Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/97DOBs8uW4kw0nBZyxP4qvl-ggw.roa
File: 97DOBs8uW4kw0nBZyxP4qvl-ggw.roa (raw, json)
Hash identifier: ll2E+Ya4DsTx/9T8p7VxlHndTXeVIy9S+DU+06wNiYU=
Subject key identifier: F7:B0:CE:06:CF:2E:5B:89:30:D2:70:59:CB:13:F8:AA:F9:7E:82:0C
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428282915882108F7CA7BD2517A08FB5E
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/97DOBs8uW4kw0nBZyxP4qvl-ggw.roa
Signing time: Thu 02 Jan 2025 17:55:08 +0000
ROA not before: Thu 02 Jan 2025 17:55:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201326
IP address blocks: 78.83.212.0/24 maxlen: 24
78.83.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:29:15:88:21:08:f7:ca:7b:d2:51:7a:08:fb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7b0ce06cf2e5b8930d27059cb13f8aaf97e820c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:92:4d:65:1d:55:05:c1:39:39:2c:fc:c0:
1d:de:40:db:b8:10:ae:60:6b:f3:0c:cd:c0:9b:9b:
2d:1d:36:03:96:2f:49:a0:15:3a:69:78:03:12:28:
ce:4b:19:7a:eb:2e:a2:cc:57:27:c5:81:65:27:35:
71:2f:22:9d:8e:e5:65:ad:8b:09:c2:d7:b9:c5:ec:
3c:03:5e:0d:b9:c3:76:78:c3:eb:33:7e:25:f5:9e:
a9:44:c7:28:a7:ea:54:2d:9d:62:57:fd:18:b0:cd:
1a:8a:fe:4e:59:48:66:07:fa:6a:9e:bb:c5:ed:ab:
10:a7:89:1e:f2:10:3b:85:b2:12:6b:6d:2e:dd:de:
65:ff:ff:39:a6:d0:a5:f5:d6:77:80:90:b0:5d:e3:
d8:58:cf:8a:8e:ed:de:f8:ef:20:03:5f:c0:87:eb:
1f:47:45:04:f6:96:9c:e9:07:48:98:1d:ac:6f:d1:
9b:3b:72:98:73:59:ff:c1:22:f4:f2:6f:6e:b1:01:
24:36:39:90:49:46:52:ba:e2:a1:4f:89:8d:b5:72:
cb:15:4d:b1:6e:58:c9:01:de:fa:88:2b:24:fa:1e:
ff:e9:96:b7:fe:b3:3c:2f:bb:cd:33:74:54:ae:c7:
77:59:83:cb:b5:6c:c5:f6:0f:e6:f4:a7:c9:46:26:
66:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B0:CE:06:CF:2E:5B:89:30:D2:70:59:CB:13:F8:AA:F9:7E:82:0C
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/97DOBs8uW4kw0nBZyxP4qvl-ggw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.212.0/23
Signature Algorithm: sha256WithRSAEncryption
26:aa:ae:27:5d:20:c7:8c:69:d7:c3:ac:cf:08:b9:73:0a:c4:
c9:b1:21:1f:85:26:4e:75:d3:50:a0:6d:a7:e0:84:5b:d0:53:
96:44:73:d3:1b:5b:fb:c1:a9:9b:dc:ae:0a:5c:15:e9:4d:2b:
fd:fe:6d:91:70:24:fd:2c:5b:c5:e4:36:39:40:48:8b:dc:38:
41:e7:87:3f:c3:97:cb:65:e3:1a:f4:07:75:0a:2e:0a:f4:e5:
8b:87:1c:81:1d:92:43:c4:d0:eb:fa:c3:56:8f:b1:9a:8f:01:
04:92:1f:83:f6:6e:2d:fa:3b:f7:09:c9:08:9e:33:a0:de:c6:
48:a1:2b:2c:57:96:4a:49:df:97:51:b1:44:8d:b9:d5:2a:6d:
32:b3:b4:e0:62:85:5d:ae:99:db:b6:b3:a4:d2:f3:86:7c:b1:
0e:9d:e3:02:23:af:40:0f:96:1f:b0:c2:06:93:3d:58:b2:39:
f9:44:56:5a:82:ca:b2:48:06:27:88:48:2a:2f:96:64:17:5a:
fd:24:2a:ee:ba:b8:b3:8d:f2:c8:29:5b:4a:db:a0:a8:be:f2:
c7:e9:a4:06:13:48:41:66:a4:a4:11:01:74:a5:5a:38:d1:f3:
43:80:7b:49:1d:e2:41:64:69:0b:d7:94:a7:fe:fe:48:d3:3d:
a8:87:f1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:55 2025 by rpki-client