Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa
File: sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa (raw, json)
Hash identifier: GUZUDJYWdLrHKEBuVtLpBU6JuOIR3vdhCyBhBteo5W8=
Subject key identifier: B1:3F:97:AA:6B:1A:2A:B9:F0:29:8F:51:6B:DC:33:BE:89:3F:90:D1
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01941FFA4E5118E3AB879C6D6C063EAACAC7
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61054
IP address blocks: 217.112.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4e:51:18:e3:ab:87:9c:6d:6c:06:3e:aa:ca:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b13f97aa6b1a2ab9f0298f516bdc33be893f90d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:ba:34:eb:d3:40:f8:bf:27:e0:7f:6e:a0:
4f:9b:dd:ea:17:d3:6e:23:05:08:41:f2:71:c1:73:
3e:c3:35:3e:34:65:71:35:71:dc:69:87:98:7f:fe:
f2:c5:7d:19:3b:16:28:53:a6:7f:09:f7:99:14:31:
44:cf:de:9b:ab:f5:de:a5:e9:0d:0e:d5:e7:df:31:
83:43:e1:85:e1:b2:50:f6:b3:a0:a2:a9:65:fe:79:
1c:09:f2:9e:65:4e:28:03:c6:f6:fe:56:dc:8c:8f:
ab:4b:54:53:12:48:fe:e3:c0:82:e0:a5:a9:d4:25:
f9:35:e9:27:01:21:dd:a4:8e:c2:0f:29:0d:ec:f4:
2b:8c:58:0e:43:09:17:1e:34:50:07:73:8b:cc:a7:
2f:d3:e1:e6:84:e2:8b:33:56:7f:d6:92:50:a0:5c:
d4:ce:96:bc:96:a2:06:8c:9a:61:5a:bc:68:ab:94:
97:6f:fc:34:12:b9:f0:11:d3:cf:c1:9f:86:36:39:
b4:1c:47:4d:fd:ac:f8:6a:04:1a:57:33:b9:05:22:
3a:37:14:61:1c:fc:af:0f:cc:29:a9:c3:7b:19:45:
08:9e:db:d3:c2:46:2e:c7:70:c0:24:9c:d5:a6:8b:
95:a0:fa:bf:11:ff:07:a5:12:c2:02:c4:66:2c:4f:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3F:97:AA:6B:1A:2A:B9:F0:29:8F:51:6B:DC:33:BE:89:3F:90:D1
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.112.150.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c8:22:3f:86:db:2e:5b:2a:c0:71:24:aa:5d:1b:b8:b8:0e:
3b:54:bd:d6:4a:46:86:05:b6:d8:19:be:59:ca:cc:1f:47:ba:
82:4e:5e:f7:76:f5:6a:a6:b8:17:0c:a1:b9:2e:e3:a9:e7:3c:
dd:de:fe:e9:3b:2a:9d:75:31:b2:0c:73:87:f8:ed:d2:fc:7f:
94:28:f6:49:29:f6:d5:be:71:f8:1c:36:18:1d:9d:3a:90:98:
6c:4b:d9:35:92:e4:33:26:ae:4e:bd:1e:0d:8a:93:a2:3f:67:
0e:e5:8c:ad:24:89:26:f8:95:e2:ca:c9:ae:6a:74:b8:ee:79:
f6:4d:b3:1e:6b:75:08:8b:10:9a:8b:bd:81:5d:da:84:a2:ed:
98:0b:64:9b:cc:85:d3:58:5c:b3:76:8d:51:d3:74:ee:9a:81:
8c:87:9d:3d:15:39:be:f8:82:36:e5:ee:85:11:c5:75:11:96:
b1:52:0d:4c:a5:f8:90:48:0e:6f:66:f1:14:e1:8f:b2:1d:7e:
9f:46:d4:d0:5e:38:99:e6:1c:2f:50:17:00:ee:47:55:a3:14:
14:1f:ef:1d:39:2a:e9:78:b1:33:5d:ed:00:f2:5d:7d:df:10:
32:0f:fb:79:e9:a7:67:93:57:bd:32:d3:94:97:b3:d5:1b:12:
91:f9:05:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:56:45 2025 by rpki-client