Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/atuyYpoVRKQHnFtgDV3FM-vFLxM.roa
File: atuyYpoVRKQHnFtgDV3FM-vFLxM.roa (raw, json)
Hash identifier: qXfV8yAI5tXvkScsLElC1FZo67Cs+dJHRWE3vQl62to=
Subject key identifier: 6A:DB:B2:62:9A:15:44:A4:07:9C:5B:60:0D:5D:C5:33:EB:C5:2F:13
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019421B205E6DE8862AAB377953EDC5ADB0C
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/atuyYpoVRKQHnFtgDV3FM-vFLxM.roa
Signing time: Wed 01 Jan 2025 11:48:21 +0000
ROA not before: Wed 01 Jan 2025 11:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 212.116.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:05:e6:de:88:62:aa:b3:77:95:3e:dc:5a:db:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jan 1 11:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6adbb2629a1544a4079c5b600d5dc533ebc52f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:15:90:df:25:d4:b6:80:b5:1a:a5:81:3b:4d:
88:6f:1d:2d:ca:8a:e1:f8:e4:cc:b9:cd:86:b2:03:
b6:92:aa:0d:06:da:c1:1d:02:c4:47:d1:a0:42:0f:
a9:ae:9e:6f:93:4a:9e:55:b2:10:81:8b:61:90:b1:
d6:e9:9f:f5:80:d7:e6:8c:14:5d:d3:7c:4f:56:f9:
9f:4d:6e:3b:97:6c:3d:2a:c5:3f:f1:18:cc:a8:0b:
5e:b6:50:8b:d5:7b:85:8e:21:b7:7c:61:86:a6:e3:
13:fb:1f:d8:22:e3:88:c2:b0:98:cb:ff:92:6d:89:
71:ab:4f:3f:d0:2c:6c:61:6c:2d:83:60:92:63:d3:
a6:5e:e2:3d:76:b9:41:c4:6d:74:37:e0:53:d1:32:
86:35:73:88:37:b2:22:96:72:5c:ec:5a:5d:55:8e:
30:54:5d:18:8b:c7:a7:d2:75:a0:18:fc:75:b2:ca:
3f:26:1c:28:f2:79:57:ff:97:8b:19:9e:11:48:53:
2f:20:e7:02:01:26:94:62:36:2b:91:d1:a8:99:cd:
31:51:51:e8:9b:d5:51:d2:e6:7c:30:b6:36:72:0b:
12:1e:86:a1:ce:7b:25:45:a2:9b:b1:d0:df:8b:29:
94:56:b5:06:4c:1d:0c:ac:18:ee:0b:e7:c8:e3:d8:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DB:B2:62:9A:15:44:A4:07:9C:5B:60:0D:5D:C5:33:EB:C5:2F:13
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/atuyYpoVRKQHnFtgDV3FM-vFLxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.243.0/24
Signature Algorithm: sha256WithRSAEncryption
04:cc:a0:8c:eb:30:0f:ff:ee:00:1d:0a:84:02:e5:35:20:c6:
17:ab:91:e6:e5:ca:f6:10:c1:d5:6b:8f:ee:38:08:07:ac:b5:
84:1c:fc:cf:4e:1c:ab:d0:38:35:6e:d2:b8:2c:22:c3:87:d4:
8e:27:2b:99:d9:83:28:5b:75:83:09:64:d0:5e:ce:bb:ba:34:
0a:19:56:a2:bc:41:9e:84:6b:d0:af:8b:9a:07:0d:39:ce:4d:
0e:99:17:48:54:88:35:82:4e:65:5d:de:55:23:35:a3:16:9f:
61:d2:dc:17:b9:6d:80:a1:6d:fb:42:aa:0e:69:87:8c:6d:9b:
44:b2:30:3e:6b:f7:9e:5c:67:79:65:79:83:12:50:d7:ce:67:
0d:34:fc:ff:10:d5:00:a0:cf:9d:23:b9:50:a8:41:c8:96:61:
76:9e:b8:7f:20:4f:1d:15:2c:14:54:a0:16:1b:8c:f1:94:04:
e3:5e:4e:96:88:6a:c8:32:71:68:ab:5d:12:ba:fe:d2:1b:c4:
d7:da:de:6d:66:05:ff:c9:09:b7:98:81:81:a2:51:34:76:d8:
77:e2:7c:cc:55:44:7e:e4:cc:94:10:11:02:ec:ca:c1:5a:e1:
30:72:b7:d6:8a:8e:99:e5:85:1c:7c:b1:7a:f2:95:f4:4d:cf:
09:a8:8a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:55 2025 by rpki-client