Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/w1UWJINQiqIyHaTTFS0euILJR58.roa
File: w1UWJINQiqIyHaTTFS0euILJR58.roa (raw, json)
Hash identifier: jXqC61xJbm2P2p00w1kBmanAbpZq6zjGJCspuExiIe4=
Subject key identifier: C3:55:16:24:83:50:8A:A2:32:1D:A4:D3:15:2D:1E:B8:82:C9:47:9F
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0194266B8B0AF3F0D4C828DB84F58784C1C9
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/w1UWJINQiqIyHaTTFS0euILJR58.roa
Signing time: Thu 02 Jan 2025 09:49:29 +0000
ROA not before: Thu 02 Jan 2025 09:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56322
IP address blocks: 78.142.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8b:0a:f3:f0:d4:c8:28:db:84:f5:87:84:c1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 2 09:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c355162483508aa2321da4d3152d1eb882c9479f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:24:34:c8:d5:11:60:68:ac:6d:66:66:ef:f2:
d9:13:09:be:38:27:fb:03:ff:81:05:b1:c5:7f:7c:
3b:d5:48:ee:a9:87:76:c5:7e:db:3d:94:2d:46:21:
db:52:26:27:5a:20:fd:0e:6a:5e:bd:31:64:78:f8:
1b:b7:15:ec:0c:0e:98:ff:0e:b1:6b:f9:20:f9:4e:
67:40:8c:90:49:3c:da:13:c8:55:3a:13:e8:67:ed:
d2:4c:11:52:26:ed:d3:c6:48:8e:51:18:43:48:3f:
83:73:d5:b8:de:7b:bc:17:42:e4:a6:1d:58:13:1d:
36:4c:a3:b8:78:2f:d6:ca:a5:6d:1e:c4:ff:d9:0a:
52:5a:3d:93:92:00:e4:f9:30:82:84:ae:e2:0b:f0:
14:3c:8a:75:de:18:00:64:00:19:78:da:38:af:85:
13:db:20:1b:cc:a9:ce:a6:df:2a:bf:64:e4:f3:a9:
93:a2:c5:f1:ec:e0:26:c1:59:20:f1:39:5e:b9:86:
33:8a:ee:0a:98:73:7d:f8:56:fe:02:b7:b2:15:10:
4c:b4:c6:e0:5d:1d:ba:11:fb:f9:c0:a7:c2:09:ee:
56:d0:39:89:6f:fc:96:d9:5a:c6:3d:ba:6e:cf:92:
93:8f:16:50:51:8a:92:be:e3:52:ed:41:c2:d5:1c:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:55:16:24:83:50:8A:A2:32:1D:A4:D3:15:2D:1E:B8:82:C9:47:9F
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/w1UWJINQiqIyHaTTFS0euILJR58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.217.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:0a:f1:01:34:b3:a9:33:29:4d:fa:49:d4:b2:30:7f:bf:21:
1a:85:36:5b:fe:bf:e3:1b:73:61:d4:ac:ac:28:1b:4c:eb:89:
d1:26:d3:12:28:a9:09:79:63:e8:74:66:7d:d1:da:4e:88:f6:
30:83:d0:35:67:7f:7f:00:1d:de:b3:5d:cc:7d:a2:6c:66:32:
74:4e:4f:ba:a9:e9:26:fe:7b:f9:47:e4:64:a3:86:c4:0a:4f:
3d:9c:d1:14:99:08:25:ba:5a:c2:93:4c:c7:55:6f:87:7b:19:
61:55:4e:b1:80:ec:99:96:92:5b:67:72:ed:10:72:56:96:3f:
9a:aa:8e:fe:1f:84:48:e1:75:6c:21:84:90:39:1c:3a:b5:90:
72:aa:06:de:26:23:f8:8c:d2:bf:13:8f:e9:21:5d:d7:09:ea:
ed:93:3b:f4:67:12:03:01:ec:71:f6:bd:c8:f0:0a:bc:8c:57:
de:dc:93:7d:a7:82:5e:d6:91:e0:3a:c1:d5:a3:86:f1:42:47:
4e:65:49:8e:14:a5:94:14:d8:ff:fb:a5:32:33:5a:35:6a:01:
d6:75:1b:76:78:b3:40:fa:9c:35:64:3e:39:bd:b2:f4:02:c5:
1f:2c:56:ca:b9:ff:76:39:0d:67:ba:07:0f:12:b7:eb:62:50:
5f:c5:c6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:57 2025 by rpki-client