Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/1r-YWbxqyiaEeQQe7XhCESQq4-A.roa
File: 1r-YWbxqyiaEeQQe7XhCESQq4-A.roa (raw, json)
Hash identifier: whgT3ej9YeVcd8f315sOoiAQXSfv+O+qM97fjItvC5w=
Subject key identifier: D6:BF:98:59:BC:6A:CA:26:84:79:04:1E:ED:78:42:11:24:2A:E3:E0
Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial: 0194214419110D64B604A07B1E651F14539D
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/1r-YWbxqyiaEeQQe7XhCESQq4-A.roa
Signing time: Wed 01 Jan 2025 09:48:18 +0000
ROA not before: Wed 01 Jan 2025 09:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12578
IP address blocks: 195.35.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:19:11:0d:64:b6:04:a0:7b:1e:65:1f:14:53:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6bf9859bc6aca268479041eed784211242ae3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:ee:03:9e:52:b7:4d:3a:c5:a9:5f:1d:17:
f5:51:55:05:21:e5:46:97:22:2e:e8:64:10:d2:3a:
58:46:bb:24:e0:f1:3c:93:cf:39:4a:5d:51:8f:99:
b5:e7:ac:6f:3f:dd:16:68:6f:9b:50:e2:3a:e2:06:
45:71:64:05:89:3a:a3:7b:e9:f3:fa:b1:cc:b5:1b:
c3:b7:79:3d:d0:dc:1c:58:77:77:0c:9b:44:c2:8d:
3d:2f:15:a0:ed:a3:cd:f9:d9:f1:8c:ca:0c:0b:7c:
f4:08:9e:a5:b3:36:12:61:42:fa:ce:1a:6e:c1:4a:
3d:ce:9b:4e:92:05:9e:8f:dc:e0:1c:80:69:24:82:
b0:10:21:64:78:cd:9e:c8:ad:f4:5e:3f:8f:5b:94:
05:4e:65:d4:ed:cb:7a:9c:c3:52:c9:a7:8f:e9:cb:
45:e7:42:76:ab:97:25:94:cd:88:76:b2:bc:3a:e9:
3f:58:25:03:f4:aa:9f:c5:12:7e:a3:19:2b:90:8a:
0a:3d:6f:4d:81:5b:36:ae:03:53:13:cb:4e:b8:e0:
07:3e:56:e8:52:2e:b0:9c:40:cd:05:aa:cb:8e:8c:
6e:e7:e8:4b:af:83:81:4b:e5:1b:a9:b6:96:1c:a3:
7e:56:16:e9:e4:73:9b:3c:ad:79:4a:5b:28:1d:a2:
9b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BF:98:59:BC:6A:CA:26:84:79:04:1E:ED:78:42:11:24:2A:E3:E0
X509v3 Authority Key Identifier:
keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/1r-YWbxqyiaEeQQe7XhCESQq4-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.107.0/24
Signature Algorithm: sha256WithRSAEncryption
51:14:ef:e6:83:b5:1e:2b:8e:ee:ba:db:33:bc:c8:a7:f0:4a:
8e:97:cf:4e:6b:f1:f6:6e:ba:b5:b1:bf:93:96:82:e1:fc:cb:
b6:8f:c7:db:be:a6:cf:d4:91:1d:36:27:8d:26:72:5a:73:9b:
f6:e0:1f:29:0c:4a:bf:d5:bf:9a:13:a7:39:c7:84:8e:97:b6:
8d:de:f7:e3:5d:29:29:eb:1d:2d:2d:47:e2:d1:3b:f5:a9:69:
86:35:a9:fb:87:d7:f8:a5:aa:47:65:cf:78:b3:63:1e:64:f6:
64:fb:26:89:13:3f:b0:17:b3:03:4d:41:db:cc:59:c4:6f:4b:
2d:0f:88:e7:cd:d2:fb:d9:4e:f6:e0:d3:a0:27:a2:5c:41:c0:
b5:85:2a:b7:88:e9:4f:ef:db:c7:6a:d6:34:30:30:34:c4:6d:
2d:ef:81:c8:1e:61:fc:dc:77:c7:37:25:bd:15:62:34:d6:ba:
81:d7:63:9c:5a:8f:42:74:8d:49:fa:9f:e5:c1:ff:f8:27:46:
3f:39:ae:0a:35:0a:5f:e1:66:da:39:49:73:83:59:a8:60:25:
97:75:01:2e:dd:fd:16:89:24:9a:d8:46:7a:88:07:5d:e9:5b:
78:6f:75:1b:f8:f1:f4:ee:b3:fb:89:6c:64:a4:cb:b3:6c:03:
5c:67:60:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:37 2025 by rpki-client