Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/ASgPIcJDfuPjOm8cjrU_yX9d6LI.roa
File: ASgPIcJDfuPjOm8cjrU_yX9d6LI.roa (raw, json)
Hash identifier: FoRf6zKDxzFzqNvRaEaSA99AYo7HeXRCWwfxlBkAE5Q=
Subject key identifier: 01:28:0F:21:C2:43:7E:E3:E3:3A:6F:1C:8E:B5:3F:C9:7F:5D:E8:B2
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 019427B54C74C191CF204C40002F4C1BACD2
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/ASgPIcJDfuPjOm8cjrU_yX9d6LI.roa
Signing time: Thu 02 Jan 2025 15:49:40 +0000
ROA not before: Thu 02 Jan 2025 15:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29404
IP address blocks: 217.73.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:4c:74:c1:91:cf:20:4c:40:00:2f:4c:1b:ac:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Jan 2 15:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01280f21c2437ee3e33a6f1c8eb53fc97f5de8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:38:d6:27:14:92:bd:8b:1d:16:51:6d:a8:
cf:fa:47:82:63:b2:5a:ad:08:b4:3b:b5:f2:50:25:
72:19:ac:40:3a:5a:46:68:fd:24:aa:14:d6:81:ac:
4f:bc:c9:7a:11:f4:71:3a:d2:3e:71:97:c2:9c:4f:
c6:79:44:13:62:6b:0c:a9:7e:28:9f:ed:c5:44:31:
4d:23:e4:ff:bc:fa:64:2f:3f:a0:63:14:6f:e7:ab:
07:df:85:ad:f3:3d:61:aa:24:6c:79:30:f6:9f:ee:
de:69:3a:e5:3a:2f:f7:29:15:64:e7:0f:a6:2c:7d:
41:14:77:61:2d:54:a0:87:40:c8:36:5f:ba:f6:62:
35:fb:64:d4:d3:07:04:cf:59:92:f1:56:5a:6b:cb:
11:8f:76:75:d3:e6:45:95:0a:1a:6b:ec:c5:26:ab:
eb:98:ce:1e:a9:6d:d9:4a:37:8e:89:64:7a:5c:9d:
c5:63:f0:f3:d0:40:ee:93:74:88:ce:69:72:0a:5e:
86:df:24:5c:44:4a:2b:02:14:0a:58:7e:1b:89:b9:
3e:8c:4b:ca:a7:c9:48:63:a1:52:74:9f:9e:2d:20:
f8:9b:62:fc:5d:63:bd:86:d8:24:44:93:a7:ce:be:
13:d4:87:fa:15:6b:9b:a7:db:b9:f3:9b:6a:fb:46:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:28:0F:21:C2:43:7E:E3:E3:3A:6F:1C:8E:B5:3F:C9:7F:5D:E8:B2
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/ASgPIcJDfuPjOm8cjrU_yX9d6LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.73.148.0/22
Signature Algorithm: sha256WithRSAEncryption
90:5b:91:00:8a:4d:3a:00:95:ab:b7:cc:4f:34:a0:6f:f2:e3:
10:1b:ea:e5:af:60:24:18:7d:4b:5e:78:76:02:30:9f:d2:6b:
70:3d:ca:d5:cf:99:b0:ab:27:0c:14:ff:3b:4d:c3:2c:2a:f7:
11:2b:70:ab:37:87:b3:1e:13:93:6d:f3:2d:80:74:18:63:51:
a3:e1:47:07:17:71:cc:38:95:62:a5:d6:25:5c:f3:6e:f5:ec:
9a:60:e6:a9:b7:09:c2:73:8a:5b:f2:cc:1f:55:aa:14:d2:cf:
98:13:53:d6:d8:c8:37:4f:26:b1:29:da:9b:fc:da:29:81:a9:
aa:3e:55:5a:b6:76:31:c1:25:b0:d4:aa:37:5b:44:f9:65:b8:
9d:05:57:e1:ee:b4:d2:90:ee:b2:c7:0e:ff:c7:f0:c3:b8:07:
22:cd:7f:6f:a6:75:1d:ff:ac:40:a6:38:5c:a4:7a:94:cc:9c:
80:ea:84:46:45:a6:b7:56:c6:bf:3c:da:bd:7c:4b:fd:a9:ae:
b8:9e:31:e3:41:41:5c:e7:f2:e0:ef:89:37:13:9c:7a:9d:05:
36:de:00:2c:1c:4f:91:bd:92:ea:70:1b:f2:9b:aa:24:3d:80:
42:90:4f:9b:53:0a:2d:ee:1c:9b:0f:66:a9:fb:d3:ec:84:5c:
3c:de:53:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:42 2025 by rpki-client