Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/1-ACv8TAdNs0gbWjdydU8sE6LRqI.roa
File: 1-ACv8TAdNs0gbWjdydU8sE6LRqI.roa (raw, json)
Hash identifier: sldQ+jkEkh3NjeBRI9Vm42AYV7O+YARRotzm3PLAwyo=
Subject key identifier: F8:00:AF:F1:30:1D:36:CD:20:6D:68:DD:C9:D5:3C:B0:4E:8B:46:A2
Certificate issuer: /CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Certificate serial: 01941F8C5750944D7FFFF314CAF09565EFE2
Authority key identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/1-ACv8TAdNs0gbWjdydU8sE6LRqI.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 159.60.0.0/20 maxlen: 24
159.60.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:57:50:94:4d:7f:ff:f3:14:ca:f0:95:65:ef:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f800aff1301d36cd206d68ddc9d53cb04e8b46a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bc:c9:b6:9b:ef:ee:ea:12:1c:e2:0e:61:6b:
80:77:9d:b9:c3:db:f2:35:a8:6d:eb:9f:7c:3f:59:
b3:ea:5a:10:a9:98:11:13:99:7c:52:25:75:69:a7:
c0:f4:c9:9b:71:d7:6c:93:05:5e:fd:23:70:a9:ad:
52:8a:67:47:7d:42:5d:e3:53:1a:38:5a:9b:92:55:
f4:da:f0:a4:35:58:e3:b3:46:20:19:e2:31:af:c1:
8e:29:5a:34:76:0e:6b:68:4b:9e:76:58:d6:88:e6:
b0:2d:50:93:19:5e:c4:95:9a:95:c7:65:07:6d:c1:
56:ec:e6:f9:99:45:46:b1:fe:65:94:fc:d8:dc:12:
77:ba:bd:c4:f9:eb:45:ad:18:1a:da:a8:61:33:dc:
53:4b:7d:b7:a6:8b:a8:87:e4:16:62:99:2c:40:01:
52:06:96:59:96:27:ef:f6:b5:b4:14:78:7b:28:54:
20:9c:6c:a5:53:04:8b:5e:a1:86:76:d3:60:d4:70:
d7:35:31:8d:70:ea:df:c8:2a:df:c3:78:99:38:a7:
a3:a4:91:62:8e:b8:85:c8:a1:80:3c:a6:c4:6c:86:
c5:02:6d:39:6f:7e:75:67:a1:6e:98:c9:4f:3b:ef:
95:c9:06:b9:49:81:f0:cd:50:9f:5f:53:e1:ee:49:
a6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:00:AF:F1:30:1D:36:CD:20:6D:68:DD:C9:D5:3C:B0:4E:8B:46:A2
X509v3 Authority Key Identifier:
keyid:61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/1-ACv8TAdNs0gbWjdydU8sE6LRqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.60.0.0/20
159.60.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1a:28:56:dd:af:d8:63:a7:74:cf:e7:ef:18:3f:2f:87:f8:59:
c8:aa:f4:6c:90:ed:41:01:af:da:ab:5a:0a:dd:ba:3a:30:ab:
e3:c8:65:c9:be:26:72:bc:b5:0f:3c:4b:04:79:26:b4:e6:83:
4a:77:45:80:e8:57:b5:de:0f:f0:74:d0:2e:c7:6f:1c:23:4e:
b3:f1:df:4c:ff:da:43:a3:51:de:5f:83:36:d2:05:08:b9:1c:
03:a4:9e:5b:04:6b:61:a5:89:af:97:3b:9e:e9:24:eb:57:82:
6c:9b:73:94:66:33:1a:1b:f4:5e:8a:ef:d2:ba:02:52:8c:9b:
d7:67:01:df:69:d8:f9:7b:57:93:3c:0d:37:fb:c9:c1:cc:da:
f2:fb:63:dd:11:f4:28:ad:08:55:65:0e:c7:e7:9a:76:ce:db:
06:43:44:bb:c3:86:d9:8f:9a:84:02:1c:6a:7b:9e:e8:46:f2:
6b:b0:bc:08:f6:e5:f3:85:a2:fb:d2:5e:29:4b:41:d3:c8:44:
92:89:7a:1f:a2:c1:ae:96:18:2e:01:05:3b:84:43:87:df:66:
c7:5d:80:39:a3:e2:52:ea:f3:9b:ba:3a:9b:bd:9e:1f:d6:3a:
f2:3b:60:9a:7e:6e:68:99:2d:88:8a:60:be:3e:c9:de:5b:ca:
54:a3:73:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:36:53 2025 by rpki-client