Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/W8m4GdEAUuyje4ea6tzLvpxGtOg.roa
File: W8m4GdEAUuyje4ea6tzLvpxGtOg.roa (raw, json)
Hash identifier: 2JXP9CUcUNLp3qYldxK3ZT/r0Zo+MqdT+NrTwUE+MCA=
Subject key identifier: 5B:C9:B8:19:D1:00:52:EC:A3:7B:87:9A:EA:DC:CB:BE:9C:46:B4:E8
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 019428278D0A16718DCE332F2F9BBA1282C5
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/W8m4GdEAUuyje4ea6tzLvpxGtOg.roa
Signing time: Thu 02 Jan 2025 17:54:28 +0000
ROA not before: Thu 02 Jan 2025 17:54:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 27447
IP address blocks: 217.111.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:8d:0a:16:71:8d:ce:33:2f:2f:9b:ba:12:82:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 17:54:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bc9b819d10052eca37b879aeadccbbe9c46b4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2d:13:78:fc:44:0f:54:1e:f1:22:7e:de:6c:
3a:e7:74:c4:f6:57:40:55:30:6a:a6:eb:76:d9:e2:
fc:7b:b7:38:e1:33:92:5b:01:4e:12:c2:8c:25:dc:
85:e8:f3:08:06:22:73:52:52:c7:2d:23:b9:65:21:
1b:73:8d:d3:2f:17:4c:06:e5:6c:b8:be:b7:26:74:
79:04:7e:ba:32:e5:d3:33:a7:32:e0:96:58:d1:90:
5f:17:5e:f1:26:e2:eb:7e:cc:73:19:1a:14:51:d6:
ec:35:d1:43:67:30:bb:ee:99:32:45:f8:74:1a:24:
fd:9c:76:70:cf:61:05:87:c2:09:5f:ca:78:9f:04:
84:40:8d:ff:59:5d:03:9b:bd:2c:af:7e:ab:69:fb:
f8:9e:c8:45:a3:59:59:e5:75:9e:21:63:27:65:d0:
b0:31:cd:d5:37:6e:ef:2c:11:6d:0f:c9:59:a6:b6:
4b:ad:cd:ce:ce:68:e0:d7:98:84:b5:a2:8b:a9:8e:
2f:b4:b0:e6:5f:ce:b1:98:70:2d:d7:d7:68:f5:2f:
e7:f9:d7:77:b1:76:a7:a5:c6:97:67:5e:ab:82:ff:
5a:45:5a:be:db:1c:38:56:ca:6c:f6:8b:2c:52:50:
a4:32:59:81:6b:fc:cc:8c:d3:93:53:5a:13:4a:db:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C9:B8:19:D1:00:52:EC:A3:7B:87:9A:EA:DC:CB:BE:9C:46:B4:E8
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/W8m4GdEAUuyje4ea6tzLvpxGtOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.111.198.0/24
Signature Algorithm: sha256WithRSAEncryption
98:77:7f:8c:14:a6:c6:77:a1:d5:db:7d:8b:cf:6f:e4:1b:29:
dc:9e:be:2d:65:1f:7b:6a:84:c7:29:44:08:e0:81:25:24:19:
af:c4:ad:b9:6f:89:1a:96:f8:b4:50:67:86:44:90:88:b7:fc:
6d:75:76:8b:73:95:4a:3f:b3:6a:6c:6a:a2:ca:61:e2:5c:21:
b5:fc:8c:c2:06:4b:7a:47:7f:df:4a:5b:62:d5:26:53:27:18:
82:b8:d1:02:b0:f6:ba:dc:fe:09:5e:d8:99:c6:fb:3c:77:3b:
7d:cf:77:25:3b:d4:4d:1f:f3:83:8e:a2:f5:3e:80:98:a3:8a:
e7:0e:92:8c:a6:12:0f:83:46:94:4c:9e:72:62:ca:0d:0d:25:
88:63:8e:1a:d8:50:71:45:7c:17:ca:8c:33:35:9d:38:62:34:
51:00:07:03:f6:6c:08:04:25:70:c1:aa:8f:71:98:c5:52:c0:
1d:cf:30:c2:cb:e5:a0:9e:1c:b6:80:4c:1b:ef:ce:d4:bf:08:
b8:06:13:97:06:16:59:08:77:9a:2e:7b:3c:29:1d:d1:21:e6:
98:13:1d:25:42:ee:4a:12:57:bb:dc:45:27:f2:22:9d:20:6e:
90:b6:61:b0:2b:1a:ce:fa:64:b5:b8:45:76:a8:f0:d8:04:3e:
4f:d7:db:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:06:54 2025 by rpki-client