Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/cmTeW-ofpNY8BjH8cXTtwhADRzA.roa
File: cmTeW-ofpNY8BjH8cXTtwhADRzA.roa (raw, json)
Hash identifier: SuBfMr197wymIhNTs9zfHdUIhpZWN/FfTHb7Y4F5q/Y=
Subject key identifier: 72:64:DE:5B:EA:1F:A4:D6:3C:06:31:FC:71:74:ED:C2:10:03:47:30
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 019428239CE6639AE1400A6B6F12478BB4F7
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/cmTeW-ofpNY8BjH8cXTtwhADRzA.roa
Signing time: Thu 02 Jan 2025 17:50:10 +0000
ROA not before: Thu 02 Jan 2025 17:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 87.248.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:9c:e6:63:9a:e1:40:0a:6b:6f:12:47:8b:b4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 2 17:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7264de5bea1fa4d63c0631fc7174edc210034730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:15:cf:de:cf:8c:7b:12:74:08:e5:34:25:
8b:63:71:e9:ba:3d:e2:ea:08:b9:ee:05:11:7d:07:
82:6f:7a:a0:8c:76:79:df:f1:17:ef:c1:f1:bf:1b:
8b:4c:8a:62:bb:6f:75:54:19:67:13:dd:c7:95:f6:
7a:ae:8d:c1:ee:c8:2d:cf:5f:b4:51:e1:c7:cd:31:
4e:18:bd:c7:ab:a0:e3:72:3b:f6:25:14:20:fa:80:
bb:c8:20:6d:eb:c3:b2:48:a0:7c:55:d5:d7:9b:c3:
f6:26:4d:03:3d:ba:c3:66:fe:5a:07:0a:7a:68:ab:
34:49:95:66:44:9c:85:bd:63:3e:c6:46:4d:2b:8b:
55:64:02:a8:24:00:72:08:88:71:a4:ed:25:38:ad:
b2:3d:61:25:25:d6:0a:cc:9d:64:57:d4:bd:32:52:
4c:20:fb:ab:00:ca:cc:15:21:5e:59:05:2a:af:83:
cc:9c:d0:05:c1:c3:5a:f8:4a:1f:ed:29:25:eb:ad:
7b:16:5a:41:e1:0d:6f:aa:2a:b5:72:6a:b5:01:e3:
f4:4f:0a:e7:4c:75:34:aa:26:3a:85:37:d9:db:df:
97:d4:26:48:cc:ce:24:ce:01:fb:ae:4b:30:15:1b:
f5:fb:26:22:7f:a8:fc:6a:59:36:fa:d6:1f:8b:69:
da:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:64:DE:5B:EA:1F:A4:D6:3C:06:31:FC:71:74:ED:C2:10:03:47:30
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/cmTeW-ofpNY8BjH8cXTtwhADRzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.158.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f0:6c:29:d5:fe:ee:58:a8:6f:07:65:a9:55:c2:40:2f:fe:
a2:f7:88:a4:b9:c4:2a:f3:28:ea:d9:88:48:e3:00:94:a5:49:
9b:af:0b:07:07:a6:af:e9:db:41:2a:b2:3c:c9:7e:e1:32:c0:
29:03:d3:fb:81:c2:fc:9f:19:d9:7e:ef:c4:62:b5:f7:11:60:
4b:2f:ac:eb:df:77:37:b9:b9:53:c7:cf:0d:5a:74:ea:16:67:
6b:42:70:13:54:cc:50:11:dd:8d:31:f3:3b:ec:cd:ad:97:f5:
76:f4:c9:b9:45:7b:26:cf:78:3e:e1:50:d6:2a:38:fd:67:08:
18:e0:05:ab:a4:a3:a5:a7:1c:3b:c6:ff:a9:02:ed:09:6b:12:
c5:48:60:e7:82:61:34:bb:61:05:1a:0e:26:2e:bd:a8:b6:d0:
1f:06:ae:64:80:9d:8b:37:50:70:9e:c7:d9:de:d4:8f:1b:a5:
8b:90:21:56:d1:2a:79:30:09:43:f7:46:d4:06:b3:1f:7a:3d:
33:e2:83:4b:14:30:cc:50:17:37:0a:c3:4d:c8:96:86:f7:75:
50:0f:96:84:66:af:bc:93:72:50:20:98:2d:6b:8b:99:33:82:
6d:24:b1:28:68:4c:15:93:49:db:31:23:48:57:8f:c3:9b:60:
b9:ff:a6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:26:18 2025 by rpki-client