Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/c-pova8C1uulibxroeJZUgkQnv8.roa
File: c-pova8C1uulibxroeJZUgkQnv8.roa (raw, json)
Hash identifier: OvhwnSV+pVkr5UA9RfkEZJQ3n/9Mm7Ihqgy3rKhknz8=
Subject key identifier: 73:EA:68:BD:AF:02:D6:EB:A5:89:BC:6B:A1:E2:59:52:09:10:9E:FF
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 019440B39798DE89F6A2502AD62D9884D86B
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/c-pova8C1uulibxroeJZUgkQnv8.roa
Signing time: Tue 07 Jan 2025 12:18:19 +0000
ROA not before: Tue 07 Jan 2025 12:18:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41568
IP address blocks: 217.9.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:b3:97:98:de:89:f6:a2:50:2a:d6:2d:98:84:d8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 7 12:18:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73ea68bdaf02d6eba589bc6ba1e2595209109eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:3c:53:70:e6:f7:14:b8:d3:c8:27:68:67:
16:4c:41:53:55:19:6b:0f:6b:bc:9f:fe:42:fd:30:
77:02:f8:c6:3e:3d:d6:b0:05:31:04:d5:29:25:39:
56:07:95:15:73:df:d4:b9:c3:78:18:c6:77:ba:78:
7b:cb:b1:f7:72:62:28:c1:3a:0a:f9:84:b9:20:45:
e5:80:76:ad:03:e9:33:68:ab:0c:e5:6f:15:2d:e4:
f3:28:43:6a:1f:d3:01:bc:46:8f:aa:dc:dc:c8:56:
1f:5b:95:7a:fe:a5:3b:e4:d9:f2:c9:e3:d6:17:67:
31:50:5c:ca:43:cd:26:9b:27:2c:bf:f4:6f:84:20:
62:b1:aa:b7:54:7d:8c:df:be:52:ee:d9:34:60:6e:
91:f6:ed:93:99:8a:52:59:70:97:64:4f:86:09:0e:
6c:ee:cc:b7:33:6c:b4:da:44:c1:07:6d:cf:63:6b:
e9:71:ad:2e:92:b4:5c:6b:2b:69:52:15:a2:e3:7a:
30:79:81:88:0a:e0:93:96:65:b0:e5:3e:1d:8c:06:
f2:fc:bb:40:56:b2:bd:d4:11:a8:5b:71:38:5b:e2:
cd:e1:c5:27:86:e9:85:3f:7a:47:01:ff:5c:66:38:
f1:03:dd:36:ef:a8:f5:b1:8d:f0:fe:42:48:56:07:
e6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EA:68:BD:AF:02:D6:EB:A5:89:BC:6B:A1:E2:59:52:09:10:9E:FF
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/c-pova8C1uulibxroeJZUgkQnv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.9.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:8c:60:11:eb:50:26:8c:20:0a:17:9f:94:d9:ce:4e:da:03:
a2:37:52:96:64:a1:52:d7:ee:0d:1b:a3:94:ee:1b:3f:84:9e:
aa:0c:7b:12:15:d9:61:78:5c:7d:7b:8f:93:20:c6:20:7d:be:
1e:38:41:e5:20:c3:9c:61:8c:60:bf:03:c7:56:15:dc:27:5c:
e3:bc:c4:93:2f:88:16:42:50:66:fb:ff:84:eb:b6:14:68:b9:
12:c2:31:c7:91:60:7d:79:62:fb:6d:e5:69:f7:b8:da:89:8f:
2d:71:80:12:0a:69:3f:3f:a1:56:64:58:b8:02:da:ea:fa:67:
23:15:89:e5:4e:35:41:3c:53:be:3c:7f:fe:87:f7:45:6b:a9:
d1:ef:df:17:e8:0a:d5:32:89:b4:f1:72:ff:97:83:3f:2c:c6:
b3:1c:d6:9c:2b:6d:50:4f:c2:c3:ed:77:43:fc:35:dc:74:97:
86:03:ef:d3:23:d7:08:69:9e:6f:6a:17:6b:80:db:a1:11:d9:
8b:82:50:3b:cb:a3:da:de:79:fa:8d:a9:06:e9:b0:cc:c9:54:
7a:9b:11:d7:27:5e:18:ec:67:62:eb:8a:3f:3f:24:47:bf:0e:
25:fb:08:74:6c:bb:a4:f7:53:fd:95:10:fe:cc:17:51:6e:9a:
b4:e8:97:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:46:35 2025 by rpki-client