Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/b9-JZ3RdF7ZemK1dm7cPMRh2l58.roa
File: b9-JZ3RdF7ZemK1dm7cPMRh2l58.roa (raw, json)
Hash identifier: oUjihEIhXb/rvj31i27jlX3Sh4tmRUO23s5LKuEs2r0=
Subject key identifier: 6F:DF:89:67:74:5D:17:B6:5E:98:AD:5D:9B:B7:0F:31:18:76:97:9F
Certificate issuer: /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial: 0194274825AA54A75A7B11EC509A3799D19E
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/b9-JZ3RdF7ZemK1dm7cPMRh2l58.roa
Signing time: Thu 02 Jan 2025 13:50:27 +0000
ROA not before: Thu 02 Jan 2025 13:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 176.61.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:25:aa:54:a7:5a:7b:11:ec:50:9a:37:99:d1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Validity
Not Before: Jan 2 13:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fdf8967745d17b65e98ad5d9bb70f311876979f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:be:4a:70:5b:85:ed:72:4d:72:d5:51:46:
c3:6c:e4:27:fc:90:96:c5:ca:84:d1:86:85:4e:04:
38:75:a8:a0:26:7d:71:90:1f:e4:2d:f8:dc:ee:22:
2e:e0:00:94:16:34:ea:65:42:3e:5a:57:8a:13:08:
ec:b0:55:5a:af:a5:73:6e:53:05:30:71:68:8f:3e:
84:18:d8:d8:fd:b1:da:4d:23:76:66:fc:77:b4:0d:
b3:68:ce:4f:92:06:a3:27:ed:fd:34:5a:b5:bb:51:
63:f1:2e:73:35:bf:57:00:2e:b0:55:91:00:a0:d8:
41:01:d2:18:fd:60:e2:1d:a7:06:df:a4:d5:82:32:
fc:ae:b8:41:a4:86:76:9e:08:29:4a:a4:42:48:ef:
4f:b5:aa:43:3f:b7:2f:69:fc:4f:a4:63:4d:93:26:
af:bc:9d:d6:89:cc:59:ba:fb:1e:40:4b:41:34:bf:
c8:ed:09:10:66:fd:2f:70:07:b7:59:90:28:71:7f:
82:dd:d7:e3:cf:e8:b2:6d:86:84:05:99:bc:ec:a6:
5f:54:65:14:aa:f7:3d:d5:a9:84:68:36:64:b3:36:
52:b8:76:45:09:b0:67:8d:80:aa:54:ce:b1:88:c2:
14:7f:51:f3:f1:90:4e:6a:05:f2:fd:64:b8:24:f3:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DF:89:67:74:5D:17:B6:5E:98:AD:5D:9B:B7:0F:31:18:76:97:9F
X509v3 Authority Key Identifier:
keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/b9-JZ3RdF7ZemK1dm7cPMRh2l58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.61.129.0/24
Signature Algorithm: sha256WithRSAEncryption
11:5a:9c:23:02:3e:5b:32:a5:52:11:4c:81:3e:0e:77:49:9a:
6c:ce:7c:2d:df:3f:45:77:42:5a:04:41:59:49:8d:24:4d:82:
70:41:56:56:9e:a4:79:4c:3b:26:4a:c3:cd:ce:43:56:f0:10:
b7:26:af:d1:ce:50:dc:9c:70:fd:0f:24:cb:35:2b:fe:5f:f8:
e5:51:53:64:6b:aa:eb:4f:4a:50:43:e3:64:10:b4:56:89:c6:
05:8a:9a:ea:9f:94:da:db:68:aa:58:eb:84:4d:29:43:ce:6d:
dd:16:85:cf:9f:b8:d4:6e:6f:0f:02:08:83:81:d6:0f:eb:05:
a6:1f:7b:ad:96:34:19:ff:97:cf:6a:6d:b2:da:25:08:6d:1d:
15:1d:9f:c7:7d:34:62:f0:c6:a9:1c:0d:8b:c7:4b:5b:f7:ab:
fc:ee:5f:75:2d:39:b2:48:8d:de:a4:41:3b:77:f4:12:c8:55:
8a:d4:84:2a:03:8b:8e:77:08:43:9d:f2:ed:6b:2f:be:61:1b:
73:62:64:d1:cc:cb:8e:76:db:f2:e2:be:ea:07:d9:27:97:83:
68:e3:c4:71:20:88:d6:65:d2:9f:1c:fb:13:49:22:ee:69:80:
60:54:84:f5:46:08:df:c0:b8:37:ac:98:f0:5b:45:fa:ee:4d:
b6:39:82:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:56 2025 by rpki-client