Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/9ZpW1MFLfzhcDdO5wTaJpRND5LI.roa
File: 9ZpW1MFLfzhcDdO5wTaJpRND5LI.roa (raw, json)
Hash identifier: eD8scxSV/Ipj3PNHolMKD1Dy5Nq6O0rfumsVRuff780=
Subject key identifier: F5:9A:56:D4:C1:4B:7F:38:5C:0D:D3:B9:C1:36:89:A5:13:43:E4:B2
Certificate issuer: /CN=821f1285d775a9f589243eac844adc5ab89d97c9
Certificate serial: 01942826298FE92A9C517F8B4F3FB7ED1DC5
Authority key identifier: 82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/9ZpW1MFLfzhcDdO5wTaJpRND5LI.roa
Signing time: Thu 02 Jan 2025 17:52:57 +0000
ROA not before: Thu 02 Jan 2025 17:52:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12301
IP address blocks: 193.31.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:29:8f:e9:2a:9c:51:7f:8b:4f:3f:b7:ed:1d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f1285d775a9f589243eac844adc5ab89d97c9
Validity
Not Before: Jan 2 17:52:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f59a56d4c14b7f385c0dd3b9c13689a51343e4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:3b:4a:d7:af:29:1b:44:38:c1:85:ea:34:
b3:b6:3d:02:e2:db:45:99:3b:4f:7c:d1:7e:df:66:
51:4c:16:09:0d:d2:8a:04:ea:68:9a:a4:83:f2:be:
d5:91:e0:39:25:11:f5:5c:93:77:67:7a:9a:33:64:
77:b6:cd:73:2a:1c:a1:ba:35:47:6e:ba:08:b7:c5:
ae:c9:5a:32:49:9c:66:d4:f6:af:9f:f4:31:08:fb:
7a:da:1d:30:72:84:fb:9d:14:a1:33:39:72:e4:8d:
0c:15:e2:86:6a:21:0e:d6:7a:4c:c4:cf:1a:2d:c4:
36:36:92:74:61:b3:ee:4c:a8:6e:88:fd:55:72:1b:
42:6d:7e:9c:c4:da:13:85:5a:1e:98:f1:07:c9:39:
84:34:56:3a:56:92:00:f4:79:cc:9a:de:2d:b6:64:
9f:b0:5f:74:bd:f9:0e:47:eb:08:6f:39:7b:85:d5:
0e:9c:ab:1a:c1:7c:75:73:55:ab:ce:f7:7d:29:e8:
50:c3:61:cd:ac:e9:f6:31:3d:9f:75:a0:fd:d5:59:
61:c5:74:2c:27:01:d9:c2:0c:ab:cb:69:0e:5f:13:
bc:6e:f8:17:e3:6d:26:e7:62:5b:c9:62:4b:a8:cb:
a8:e0:7b:80:cb:ae:10:7b:90:cc:91:76:d8:b1:d4:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9A:56:D4:C1:4B:7F:38:5C:0D:D3:B9:C1:36:89:A5:13:43:E4:B2
X509v3 Authority Key Identifier:
keyid:82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/9ZpW1MFLfzhcDdO5wTaJpRND5LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.16.0/24
Signature Algorithm: sha256WithRSAEncryption
47:78:1c:0e:54:fb:94:0c:8f:e7:66:45:de:5c:75:29:c3:9b:
6a:d7:3f:1a:31:81:b1:0a:2b:67:6e:95:98:af:0a:ad:5d:25:
74:8e:19:8d:0b:73:cc:34:76:d5:4f:a8:99:c3:be:49:25:64:
16:b3:6a:fc:c8:f7:58:03:41:e0:01:91:22:5c:b1:bf:b7:83:
58:48:09:b1:1f:f7:9c:56:0b:28:32:dd:4f:86:ac:52:06:20:
63:8d:0d:4c:b0:46:2c:92:6f:0b:98:b5:ec:20:eb:b1:13:e9:
97:df:33:d2:4e:13:81:45:0b:88:3c:38:32:52:7f:c5:e5:f2:
2a:48:35:46:8f:29:b9:68:ff:cf:a1:4d:71:74:82:89:67:7b:
76:45:44:60:61:01:96:27:6c:ce:fa:94:54:a8:89:92:0d:2d:
f4:3f:28:aa:4f:6c:00:4e:e3:c3:1e:6a:00:e6:6f:3b:07:8e:
cd:d7:42:d1:78:9e:3f:cf:87:23:75:40:c7:c1:51:97:fd:a2:
6d:98:87:9a:b5:75:fc:78:26:cd:aa:c6:e6:97:d6:94:8f:95:
16:49:47:3e:28:d5:53:43:58:aa:d0:ed:3f:3c:6a:4e:07:5e:
60:ae:62:05:d0:1f:24:3e:0d:fd:fa:77:2e:39:4b:fb:e5:a5:
e6:a2:56:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:45:58 2025 by rpki-client