Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/1-FBfA_qZ4ESfWWb5CknBppCISTE.roa
File: 1-FBfA_qZ4ESfWWb5CknBppCISTE.roa (raw, json)
Hash identifier: QzTjcdbwU5fU8MtxewS2wXNIG8qK/6tc0F56xQAkXFI=
Subject key identifier: F8:50:5F:03:FA:99:E0:44:9F:59:66:F9:0A:49:C1:A6:90:88:49:31
Certificate issuer: /CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Certificate serial: 019421B1D56E57B46C0FA057288876B109B6
Authority key identifier: 9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/1-FBfA_qZ4ESfWWb5CknBppCISTE.roa
Signing time: Wed 01 Jan 2025 11:48:10 +0000
ROA not before: Wed 01 Jan 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41273
IP address blocks: 83.171.216.0/22 maxlen: 24
2a09:2f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 11:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d5:6e:57:b4:6c:0f:a0:57:28:88:76:b1:09:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8505f03fa99e0449f5966f90a49c1a690884931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:2f:86:29:dc:f6:44:a1:6d:14:46:b5:02:
9e:e2:e2:3f:2c:bb:2d:7f:c1:05:94:0c:32:8e:36:
4f:80:3f:a0:c0:bf:97:94:b5:fc:b9:b5:9f:00:a5:
de:12:4e:e9:c0:6d:44:5d:fb:a9:2f:68:ec:4d:02:
0e:2f:d7:7b:59:56:17:34:87:25:b3:75:38:54:6d:
a8:89:22:cf:44:52:cd:de:04:07:93:65:44:e0:1e:
23:95:44:be:e6:39:0e:e0:f6:21:91:95:d6:fd:21:
8b:4f:f2:a4:cd:5c:d3:55:8f:5c:68:0b:2a:3d:11:
1c:40:aa:49:35:26:62:10:e4:e4:0c:6a:dc:af:b8:
67:08:de:21:c6:8b:ec:70:7b:ce:e4:a4:08:e0:2b:
67:16:e3:e4:c5:c8:ef:82:f0:45:23:4b:5b:37:60:
69:88:1a:96:92:6a:13:a7:d1:d3:a9:7b:76:b0:85:
90:4a:eb:c5:67:f8:e7:35:c4:4d:5e:a6:fe:ab:5b:
02:c7:35:63:f0:1a:0f:3d:5f:17:18:c8:cb:8d:93:
f4:9a:6a:b4:15:7a:57:c7:6a:5b:a8:11:8e:c1:7b:
70:b5:a8:fa:e5:c0:e0:a9:68:7b:e0:e1:3e:ed:20:
53:fe:b5:d8:f2:9a:e2:93:34:33:0a:5e:f5:cd:2c:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:50:5F:03:FA:99:E0:44:9F:59:66:F9:0A:49:C1:A6:90:88:49:31
X509v3 Authority Key Identifier:
keyid:9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/1-FBfA_qZ4ESfWWb5CknBppCISTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.216.0/22
IPv6:
2a09:2f00::/29
Signature Algorithm: sha256WithRSAEncryption
81:78:92:93:ce:4e:c3:ea:1a:41:b4:cc:42:cc:ba:b2:6a:b9:
9b:35:ad:24:13:3f:c3:71:45:bd:f6:c5:e3:48:bb:a7:6d:b7:
66:74:0d:2d:93:ec:ac:f7:a2:39:a3:f0:26:67:fd:a1:26:6d:
9d:cd:b3:2e:42:9c:75:73:08:bf:d3:a1:02:c5:89:23:01:80:
48:51:a4:1e:a7:0d:de:1a:78:c3:f2:0b:e0:52:c9:83:f5:fd:
ed:7b:85:f3:fd:8e:a0:cb:be:77:b2:8d:ec:7a:db:9c:17:de:
e5:38:7e:93:41:9b:a7:10:4f:aa:ec:b9:e8:ef:1d:e0:ff:43:
f4:9f:7d:d0:02:cb:26:40:1f:65:e0:95:0a:0a:ce:58:06:1f:
47:d4:c5:47:ab:0f:19:7c:ec:db:d0:a8:c6:fa:84:18:b1:ab:
55:5c:6e:3f:5a:3c:92:a2:51:67:91:ff:08:2a:90:69:9e:20:
7e:36:23:f7:59:2d:2c:91:dd:59:d7:87:32:09:8c:4c:47:f6:
de:f5:27:ac:d9:52:26:9c:3d:05:74:1e:65:5d:02:b7:3e:74:
e5:af:63:ea:f4:12:03:f8:da:f3:9c:21:0c:ec:ae:88:0d:0c:
45:2d:e8:28:6c:aa:5f:84:9f:f3:00:f7:6e:eb:26:0e:cc:d9:
ae:56:2e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:35:44 2025 by rpki-client