Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-vIuocsySS4hCLwPwzSGGi0Y9tc.roa
File: 1-vIuocsySS4hCLwPwzSGGi0Y9tc.roa (raw, json)
Hash identifier: +g5xAqCWTvxo7PyMWD8c44r3EF7O21NmsWOjSdPveho=
Subject key identifier: FA:F2:2E:A1:CB:32:49:2E:21:08:BC:0F:C3:34:86:1A:2D:18:F6:D7
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 0194266C1FC00B087B341BD01FAC71BA5BE1
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-vIuocsySS4hCLwPwzSGGi0Y9tc.roa
Signing time: Thu 02 Jan 2025 09:50:07 +0000
ROA not before: Thu 02 Jan 2025 09:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 176.57.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1f:c0:0b:08:7b:34:1b:d0:1f:ac:71:ba:5b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Jan 2 09:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faf22ea1cb32492e2108bc0fc334861a2d18f6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:32:55:c8:fb:f2:7a:f0:e7:f1:74:da:f6:
04:76:87:61:15:c3:81:bd:aa:46:8f:93:50:c0:b2:
d0:f5:97:bf:c3:2c:38:1e:0c:f5:7a:f1:5f:2d:ab:
12:07:28:41:ed:ed:4e:f1:a8:7d:72:b2:90:c6:e4:
61:59:17:f4:a2:20:cc:1b:e4:bc:7d:27:dd:7d:67:
bd:42:d9:5d:18:33:b0:80:41:23:e7:28:04:6e:73:
a6:1e:2f:8e:d7:db:a7:16:95:ab:98:c7:dd:8a:06:
74:c3:a2:90:a9:37:45:e2:af:52:80:bf:2c:47:2b:
d0:94:73:04:ef:38:6f:a5:51:06:b1:4a:19:58:ae:
8d:f8:4a:44:c4:d0:e5:55:8e:67:03:5e:eb:db:e3:
44:b5:14:b7:9c:e8:e5:08:69:7b:af:8f:e2:b4:58:
ea:1d:94:af:48:e4:2f:55:94:85:ec:63:73:05:d2:
f9:75:0c:25:dc:1e:dd:44:74:e9:91:ee:bf:ab:f3:
e2:74:6e:67:b2:5e:ba:53:ca:42:05:a3:71:ed:e8:
32:5f:ec:bf:28:ff:f1:f0:f0:91:0a:26:25:bf:cb:
ed:50:0e:62:f4:73:15:e8:1d:68:09:d6:ac:dc:2d:
5e:87:22:09:3c:fd:25:93:0e:97:c5:a1:27:2b:34:
9a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F2:2E:A1:CB:32:49:2E:21:08:BC:0F:C3:34:86:1A:2D:18:F6:D7
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-vIuocsySS4hCLwPwzSGGi0Y9tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.178.0/24
Signature Algorithm: sha256WithRSAEncryption
18:73:3c:94:b8:7d:73:5b:ff:2f:ef:39:ed:da:f5:55:7a:9e:
41:38:ad:f9:8f:50:91:1d:94:07:2f:59:ee:03:44:fe:b2:d1:
db:e0:d6:b0:56:60:d7:ed:f7:d2:60:b0:5e:4e:9f:d3:2a:35:
74:db:56:f0:90:a0:8d:b3:9c:10:02:c3:fe:ba:6f:8f:76:19:
bb:71:86:2d:0b:a8:4d:c8:dc:ba:b0:01:6f:09:a5:96:42:fb:
d1:03:f8:70:d8:60:9a:c5:70:ee:9d:ae:95:03:8e:25:6e:7b:
b3:5a:4b:90:de:76:ff:92:98:2f:f1:67:a9:fa:6a:9e:f0:6a:
33:23:00:38:19:f4:6a:6b:af:79:c6:18:19:ee:af:38:d0:d6:
f6:7b:5a:e6:ad:7a:7a:30:0c:93:29:32:5f:d1:0e:d1:9c:de:
82:4c:1d:eb:3e:aa:f9:76:c3:9d:dc:18:8c:71:25:0e:b9:3d:
06:48:7d:c2:9c:6d:9b:63:37:0c:93:9d:f9:8b:c3:ff:f3:19:
a5:bc:2f:f6:54:bb:fd:9b:63:c2:60:25:24:c1:f3:c4:b5:07:
33:3e:fc:42:b2:9c:e5:ce:37:96:92:71:f4:2d:9a:82:f5:97:
fe:cb:4b:c4:f8:36:61:da:a2:af:58:4e:e8:8b:dd:61:13:a0:
0c:2b:12:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:16 2025 by rpki-client