Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/AFuyA9N9QqeS4eYvv6H0xMb4g84.roa
File: AFuyA9N9QqeS4eYvv6H0xMb4g84.roa (raw, json)
Hash identifier: jUUQO+maMs81lyKLHsR/4uauwTRrrtvcUT0sWVBD+Zo=
Subject key identifier: 00:5B:B2:03:D3:7D:42:A7:92:E1:E6:2F:BF:A1:F4:C4:C6:F8:83:CE
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0194244513EE26FC6A45EB6515614E8B24CD
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/AFuyA9N9QqeS4eYvv6H0xMb4g84.roa
Signing time: Wed 01 Jan 2025 23:48:14 +0000
ROA not before: Wed 01 Jan 2025 23:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 87.236.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:13:ee:26:fc:6a:45:eb:65:15:61:4e:8b:24:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=005bb203d37d42a792e1e62fbfa1f4c4c6f883ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:e7:23:da:77:a3:31:f4:59:97:8e:c7:16:
a0:38:ef:d7:11:8c:21:f8:9b:ae:89:f1:66:6c:e1:
4a:3c:49:50:2b:3a:ff:16:22:bd:1c:8a:79:cd:41:
6a:69:2f:39:5d:e2:f5:25:b6:89:8d:0d:d2:a3:4e:
b4:7e:d7:b8:f3:ce:9b:91:e4:ef:3a:e1:f0:3d:97:
8d:90:21:e2:ac:60:e9:bc:9d:99:7d:d2:5f:86:11:
07:a6:2f:fb:4d:4d:97:31:cf:94:fb:94:2e:31:c3:
3c:4e:85:55:23:c2:c5:be:88:e7:3d:40:b5:aa:88:
cf:72:99:30:e1:87:1f:ea:ae:fb:14:eb:65:da:59:
75:2b:e2:57:3c:4b:fc:36:d5:ee:cc:bd:ba:fb:93:
b6:b3:b4:ff:13:81:01:65:e9:72:3a:a4:bd:94:88:
3d:58:2e:e0:fc:5c:1b:74:90:7b:e6:46:cd:77:28:
76:72:12:3c:e4:23:4f:e7:4c:6b:77:49:a7:4e:e9:
ee:c8:e3:e3:d8:7e:55:8d:64:bd:31:7b:44:4d:99:
2a:08:c4:b2:28:a6:47:41:6d:73:bf:a5:fe:52:16:
d2:c8:3a:83:b5:84:a7:05:23:c9:39:96:45:9b:85:
22:40:b9:3e:02:e7:24:b5:93:6f:2e:5c:62:c5:a7:
a5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5B:B2:03:D3:7D:42:A7:92:E1:E6:2F:BF:A1:F4:C4:C6:F8:83:CE
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/AFuyA9N9QqeS4eYvv6H0xMb4g84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.167.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:39:b5:55:6f:d8:e7:1d:8c:b1:3c:11:48:27:c2:19:21:6d:
95:d3:93:f2:a7:ea:e5:f0:cf:da:79:12:bd:be:36:9b:5c:7f:
71:23:54:4d:da:1c:41:9a:b8:50:a8:42:8a:e6:91:13:cc:ac:
00:7b:0e:8a:ac:b0:61:5b:7c:73:22:6a:f0:03:b8:61:62:e3:
92:6d:18:6c:48:a7:c8:18:7e:7f:ad:e7:50:b2:cc:3a:fd:bd:
24:b1:37:a0:c0:9b:04:22:17:3e:5f:03:4e:40:b4:f4:8a:cf:
57:3b:99:61:2e:da:4d:ef:89:e5:78:df:8b:59:67:e7:f9:dc:
11:ee:85:3d:e4:55:98:94:98:d7:ef:b1:fe:bf:28:d8:d9:f7:
60:5d:86:2a:be:aa:53:f0:62:07:7e:82:7d:64:e7:04:58:3b:
48:14:09:8f:50:2c:11:3f:86:75:6e:2c:61:11:5e:cf:bf:8e:
fc:d5:85:35:3e:d7:e3:be:b6:f5:07:7e:e2:1c:ce:4c:dd:7a:
d8:5e:11:3d:d0:6b:77:0c:2d:e9:f6:97:6e:89:04:e6:54:31:
f6:47:b1:f1:7a:67:49:c7:9e:d7:b5:23:b8:cc:16:8c:8f:76:
df:ef:53:3e:41:10:7b:22:fa:b3:53:ac:c0:0c:e9:94:39:0e:
17:24:a9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:54 2025 by rpki-client