Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/o8N6mibH7HzRPfXSA-XguojRJmE.roa
File: o8N6mibH7HzRPfXSA-XguojRJmE.roa (raw, json)
Hash identifier: S9PmnI9ypR0hM3nIMCtKN9FHZAy4nsAZ63XidEySrCc=
Subject key identifier: A3:C3:7A:9A:26:C7:EC:7C:D1:3D:F5:D2:03:E5:E0:BA:88:D1:26:61
Certificate issuer: /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial: 0194244487F05972EA11B69E640FCC2EC83C
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/o8N6mibH7HzRPfXSA-XguojRJmE.roa
Signing time: Wed 01 Jan 2025 23:47:38 +0000
ROA not before: Wed 01 Jan 2025 23:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61141
IP address blocks: 217.29.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:87:f0:59:72:ea:11:b6:9e:64:0f:cc:2e:c8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Validity
Not Before: Jan 1 23:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3c37a9a26c7ec7cd13df5d203e5e0ba88d12661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:0a:ba:e5:21:f5:b3:4d:bc:1a:db:e2:55:
2c:9d:21:40:6d:7a:24:1c:55:db:43:a5:45:35:5c:
d2:d6:56:f5:2f:7d:f4:5e:dc:65:0d:ac:81:32:9f:
55:b6:dd:81:74:15:1f:58:3c:a9:50:92:da:ea:9a:
2b:a1:a7:c0:bc:ff:96:23:08:55:e4:16:fb:bf:ff:
95:4e:db:ab:5e:40:f5:89:3b:f0:61:e2:3c:fd:33:
e7:f2:79:e3:54:6c:87:ef:b3:92:fe:57:8f:da:62:
35:51:86:6b:da:61:bd:ef:d0:fb:f0:59:84:3c:a0:
cd:8e:a5:3a:1c:ef:09:0d:0e:a9:75:26:c9:25:0e:
cf:67:d9:0d:bb:c4:c0:2f:7c:8b:56:90:24:e3:c9:
92:6a:f3:e2:d7:1a:29:28:05:c9:51:a2:72:ea:80:
57:e3:0c:31:47:45:52:54:78:44:26:ce:43:e0:32:
16:e3:ba:92:bf:ed:a6:6c:31:66:7f:1e:ca:be:f0:
99:ea:20:a2:de:64:02:c1:1f:46:f3:8c:cb:48:b9:
be:69:7e:9a:f3:ff:c5:24:8e:28:c6:d1:4c:a9:2a:
f4:15:25:32:03:bd:38:ef:85:16:8c:e4:ca:a2:28:
da:72:6f:e8:5a:b8:be:34:1d:f1:1e:07:97:5a:2f:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C3:7A:9A:26:C7:EC:7C:D1:3D:F5:D2:03:E5:E0:BA:88:D1:26:61
X509v3 Authority Key Identifier:
keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/o8N6mibH7HzRPfXSA-XguojRJmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.29.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:58:b5:30:1d:78:47:eb:a3:52:67:8f:2b:4b:6f:57:2e:d7:
ef:61:89:46:b8:5e:c7:5e:8a:de:e1:b5:4c:7d:b3:35:e5:a8:
fd:eb:a5:57:f5:4c:2a:63:8f:3c:01:07:0b:3f:60:f0:4e:f3:
10:49:b7:16:01:fa:d4:a5:e4:a3:0a:af:d0:81:72:f4:30:31:
db:e1:d4:ef:e5:ca:af:f1:7d:b6:84:9a:e7:34:d1:85:fa:6d:
51:63:2b:dd:ba:a5:0d:c0:32:1f:7e:94:7b:aa:ea:f7:52:f1:
7c:7b:8e:ee:08:e7:79:8d:24:2c:34:6e:c3:9f:05:45:d8:fe:
de:07:8d:59:29:79:ab:22:de:ef:13:d7:86:f6:5a:95:ab:c3:
a0:b8:97:44:2e:3e:4d:a9:b4:33:3f:5f:b1:b1:e0:7e:de:13:
0e:15:e6:2e:02:1d:f5:16:4f:3c:06:59:4a:96:f0:ba:5c:60:
c9:f1:91:17:3c:22:4a:fb:ca:f2:75:54:e8:ca:09:5d:0e:15:
6e:1f:f0:0c:2a:ff:f9:2e:de:ff:c4:6c:ff:5b:7e:89:ce:d7:
43:f1:22:b1:1e:db:35:df:cb:1c:a8:93:69:47:6a:5c:64:34:
a2:4f:9b:f5:61:8f:3e:f4:b8:c8:5b:62:f6:26:0d:63:8f:26:
00:0d:bf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:43:40 2025 by rpki-client