Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/36I9Cvl_ETS1k6xuKOVJmtHJqoY.roa
File: 36I9Cvl_ETS1k6xuKOVJmtHJqoY.roa (raw, json)
Hash identifier: /+stN4BrCCzXnl7caobprhq1WDT+lsL/TvTML2R8gT0=
Subject key identifier: DF:A2:3D:0A:F9:7F:11:34:B5:93:AC:6E:28:E5:49:9A:D1:C9:AA:86
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747D7AF7257937C23B40575CD89596E
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/36I9Cvl_ETS1k6xuKOVJmtHJqoY.roa
Signing time: Thu 02 Jan 2025 13:50:07 +0000
ROA not before: Thu 02 Jan 2025 13:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57717
IP address blocks: 194.50.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d7:af:72:57:93:7c:23:b4:05:75:cd:89:59:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfa23d0af97f1134b593ac6e28e5499ad1c9aa86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:e8:45:38:3e:f0:f6:b7:c5:ea:48:82:b8:
83:da:60:a6:44:3c:30:d5:c6:bc:83:c8:11:b6:d3:
f6:68:65:b9:38:32:e4:ed:38:9b:3c:97:2b:4f:ba:
18:c9:3b:c2:39:98:22:67:5c:6d:2d:4b:17:00:19:
fb:ee:45:90:6d:0b:34:66:66:c4:8c:76:f3:9a:4f:
41:cf:4d:23:19:03:2a:3c:49:27:fa:9d:5b:4e:10:
67:32:36:ae:7e:53:de:c1:36:06:57:4a:88:08:a3:
73:72:68:23:ea:06:c2:71:5e:e0:54:01:1d:50:d6:
5c:45:2e:96:5f:fc:21:23:ef:ea:00:58:4d:10:b2:
c8:fc:45:59:76:3b:b2:08:03:60:03:47:c4:a7:6a:
13:3e:26:35:b1:d4:b6:81:97:13:f6:66:a0:fa:25:
03:ed:0d:e5:2e:b5:18:e7:62:33:d1:dc:93:9d:81:
87:d7:94:75:29:63:1f:3f:de:f0:75:42:ee:e2:0b:
38:15:30:8a:a4:e6:ba:55:bc:63:6c:44:98:de:0c:
24:98:9d:e5:94:f3:ee:c7:b0:d1:47:6b:8d:c4:ad:
f5:74:fb:3c:4c:a3:68:cc:5d:e2:95:72:af:ba:c6:
d4:73:4d:33:f4:cc:17:c7:49:dc:f4:13:cb:83:f5:
15:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A2:3D:0A:F9:7F:11:34:B5:93:AC:6E:28:E5:49:9A:D1:C9:AA:86
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/36I9Cvl_ETS1k6xuKOVJmtHJqoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.17.0/24
Signature Algorithm: sha256WithRSAEncryption
68:15:8f:80:33:5b:b5:f5:8e:af:84:44:1c:7c:22:be:3f:0e:
ab:f0:b8:e9:24:55:76:51:d2:41:ad:a2:fe:30:fb:0e:28:12:
ae:1a:b6:4f:49:8d:ec:1b:3c:d3:e8:7f:f8:34:d5:39:82:e5:
e7:89:e4:38:49:89:34:86:08:5b:ef:63:5f:12:33:eb:c6:94:
1b:ff:d3:16:8a:02:ae:a2:10:b5:ee:9a:67:64:4b:94:25:c1:
42:93:4f:0c:43:ea:22:d3:a9:12:86:8c:bf:34:e5:08:ae:86:
ab:a5:c8:e1:03:ed:9a:a5:80:98:bb:4e:fb:d3:94:31:2c:69:
65:25:28:f1:f6:b3:3c:37:73:ef:14:1b:69:3d:37:75:fc:09:
8c:14:94:07:37:85:8b:68:83:d1:ed:0b:89:a5:31:67:40:37:
3a:d8:df:98:9d:b7:44:00:f3:73:d9:d0:e0:34:dc:54:83:23:
49:95:87:64:8c:eb:77:f9:54:a8:e7:08:c1:49:ed:64:45:9b:
9f:9a:61:ed:74:d1:ba:0d:4f:59:dc:81:10:f0:a5:cf:19:5d:
21:f2:73:0b:2e:b6:41:11:9a:de:71:42:7c:c9:5f:d7:f4:99:
ec:ed:6a:7b:32:25:da:b8:c3:52:1e:a3:0c:3c:79:12:3f:5a:
06:2e:37:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:13:19 2025 by rpki-client