Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/1-d5l7iEM0a18LhX1EyGB8md8n8M.roa
File: 1-d5l7iEM0a18LhX1EyGB8md8n8M.roa (raw, json)
Hash identifier: 501zHAdTFZeEcvr80KDCfqteaSP9iBPoj2GeSoFGK4o=
Subject key identifier: F9:DE:65:EE:21:0C:D1:AD:7C:2E:15:F5:13:21:81:F2:67:7C:9F:C3
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 019425207F36708F47050DEB66A49A722F09
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/1-d5l7iEM0a18LhX1EyGB8md8n8M.roa
Signing time: Thu 02 Jan 2025 03:47:54 +0000
ROA not before: Thu 02 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207433
IP address blocks: 84.47.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:7f:36:70:8f:47:05:0d:eb:66:a4:9a:72:2f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 2 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9de65ee210cd1ad7c2e15f5132181f2677c9fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:d5:80:d8:4d:0d:5e:b8:08:9f:31:fa:07:
f8:52:e8:31:12:5d:9a:1d:f9:4a:e8:38:13:bd:f2:
82:9b:d5:24:15:d8:8e:08:ae:fc:ef:4c:21:59:1d:
22:1e:b8:bb:76:fb:09:5d:01:be:a8:f8:fa:9d:e0:
6a:f5:89:c7:59:89:6a:34:fb:f7:5a:3f:58:3f:46:
15:fd:ff:38:10:fa:3b:e2:08:e3:e6:06:5f:3f:21:
9f:de:a5:2c:36:88:b8:6a:d0:99:35:9d:4c:aa:30:
18:30:3f:95:0e:f9:22:53:8c:4b:4a:da:66:f0:36:
a9:60:a6:c1:2c:87:aa:7f:72:59:f8:9a:b0:2d:b2:
67:06:d5:01:bb:35:e6:0d:50:db:09:81:e3:e4:6a:
45:01:97:ac:2d:c0:8d:57:5a:17:91:ff:77:c9:d5:
63:80:e6:7e:68:2d:2b:77:ce:c8:95:71:7b:fc:ea:
dc:3f:85:86:83:d7:ba:99:3b:36:0b:85:ca:da:66:
6c:4b:05:f8:ee:38:4c:ce:c7:8e:62:40:8e:c4:e7:
9c:8f:f0:07:fe:f6:22:77:6d:fa:a9:10:79:37:d8:
e5:12:2c:8c:c9:30:01:45:e5:cc:6f:89:7a:bb:ff:
fc:ed:ef:44:09:50:96:7a:b8:13:74:47:46:17:ce:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DE:65:EE:21:0C:D1:AD:7C:2E:15:F5:13:21:81:F2:67:7C:9F:C3
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/1-d5l7iEM0a18LhX1EyGB8md8n8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.163.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:4c:c2:e7:8a:08:67:6e:2f:5e:48:4d:ab:68:b7:e7:4a:3b:
2f:b5:4d:da:f7:6b:64:a6:15:4c:ce:79:98:03:15:3a:3f:42:
9b:eb:35:8f:84:67:fa:e3:36:9f:c4:fd:49:8f:54:95:01:94:
f6:d5:41:84:cf:d2:fe:f4:24:9d:ae:85:7a:fc:a5:23:2c:bd:
6f:8a:04:cc:45:0f:6b:7b:08:36:cd:d4:44:8e:76:19:2a:3a:
5f:4f:99:71:d5:ff:d5:ec:01:f0:9e:7e:2a:3f:f5:1c:1c:39:
00:da:4d:48:d6:b2:34:fd:4b:51:f3:63:50:f7:f5:d5:8d:af:
65:56:5c:a7:43:a0:73:41:00:4b:ad:3f:55:8a:fd:af:30:e0:
fd:ad:44:5e:c9:a5:23:e2:6a:c2:2e:1b:07:e3:f3:4d:65:c3:
24:06:0b:f2:5b:ea:15:ea:16:4a:97:31:b9:8d:86:69:34:ed:
e3:78:85:ea:b5:72:22:30:07:91:2e:05:56:0e:5e:89:84:d5:
3b:d6:38:5b:0e:f6:48:bd:93:d1:9b:30:b7:94:5c:c2:56:ea:
3b:0d:0f:de:56:58:cf:ae:bf:e1:c2:59:78:48:f9:b7:3c:fb:
a0:41:4b:ad:f8:24:24:a1:59:91:8c:b9:7f:b4:1a:b5:4c:fe:
19:f3:c4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:37:43 2025 by rpki-client