Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/dERFn8-Y3CpN0nk9-2z0qZhw3lA.roa
File: dERFn8-Y3CpN0nk9-2z0qZhw3lA.roa (raw, json)
Hash identifier: MMTvQ8GZkYazTAxyoZRT7syb2AL1b5sM3xApJFFdT80=
Subject key identifier: 74:44:45:9F:CF:98:DC:2A:4D:D2:79:3D:FB:6C:F4:A9:98:70:DE:50
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 0194221F51A74B256110EB9D4695F68F8C4F
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/dERFn8-Y3CpN0nk9-2z0qZhw3lA.roa
Signing time: Wed 01 Jan 2025 13:47:45 +0000
ROA not before: Wed 01 Jan 2025 13:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 192.40.76.0/24 maxlen: 24
192.40.77.0/24 maxlen: 24
192.40.78.0/24 maxlen: 24
192.40.79.0/24 maxlen: 24
2a06:f044::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:51:a7:4b:25:61:10:eb:9d:46:95:f6:8f:8c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: Jan 1 13:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7444459fcf98dc2a4dd2793dfb6cf4a99870de50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:12:a1:2f:03:dc:ce:08:fb:19:ef:ff:49:4f:
f6:d1:8c:f8:3f:af:f8:ca:4c:49:fe:26:44:ea:6e:
50:d6:09:95:fc:68:f6:55:c2:7e:c1:d6:61:74:51:
da:33:55:b8:3b:3c:7b:c7:cc:33:54:37:80:7c:2c:
45:f8:65:2c:40:dd:e1:31:f1:a5:9c:c8:cf:3d:81:
37:09:f7:77:23:a5:17:c0:f6:79:20:f4:20:93:4d:
1c:79:36:37:92:cf:2e:23:7a:2a:29:48:60:26:4d:
40:af:4a:f7:1d:4b:10:87:49:64:d1:b3:b0:9e:56:
4c:af:c0:f2:16:2a:f6:a9:29:e0:9f:21:2f:e0:ab:
5c:1c:ac:00:6d:54:a8:53:87:5e:77:38:ac:77:43:
a1:62:09:4a:5e:08:4b:ba:61:2a:be:75:04:06:d4:
61:fd:96:3e:b1:5d:b4:88:d3:80:25:a0:24:e8:67:
92:93:29:fb:db:6f:7d:19:68:67:43:61:40:fe:bc:
c0:f5:62:1a:88:fa:22:51:ca:fb:bb:ca:0d:88:d5:
f4:8d:3c:05:60:11:2f:a1:85:70:6e:58:55:9f:7f:
2d:49:91:39:35:b9:f4:a1:d5:f3:16:59:d9:46:41:
5f:bb:a7:fb:eb:b8:02:27:83:a1:2a:0b:a8:aa:c7:
30:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:44:45:9F:CF:98:DC:2A:4D:D2:79:3D:FB:6C:F4:A9:98:70:DE:50
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/dERFn8-Y3CpN0nk9-2z0qZhw3lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.40.76.0/22
IPv6:
2a06:f044::/48
Signature Algorithm: sha256WithRSAEncryption
30:6e:31:49:86:bb:e7:07:52:dc:ba:f9:76:c2:93:6c:30:1d:
b1:20:0c:a7:08:9b:e1:fb:b6:75:48:4d:aa:dc:ac:71:12:7c:
d2:0c:5a:0f:de:20:5a:01:4d:63:a7:a7:cf:5a:04:e3:d6:8d:
48:f8:fe:71:39:45:bd:69:de:aa:94:30:e3:52:9e:85:27:42:
34:a8:76:b5:14:2c:ca:2c:2c:00:80:a4:b0:35:7b:ac:76:26:
a9:92:7f:17:c3:37:63:74:a6:19:1b:24:57:72:9c:c7:62:e7:
08:c3:10:83:2e:42:a0:24:5f:df:21:f0:00:59:d2:43:b3:04:
fd:31:32:6c:97:a2:c5:dc:11:79:5e:c7:ef:fb:e4:38:a2:d2:
99:80:cb:6b:62:9c:5c:b3:c3:f5:c2:ca:9e:4a:bc:e2:1e:7e:
cd:51:9f:aa:3c:cf:0c:fe:e8:76:6c:d1:90:fb:7e:0a:1d:ac:
a4:1b:4b:b4:5a:76:02:56:e6:6d:30:4a:ed:90:1d:02:44:cf:
5a:a3:60:50:f6:79:7b:64:3c:fd:a8:db:55:d9:d4:1f:fd:92:
74:d8:24:a6:ac:85:82:85:39:25:77:aa:30:c2:c5:98:38:60:
6f:84:12:33:b1:86:c6:36:71:cb:8e:c2:67:bc:ea:60:a0:5b:
ed:13:c6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:30:14 2025 by rpki-client