2025 by rpki-client