Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/1tIKgu9zIxn-X__dh7X40Ez2yro.roa
File: 1tIKgu9zIxn-X__dh7X40Ez2yro.roa (raw, json)
Hash identifier: I7j76og90Bzenb6NN5y/FV3ZxjjrPcp5unqi/MuouAM=
Subject key identifier: D6:D2:0A:82:EF:73:23:19:FE:5F:FF:DD:87:B5:F8:D0:4C:F6:CA:BA
Certificate issuer: /CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
Certificate serial: 0194221FEC6CD4FC0C94D78897D4E0DA39F3
Authority key identifier: 77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/1tIKgu9zIxn-X__dh7X40Ez2yro.roa
Signing time: Wed 01 Jan 2025 13:48:25 +0000
ROA not before: Wed 01 Jan 2025 13:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211645
IP address blocks: 91.205.124.0/24 maxlen: 24
2a10:41c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ec:6c:d4:fc:0c:94:d7:88:97:d4:e0:da:39:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
Validity
Not Before: Jan 1 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6d20a82ef732319fe5fffdd87b5f8d04cf6caba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:7d:51:0a:d3:2e:72:06:88:4f:6e:ab:1e:
d9:e5:7d:22:71:e8:a7:20:b9:b1:5e:82:f8:9b:10:
ea:e8:b5:01:67:5c:a4:bf:64:9a:1b:7f:61:3b:2e:
d6:b0:f5:c3:75:55:de:1e:73:c6:ea:ee:eb:6e:43:
67:39:9c:f0:c1:74:d9:53:53:db:a6:80:ff:7e:a3:
8d:ea:ae:bc:e6:0d:e5:36:30:ee:f2:49:0a:1a:1e:
16:2b:ad:7e:d1:d4:bd:1c:e5:7a:14:e7:80:cb:d5:
fd:62:32:d5:8b:59:9a:0f:ab:5d:1c:e3:2a:39:5c:
e4:8a:5d:e1:f7:6a:b4:23:51:ec:4e:da:ca:2e:4e:
be:df:6f:19:36:48:96:1e:e7:d5:04:69:32:37:dc:
9e:53:99:e0:2e:d9:e3:c8:7a:79:e8:38:8d:9a:1f:
4e:44:8d:18:f7:7c:3e:84:5d:36:b2:52:77:cc:54:
a8:e1:eb:c6:e2:e9:24:73:e9:42:4f:e7:bf:17:b0:
38:66:79:05:c4:89:4d:d9:48:19:4f:a3:59:a6:21:
cd:44:6d:d4:f5:fb:1f:2c:87:ad:cc:92:6f:80:f7:
b1:b2:5f:35:24:7d:5b:57:2c:69:d2:d7:02:49:af:
32:96:60:e8:cb:f5:22:de:3f:67:90:5c:9e:9f:15:
e1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D2:0A:82:EF:73:23:19:FE:5F:FF:DD:87:B5:F8:D0:4C:F6:CA:BA
X509v3 Authority Key Identifier:
keyid:77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/1tIKgu9zIxn-X__dh7X40Ez2yro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.124.0/24
IPv6:
2a10:41c0::/29
Signature Algorithm: sha256WithRSAEncryption
44:d2:94:d5:73:e0:bd:e1:e7:88:84:20:10:bf:e6:63:c5:62:
e2:3f:b9:c9:fe:5a:12:92:75:25:6d:7f:53:cf:d1:0d:e6:90:
a7:cb:b0:91:15:dd:31:3c:c4:ea:eb:98:35:11:da:07:49:fb:
05:79:c2:79:88:6b:08:0e:2f:77:03:37:17:a9:65:a9:12:c9:
11:79:f1:c1:02:40:5b:ea:d1:c6:0a:8a:e9:c9:11:dc:45:9d:
d4:2a:e3:de:9b:c0:ee:5c:46:08:d7:69:b8:63:e7:16:3b:aa:
2a:ee:97:8d:af:5b:e2:11:ce:13:84:9b:8e:0f:36:5a:31:84:
6c:b5:67:15:2a:e2:6e:51:66:0d:30:76:d5:f6:7c:dd:65:3f:
05:49:ee:4b:45:20:5e:fa:d2:33:1c:3e:1f:d5:02:ac:a7:41:
da:19:6f:80:f0:80:78:8a:f7:81:ef:fe:3f:b6:ec:30:b2:f8:
eb:e4:d6:b1:fd:7c:87:cb:78:02:c7:b2:94:03:da:08:03:30:
e1:39:21:ed:67:9d:32:49:d7:ff:d6:7c:c5:ba:ee:1f:02:48:
ba:2a:65:a0:9a:95:89:94:2d:aa:18:d7:06:5a:dd:9a:ba:09:
0b:4a:37:51:57:fd:eb:a7:1d:f5:e7:18:97:b5:8c:27:06:c5:
9f:56:49:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:06:57 2025 by rpki-client