Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/1-MaedZu_m2J3pWIOqbXmZ-5pEX0.roa
File: 1-MaedZu_m2J3pWIOqbXmZ-5pEX0.roa (raw, json)
Hash identifier: dPci77SNKVZK5CdTXGzc0O0bUg3hSGh13BoBG3kcUXI=
Subject key identifier: F8:C6:9E:75:9B:BF:9B:62:77:A5:62:0E:A9:B5:E6:67:EE:69:11:7D
Certificate issuer: /CN=b919e96122f283815c1a56fecc349447a2889cd9
Certificate serial: 019420D5CEE176D04A4EA1F07CC33EE04AB8
Authority key identifier: B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/1-MaedZu_m2J3pWIOqbXmZ-5pEX0.roa
Signing time: Wed 01 Jan 2025 07:47:50 +0000
ROA not before: Wed 01 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30948
IP address blocks: 91.229.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ce:e1:76:d0:4a:4e:a1:f0:7c:c3:3e:e0:4a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b919e96122f283815c1a56fecc349447a2889cd9
Validity
Not Before: Jan 1 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8c69e759bbf9b6277a5620ea9b5e667ee69117d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:65:96:19:74:9f:3c:09:29:c4:90:ef:57:
e9:ff:fa:6e:92:ae:0b:b5:62:1b:7e:4e:46:ef:b1:
15:cd:c6:65:41:ed:69:31:65:c3:87:ca:f9:63:72:
0c:9d:76:35:b6:32:e6:c2:81:bf:2b:34:f8:85:10:
5e:dd:fd:6d:77:08:fb:f1:df:5c:b6:43:d9:21:56:
3e:12:f6:e2:5c:71:34:17:12:aa:fa:30:19:5c:b2:
27:97:9c:8f:87:c4:15:f2:d6:c1:63:05:d7:cc:da:
6a:ce:da:fe:d2:03:a6:8a:de:b5:03:55:4c:7b:f5:
51:6c:86:21:a4:e5:32:73:fb:95:3d:f1:b1:3b:07:
f7:42:75:fc:d6:f9:38:bd:dc:2f:1e:af:db:b4:2b:
71:51:3d:4c:8b:97:26:e1:d3:c5:a3:d8:40:08:b4:
f6:aa:05:55:a7:ee:52:3a:29:94:b9:c1:7c:0d:d3:
c4:43:6a:68:7b:95:ad:32:71:06:94:f1:ac:9a:f9:
11:31:f0:b3:41:67:8b:0f:7c:61:b1:44:9b:34:0f:
e0:5e:21:ea:83:44:3d:fe:a0:5e:2e:04:21:3e:4f:
9e:c2:a9:34:63:75:a2:c4:13:32:1e:09:98:af:ca:
8c:c8:f7:95:20:61:2a:27:58:73:27:23:02:a7:29:
ff:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C6:9E:75:9B:BF:9B:62:77:A5:62:0E:A9:B5:E6:67:EE:69:11:7D
X509v3 Authority Key Identifier:
keyid:B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/1-MaedZu_m2J3pWIOqbXmZ-5pEX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.7.0/24
Signature Algorithm: sha256WithRSAEncryption
32:22:f2:b2:a8:04:1c:f7:e0:9a:2a:47:82:63:bd:22:57:8d:
ef:93:c4:37:35:b5:8e:4d:08:0c:81:78:4f:5c:e7:9b:43:08:
d3:ac:f8:86:90:e3:60:e9:f7:ae:4d:24:97:73:97:01:ff:0a:
26:ad:75:0c:a2:fc:d1:2c:8c:9e:05:c2:0f:dd:d1:4c:d2:27:
1a:55:4d:76:c9:fe:a7:07:47:41:5b:08:4b:10:77:5f:fd:40:
08:87:31:8f:b5:30:41:00:32:67:3c:8f:f7:f3:a9:88:71:88:
2c:57:26:6b:bb:a7:93:48:e3:cd:37:94:b3:64:56:6a:4a:ac:
44:dc:ff:4b:bc:96:f5:b1:86:a1:3e:bf:0d:26:d4:d7:0d:3d:
dd:4d:59:1a:e3:14:f0:b3:e7:47:25:be:1e:f0:f3:68:d3:58:
b1:bc:1d:65:cb:b7:89:69:f2:b5:60:c3:2e:3e:5b:fe:ee:74:
af:09:47:2b:f4:41:bf:a6:f7:a9:be:43:6f:8e:fe:d2:f4:fd:
dc:28:b6:46:c9:2a:ab:8b:28:9b:ce:48:c3:4a:0b:ba:51:b4:
05:53:2f:92:c2:d6:f3:e9:41:9a:17:cf:f2:cb:a4:d0:15:9e:
fe:74:99:1b:68:e4:2a:0b:2b:08:d5:89:36:de:bb:a1:45:43:
14:f0:02:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:56:21 2025 by rpki-client