Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/5DRGkm67v3ztNtkmGE9CjHe6qkM.roa
File: 5DRGkm67v3ztNtkmGE9CjHe6qkM.roa (raw, json)
Hash identifier: c8V8b8nhOphSZmzRUJQWFcuzVB0h+VPYqSuF8VwM49s=
Subject key identifier: E4:34:46:92:6E:BB:BF:7C:ED:36:D9:26:18:4F:42:8C:77:BA:AA:43
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0194266B8BF2C3C64513E6ED380A762326B9
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/5DRGkm67v3ztNtkmGE9CjHe6qkM.roa
Signing time: Thu 02 Jan 2025 09:49:29 +0000
ROA not before: Thu 02 Jan 2025 09:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 78.142.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8b:f2:c3:c6:45:13:e6:ed:38:0a:76:23:26:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 2 09:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e43446926ebbbf7ced36d926184f428c77baaa43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2c:30:f1:a8:1b:01:da:c0:57:45:dd:9a:ad:
2f:88:7c:b0:f3:4f:0c:5c:55:9b:38:6f:1d:90:f7:
bd:e8:db:a7:15:a8:5d:eb:1a:e4:9f:2e:c3:76:93:
27:d9:57:7d:bf:1e:2f:95:30:7c:7e:af:6c:c0:e9:
6e:ea:3d:4d:48:c8:e5:8d:e2:03:af:1c:b6:08:d6:
78:b9:9c:33:91:bc:3c:10:6e:7c:f0:b0:33:4b:e5:
b3:dd:2a:b3:24:ce:c2:bf:c1:04:a1:6e:20:b5:80:
e1:4b:5a:fd:0f:73:e3:dc:c3:9b:94:e1:bc:7d:04:
fc:06:05:ca:89:4f:fa:1e:90:46:24:8c:19:85:4b:
78:2f:5f:4c:97:dd:a6:14:31:2c:10:09:38:70:1c:
81:5f:58:18:f4:3e:f2:dd:f0:f1:7e:38:e1:ce:32:
44:99:40:19:f9:ad:28:19:e3:04:51:98:b2:e0:1d:
02:6a:df:4b:6a:de:f5:63:9d:a8:22:28:55:82:a1:
b2:1f:8d:17:61:49:e6:bd:20:31:e3:59:bf:be:60:
79:b2:95:9b:0a:4f:6a:42:16:75:80:50:01:1f:8c:
36:5d:f5:1b:dd:aa:f7:a5:58:a5:31:6e:13:69:69:
79:a3:fd:fd:c3:5f:71:bb:64:c5:79:4d:d1:09:b1:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:34:46:92:6E:BB:BF:7C:ED:36:D9:26:18:4F:42:8C:77:BA:AA:43
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/5DRGkm67v3ztNtkmGE9CjHe6qkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.216.0/24
Signature Algorithm: sha256WithRSAEncryption
69:32:f9:0c:b9:cb:92:e0:6e:ed:67:3d:28:20:49:80:de:dc:
81:65:46:c8:eb:d1:dd:c4:7c:ea:f5:d6:b9:a5:b4:cf:52:f4:
b2:b1:b6:ff:a9:c2:49:09:81:af:8a:86:49:ea:ca:27:6e:e8:
27:75:d2:a4:04:d8:74:6f:2d:eb:a7:67:56:ad:ae:4b:cf:be:
de:06:a6:cc:64:1a:fb:4a:b4:01:b4:0e:b5:24:d6:cf:60:09:
6e:56:d0:1d:81:0e:10:3b:64:07:7a:f0:d1:e5:07:0f:ff:7e:
bb:34:96:ba:ab:bc:94:50:d2:28:1c:2e:01:5c:97:da:56:e6:
40:98:47:d9:bd:14:8c:ba:a8:e4:fb:ae:af:eb:10:b8:1f:7a:
f0:37:c8:57:86:cd:bc:f2:3d:cf:58:db:63:74:77:37:c1:26:
b3:7a:7c:27:49:62:94:e7:6b:a1:7a:26:18:40:aa:01:66:4b:
71:7d:da:03:88:24:58:f6:41:a6:9d:f0:4a:0b:55:b8:3d:a1:
df:2e:00:5c:1e:7e:04:c7:7f:0a:ea:b8:a5:8f:e1:a1:bb:f8:
73:6b:b8:f3:2e:c1:43:1c:44:c7:ff:1d:0a:c2:97:23:9f:c6:
4a:1d:49:e8:d2:12:cb:c2:f9:63:3e:a4:e7:65:3e:07:0e:77:
c4:e1:27:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:26:17 2025 by rpki-client