Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/m8selLLRbKezlnaS1FUfG6Kw0Ns.roa
File: m8selLLRbKezlnaS1FUfG6Kw0Ns.roa (raw, json)
Hash identifier: gDn7HNTqTqOigQSPvIZJVIcZmeh/IZoOdyWyJdwiR84=
Subject key identifier: 9B:CB:1E:94:B2:D1:6C:A7:B3:96:76:92:D4:55:1F:1B:A2:B0:D0:DB
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 019421443114EB70960E25005256BB85B7A7
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/m8selLLRbKezlnaS1FUfG6Kw0Ns.roa
Signing time: Wed 01 Jan 2025 09:48:24 +0000
ROA not before: Wed 01 Jan 2025 09:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214167
IP address blocks: 147.78.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:31:14:eb:70:96:0e:25:00:52:56:bb:85:b7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 09:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bcb1e94b2d16ca7b3967692d4551f1ba2b0d0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d6:66:65:07:ff:ed:13:93:00:df:86:d6:15:
b1:04:64:d2:e2:0f:44:13:0a:ae:45:67:86:da:14:
e7:96:fc:d5:2f:b5:ed:95:90:e9:0f:09:ea:a3:b9:
e6:6f:95:32:3c:f4:fc:22:f3:50:bd:51:34:12:89:
d5:b3:02:64:b1:38:b8:92:0e:dc:50:15:e7:4d:65:
cd:bb:de:9d:15:f1:4e:fc:fd:48:69:22:7d:92:f8:
00:2a:1a:7a:39:96:63:9c:fd:8b:0c:d9:25:99:ae:
0b:7d:dd:df:6a:20:a9:f5:d0:3e:27:6f:a6:8e:bb:
18:42:1b:ef:41:80:5c:8f:27:ed:c6:13:74:50:5e:
2b:85:96:42:83:9a:92:36:05:62:a1:c1:79:9a:01:
9b:d2:f9:bd:d5:77:d8:09:3d:cd:93:1a:2e:90:99:
db:2b:ed:86:49:19:83:19:4c:39:4f:c5:2f:a6:d3:
b0:a6:f0:c9:16:68:c2:38:c5:fc:a6:c1:0a:30:02:
70:95:87:9e:32:c4:9a:48:30:6d:87:ca:0f:b1:72:
53:f5:d3:4f:10:1b:98:2a:22:0d:52:aa:80:3f:34:
4b:22:76:70:9a:0d:71:e0:7f:d8:9e:e4:b7:82:36:
ca:49:ec:d0:51:46:f5:ad:26:52:ef:b9:7a:e6:7e:
75:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CB:1E:94:B2:D1:6C:A7:B3:96:76:92:D4:55:1F:1B:A2:B0:D0:DB
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/m8selLLRbKezlnaS1FUfG6Kw0Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.219.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6c:8b:96:29:4a:a0:38:06:82:06:0f:38:06:82:5f:3a:5b:
3a:6a:d3:55:a7:65:ea:4b:37:81:f5:d2:50:89:17:44:5e:28:
b7:d5:93:51:3a:55:64:d2:f1:cc:97:7c:1c:81:e8:5c:fc:30:
cd:e6:8a:39:8d:f4:03:88:10:70:cb:95:53:da:7a:ec:d4:68:
ba:4a:3c:a7:73:a2:17:d6:99:36:05:52:fb:42:52:be:6b:34:
1c:53:32:56:c3:b2:b1:f8:73:4a:b6:96:89:ed:c3:d4:2e:f4:
56:e4:d4:e7:a1:58:01:ba:55:7d:26:0f:26:cc:09:3a:d1:18:
2b:fc:6a:fc:82:15:98:f0:95:13:0f:d5:1c:8c:58:80:d1:47:
01:33:b8:73:97:7c:61:98:dd:52:d1:41:c3:fe:cd:72:e3:20:
33:e9:f1:9c:ce:e3:69:56:46:65:2b:a7:dc:15:38:b6:58:2b:
57:48:79:f4:1c:39:a8:f1:15:45:da:b6:cd:d0:73:63:2f:67:
a5:bf:a7:52:53:c9:d5:3d:70:18:8c:e1:bf:f6:29:db:24:8f:
d6:f4:56:83:b5:60:4f:6f:71:03:3c:31:c8:42:4a:55:79:f3:
b6:43:17:0a:2b:3f:83:43:62:a8:4c:f8:a9:c5:39:a2:99:5d:
1d:3b:7b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:01 2025 by rpki-client