Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/4AyeZ6UgoSX9es2BbU_DizGhUdY.roa
File: 4AyeZ6UgoSX9es2BbU_DizGhUdY.roa (raw, json)
Hash identifier: VWKfnEijREHtHZ2eztHBUGUXBqi65LO9HiloDpo6nX4=
Subject key identifier: E0:0C:9E:67:A5:20:A1:25:FD:7A:CD:81:6D:4F:C3:8B:31:A1:51:D6
Certificate issuer: /CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
Certificate serial: 019421B2370F0588E288DFF98B73806C2896
Authority key identifier: 9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/4AyeZ6UgoSX9es2BbU_DizGhUdY.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199634
IP address blocks: 176.57.72.0/21 maxlen: 21
185.8.124.0/22 maxlen: 22
2a02:d840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:37:0f:05:88:e2:88:df:f9:8b:73:80:6c:28:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e00c9e67a520a125fd7acd816d4fc38b31a151d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dc:31:8e:04:61:cf:04:14:b3:19:4e:f5:38:
2e:eb:1e:0a:0a:a1:04:ca:3f:6f:b2:db:4e:fd:2b:
8e:66:37:07:ae:90:bf:30:3c:28:52:71:ee:d9:15:
68:6f:e5:f7:8a:d4:ed:14:12:de:5f:32:85:f4:c4:
2a:c4:04:6e:11:38:d1:71:31:13:1e:0c:89:94:bd:
54:b4:fa:45:91:d1:1f:2d:57:74:0d:9b:f3:6a:9a:
62:e1:90:fa:43:ae:11:8a:3b:52:76:6c:1a:92:c3:
85:69:e6:ec:95:d7:f0:a0:35:b2:45:7e:30:5f:a3:
8a:26:69:67:eb:4b:84:ba:ad:c7:b7:f9:46:90:2d:
02:c1:ba:b8:a1:06:74:96:23:23:14:9f:2f:af:57:
0a:30:e6:97:19:e7:4f:7b:29:76:43:15:ca:d8:f6:
30:f6:30:d5:fe:fe:ed:ed:d2:5d:28:83:07:64:b6:
50:18:3a:31:e4:d9:88:ea:9b:df:41:11:82:7e:de:
ac:66:03:83:d7:48:64:bf:ec:aa:b1:dd:62:de:e1:
d9:35:df:f4:64:65:aa:b6:7a:2a:5e:62:9c:a9:38:
e7:ac:91:d2:24:86:5a:b1:3d:86:88:7c:fb:42:84:
3e:ae:46:ad:1f:e3:3d:72:d4:5b:ff:0b:3e:0a:53:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0C:9E:67:A5:20:A1:25:FD:7A:CD:81:6D:4F:C3:8B:31:A1:51:D6
X509v3 Authority Key Identifier:
keyid:9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/4AyeZ6UgoSX9es2BbU_DizGhUdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.72.0/21
185.8.124.0/22
IPv6:
2a02:d840::/29
Signature Algorithm: sha256WithRSAEncryption
ad:ea:a4:a0:b0:95:c1:9b:d6:79:c7:d6:c8:2b:6c:9c:7c:d7:
4d:19:b9:0b:4f:84:a4:03:66:8e:cf:4e:ad:a4:c7:2a:0c:a3:
a6:36:da:22:eb:ac:0d:7c:93:1b:98:47:be:35:52:ec:c4:cc:
7e:9b:1a:12:41:8d:18:e4:76:0a:9c:bb:4c:50:4a:8f:26:45:
3f:d2:05:ad:2e:af:3b:88:1c:ae:30:fe:04:8e:b3:ff:53:1b:
2e:fb:79:19:dd:14:9c:a7:0d:4f:b7:6a:bc:b6:ee:22:76:8c:
d3:e4:37:1a:f6:c4:c8:01:d9:08:a3:06:4b:c5:79:31:e3:04:
c2:fb:47:a6:cf:b3:ef:a1:d1:14:38:10:fa:76:aa:ed:38:6b:
f5:8f:83:39:b2:1d:4a:d5:a3:30:67:e7:37:c1:3c:e5:f9:44:
37:ec:6a:cf:b9:17:a8:f4:27:7c:6d:d6:1f:84:8f:ea:e4:81:
a2:a2:bc:50:a1:82:5e:5d:20:f5:44:67:46:fc:d1:5e:bc:2a:
9d:df:84:2c:73:49:48:2d:03:05:00:3d:01:74:7f:c9:6e:b4:
b5:cd:d1:ca:ae:53:2a:75:22:07:e6:21:69:f1:9e:a1:4c:89:
a2:c2:c7:3d:ce:1f:cc:4d:f5:11:a2:9e:8c:39:ae:c0:3c:2a:
f7:f1:d1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:38:15 2025 by rpki-client