Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/27Cs0pubrn81kLmBaoLWN3thyf4.roa
File: 27Cs0pubrn81kLmBaoLWN3thyf4.roa (raw, json)
Hash identifier: 7t0Hojutu2UNQRozM1OVOvw+TbqIyAfFK48PYrTrfOM=
Subject key identifier: DB:B0:AC:D2:9B:9B:AE:7F:35:90:B9:81:6A:82:D6:37:7B:61:C9:FE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824D1985169E92BDC646C3CEECB0A84
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/27Cs0pubrn81kLmBaoLWN3thyf4.roa
Signing time: Thu 02 Jan 2025 17:51:29 +0000
ROA not before: Thu 02 Jan 2025 17:51:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215825
IP address blocks: 82.115.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:d1:98:51:69:e9:2b:dc:64:6c:3c:ee:cb:0a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbb0acd29b9bae7f3590b9816a82d6377b61c9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:8b:f2:08:c7:88:6f:eb:f3:0f:88:8c:87:
75:01:52:84:0b:1b:87:44:bf:dd:54:4b:a8:b1:b6:
68:05:9d:11:07:04:c4:f5:33:64:36:15:7b:99:4f:
d2:09:fb:99:a4:d5:a8:ff:a2:2a:a4:b7:2d:75:d9:
47:b6:6a:2a:8a:ec:63:80:3b:49:28:c8:b6:56:0e:
bb:6a:0d:73:6c:48:53:2e:f3:7b:38:8d:5e:48:18:
a4:67:90:49:e4:f2:51:ac:45:9c:d2:26:a8:04:ef:
5c:22:49:09:87:3d:76:67:82:33:f3:88:fd:e5:e8:
47:22:e0:49:48:d2:1c:3d:76:92:06:f5:64:dd:24:
48:6c:e7:e8:c1:4f:a1:e0:22:cd:c5:ab:36:db:83:
f6:9c:47:14:1c:fb:4a:1d:b1:3c:f4:46:3b:6f:dc:
95:f3:df:10:69:58:19:a7:9c:30:88:db:7d:4b:d9:
f3:dd:14:88:66:2d:0b:44:1d:40:4f:fd:b3:1b:3f:
4f:a6:21:be:93:54:9e:22:c3:b4:32:ea:3d:fc:ac:
a6:21:52:4d:99:8f:67:bb:05:28:9e:7e:15:dd:fd:
84:2c:4a:fc:6e:d5:72:5c:57:32:84:d3:81:d0:0f:
11:b8:e3:0a:19:38:d7:e2:51:78:7f:6e:0b:2f:88:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B0:AC:D2:9B:9B:AE:7F:35:90:B9:81:6A:82:D6:37:7B:61:C9:FE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/27Cs0pubrn81kLmBaoLWN3thyf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.209.0/24
Signature Algorithm: sha256WithRSAEncryption
18:eb:11:d3:07:f0:71:54:f4:d1:af:9a:22:b1:db:cc:d5:24:
4e:5e:f4:c4:0a:64:42:e7:44:85:68:25:b6:e0:5c:41:89:cd:
cc:0b:8d:53:0a:2d:f9:c7:7c:88:7c:a4:41:2d:3f:38:8a:95:
db:e0:b5:7d:2b:83:a7:4f:9c:ce:97:5b:a7:61:be:c7:e5:bb:
27:4e:eb:a3:71:9e:59:34:d3:7d:9d:d6:87:78:89:eb:fb:ec:
69:a0:06:e1:5a:3b:e5:62:53:58:28:0f:6c:41:32:ea:07:3a:
68:25:ab:11:58:84:f5:a2:9f:46:0a:25:15:43:dc:6c:90:3f:
27:25:93:8f:f2:da:b6:a7:99:35:c9:00:fd:65:5e:8d:90:34:
80:c8:68:76:f8:51:c1:2e:2a:5a:42:0d:37:99:73:e5:df:bc:
28:41:0c:86:17:df:f2:8f:f3:b3:83:29:d3:63:58:d1:73:99:
a7:63:9d:dd:ba:be:32:de:b2:fa:ba:ad:23:e1:f6:26:53:52:
3e:d0:8f:bd:02:7c:d2:09:cc:13:2f:b1:02:37:54:d5:f9:95:
ca:1b:9f:e7:63:64:a1:5b:2d:06:ec:5c:79:7d:77:36:dc:d9:
f2:70:ef:2d:62:0c:54:63:c3:0d:a0:da:3a:3e:84:62:05:cd:
a6:23:6b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:29 2025 by rpki-client