Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/odf_RloZld2f_C46K0BxlJYlBTY.roa
File: odf_RloZld2f_C46K0BxlJYlBTY.roa (raw, json)
Hash identifier: EYo1H2ZwWe4UAQYrwYPYwqTrp1mcr6TNxmVLEo1rbg0=
Subject key identifier: A1:D7:FF:46:5A:19:95:DD:9F:FC:2E:3A:2B:40:71:94:96:25:05:36
Certificate issuer: /CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Certificate serial: 01941FFA62723BDC9382746377DFBC251B0E
Authority key identifier: 43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/odf_RloZld2f_C46K0BxlJYlBTY.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47417
IP address blocks: 77.73.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:62:72:3b:dc:93:82:74:63:77:df:bc:25:1b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1d7ff465a1995dd9ffc2e3a2b40719496250536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:63:df:da:38:91:5d:85:53:43:ea:7d:d5:
b3:e9:26:ae:63:25:db:21:eb:78:78:14:2b:88:10:
8e:aa:74:e6:c0:0a:e4:a2:cd:95:0d:62:8b:eb:02:
91:82:2e:b6:13:19:bc:58:95:92:6a:3e:d1:8d:fa:
e0:c9:ef:69:01:ea:fb:43:47:a6:21:89:28:71:68:
3b:a1:b5:4e:d2:d8:39:21:47:14:d2:13:85:3b:6d:
84:fb:f2:53:bf:e4:f1:1d:f5:ca:99:f1:ea:96:56:
ee:c5:6a:a5:58:bc:0d:53:93:8a:2d:e2:5f:44:56:
dc:e5:71:75:1d:f2:21:8c:e0:80:14:56:8f:60:bf:
0a:36:f7:4a:05:44:de:88:05:65:a8:c5:19:ca:9f:
d4:d1:4c:d3:fa:98:e9:83:ef:4e:98:ee:e7:a0:d3:
a5:55:9f:57:bb:12:57:91:f0:ba:78:cf:b6:57:02:
9b:82:bb:73:50:ee:86:5c:81:dc:a6:f8:e0:00:c3:
44:59:4d:38:f1:e6:9e:ad:22:2a:ab:70:25:a0:31:
64:ab:7a:fd:5d:95:07:82:7d:ab:3a:e4:93:c5:2d:
9f:43:3b:8e:e6:09:03:f4:d2:c2:7d:1c:69:d2:db:
c1:ca:5b:e0:62:09:7e:40:ad:de:1c:95:78:1f:6c:
31:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D7:FF:46:5A:19:95:DD:9F:FC:2E:3A:2B:40:71:94:96:25:05:36
X509v3 Authority Key Identifier:
keyid:43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/odf_RloZld2f_C46K0BxlJYlBTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.208.0/21
Signature Algorithm: sha256WithRSAEncryption
93:7b:92:5e:47:05:07:e3:8b:0e:de:7c:41:f9:de:08:65:04:
16:cf:4b:5f:47:e7:53:2e:5b:e5:10:fb:d4:5d:d7:7d:d6:46:
e2:22:b1:ba:df:3f:75:1b:7f:d0:17:87:50:05:0b:e1:93:0c:
2f:cf:40:c3:c6:4a:bd:53:c5:5f:5e:e1:e5:4b:fe:1c:15:55:
a1:c0:c6:d5:4a:87:b3:de:07:71:7f:7c:7d:f0:74:ee:72:4f:
c7:62:86:e0:20:ef:00:83:04:1b:e0:b7:6f:78:f5:ee:66:e8:
1f:45:6e:52:f6:da:f4:4e:41:19:55:dd:49:ae:b4:cd:2c:60:
05:e9:5b:5e:c1:4a:74:b0:d0:3c:c4:e6:b2:6e:3a:49:24:1a:
94:46:7a:67:d3:48:7d:2e:e6:4e:b8:3d:3a:a8:82:d1:88:a1:
45:29:7c:0a:f9:0e:24:7f:ee:9f:5f:93:93:60:1f:9c:a4:3b:
1f:2c:88:a5:af:89:e5:86:29:9e:00:cc:70:b2:35:4b:25:8c:
ef:ce:2b:10:df:c9:8d:3b:6e:48:7c:a9:ab:db:91:02:f0:65:
21:ca:d6:9e:07:b1:d0:8f:4a:8c:8a:2d:65:39:e7:a2:79:5e:
dd:36:fa:42:47:25:d3:bd:4f:3f:ea:e9:b0:4d:e7:8f:48:6a:
23:cd:29:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:18 2025 by rpki-client