Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/1iEj79HjJmqaWkGf361U7nZQikY.roa
File: 1iEj79HjJmqaWkGf361U7nZQikY.roa (raw, json)
Hash identifier: 94aaNrCAEDrHjoHsfGX3cHWK+s0OW99qZZJRJsNm9lg=
Subject key identifier: D6:21:23:EF:D1:E3:26:6A:9A:5A:41:9F:DF:AD:54:EE:76:50:8A:46
Certificate issuer: /CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Certificate serial: 0194221F7D3000F52C0FB97EBCCC0D6BB651
Authority key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/1iEj79HjJmqaWkGf361U7nZQikY.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208410
IP address blocks: 212.102.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7d:30:00:f5:2c:0f:b9:7e:bc:cc:0d:6b:b6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d62123efd1e3266a9a5a419fdfad54ee76508a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:07:82:03:84:39:77:e7:c1:fa:2e:ad:71:
e7:df:96:dd:aa:ba:fd:be:3a:63:62:81:99:92:50:
20:94:5f:5f:84:5a:a6:30:69:02:7c:91:9f:6a:03:
83:25:06:0c:12:4b:2c:b1:e6:75:5c:08:8a:14:d5:
e9:30:d5:df:42:f6:a4:00:3a:ea:a3:b8:b5:05:2b:
85:dd:33:a3:0e:84:97:aa:fb:9a:5f:90:98:e2:c8:
d8:cd:75:95:d3:d6:09:52:6b:71:0f:cf:c7:d0:88:
42:ac:1d:49:a8:9b:c4:c9:19:08:f6:e5:dd:3f:cb:
17:7b:1c:f3:af:0b:bc:10:51:91:be:04:be:ee:df:
72:f2:ef:6b:14:b4:d5:9d:37:8f:98:91:c4:ba:db:
02:2e:2d:f5:5a:3b:b4:d8:9c:69:09:ea:f7:cc:be:
d3:9e:d1:79:15:b1:9c:18:22:5e:a5:5c:64:6e:4f:
ae:8a:42:03:c2:28:e3:5c:88:3d:7d:39:00:1e:e1:
86:4f:72:a8:c4:1e:76:f6:29:2e:6e:dd:b2:d4:ef:
ec:62:13:24:2c:3d:3e:a1:9c:75:5a:85:d2:97:20:
a7:ad:fc:cb:8c:80:65:fe:ce:4b:df:d2:5c:e7:67:
4e:c0:ca:26:75:42:94:9d:ca:12:a4:11:c9:a1:38:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:21:23:EF:D1:E3:26:6A:9A:5A:41:9F:DF:AD:54:EE:76:50:8A:46
X509v3 Authority Key Identifier:
keyid:8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/1iEj79HjJmqaWkGf361U7nZQikY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.123.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ab:4a:3d:e7:7f:c6:35:c7:7c:93:c8:98:97:6d:60:0b:8b:
cf:4c:55:97:d1:36:4f:88:2a:4c:8d:75:99:af:ef:5d:e6:bf:
2e:05:3c:35:0b:5a:fc:d9:33:45:58:b8:da:4c:5a:1d:20:39:
0c:73:a6:08:da:d4:ce:ab:c9:ad:a5:a1:11:4b:fa:c1:61:7c:
c0:07:3a:66:a8:0d:9d:b7:ca:9f:e1:96:fc:20:ec:1d:94:b1:
69:39:0b:7a:3d:40:c8:37:a3:b4:cb:19:ba:3d:d5:93:38:0c:
2e:72:5e:e2:6c:a0:de:6f:8e:97:d8:39:81:47:59:66:fe:45:
27:b8:fb:9f:30:ed:39:83:9b:6b:77:b8:33:c4:dd:05:1d:64:
11:83:0c:5a:2a:8a:a7:33:48:78:22:36:a3:94:0e:0a:5b:a9:
4e:f0:a5:b0:33:a2:f8:aa:64:d6:38:59:14:bc:ce:8d:23:97:
26:68:16:c0:72:eb:6f:63:48:17:74:ff:cc:59:02:6d:40:3c:
d9:3c:ee:4f:cb:f1:06:c3:6b:16:ad:2f:fb:b3:e2:79:04:f9:
cb:71:8b:98:ce:65:fb:52:84:7e:89:a1:d3:c9:2e:74:e6:1f:
79:0d:05:ff:69:16:a0:9f:10:fb:c7:d4:51:2e:6b:fc:d9:bf:
f7:0c:92:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:45 2025 by rpki-client