Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/pBfkqeCcf8kyWik2qeWgXpT9J0w.roa
File: pBfkqeCcf8kyWik2qeWgXpT9J0w.roa (raw, json)
Hash identifier: x6edmQyN+AuRQRVkdUM3z3US8XBwQrqEnFPt4p+BBqw=
Subject key identifier: A4:17:E4:A9:E0:9C:7F:C9:32:5A:29:36:A9:E5:A0:5E:94:FD:27:4C
Certificate issuer: /CN=59785a21e2d07c68ff317558c69ef118cc75805a
Certificate serial: 0194214461BAFB0904471BB6A08E3EABE0B2
Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/pBfkqeCcf8kyWik2qeWgXpT9J0w.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25206
IP address blocks: 83.97.64.0/21 maxlen: 24
84.201.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:61:ba:fb:09:04:47:1b:b6:a0:8e:3e:ab:e0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a417e4a9e09c7fc9325a2936a9e5a05e94fd274c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:bc:09:93:a8:56:31:88:4f:52:1a:f1:42:
6f:29:46:18:a8:9e:4f:53:5d:ee:c4:ce:3b:68:87:
37:b0:1c:68:4a:5b:5a:79:6d:d3:d8:23:85:49:6e:
df:00:b9:63:3d:4d:af:34:10:e2:2b:6e:a9:7d:ae:
d1:90:cc:5d:6e:e1:fb:97:43:13:e0:35:68:2b:16:
d3:05:f0:8c:d0:d2:86:70:b1:9a:44:f0:a9:e6:07:
2d:c6:55:a5:c9:12:25:84:f5:47:47:6e:00:7f:57:
1c:59:23:5e:3e:fa:6f:2f:34:7d:83:c9:22:7e:a9:
e4:50:13:db:84:5a:b8:49:76:c2:ae:9c:aa:63:dc:
4e:68:37:34:f3:5d:eb:03:30:b3:b9:63:e3:5c:01:
60:a0:0d:bd:33:d0:c0:02:83:dd:f2:8d:bf:71:bb:
2b:5f:9b:bf:ea:dc:95:0f:99:dd:31:32:61:1e:72:
a3:75:dd:5b:1a:bc:7f:bb:e7:34:19:17:c6:41:d8:
81:ff:89:7f:c6:55:a0:70:68:25:33:82:9c:fb:2e:
60:43:d8:08:77:07:fd:a2:54:98:64:93:dc:bb:d9:
7d:d3:c3:11:12:0c:45:aa:62:e4:92:2e:5b:58:0e:
d4:45:f9:a4:b9:df:a5:bc:a6:d3:28:3d:51:c0:f8:
a9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:17:E4:A9:E0:9C:7F:C9:32:5A:29:36:A9:E5:A0:5E:94:FD:27:4C
X509v3 Authority Key Identifier:
keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/pBfkqeCcf8kyWik2qeWgXpT9J0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.64.0/21
84.201.192.0/20
Signature Algorithm: sha256WithRSAEncryption
51:d9:29:ac:8b:a2:93:22:cb:b1:15:0b:51:59:51:9d:fc:4c:
a4:60:67:1e:2b:34:27:dd:94:4f:4f:ce:49:5f:bc:fb:53:8c:
ff:dc:76:31:b2:97:f1:4a:6a:80:77:76:73:7d:90:9c:84:de:
05:c4:25:12:4e:03:73:21:2c:68:e7:3c:c6:ac:87:40:76:e8:
ba:cb:a2:84:77:b6:80:85:a7:45:08:9c:57:73:7d:15:89:5a:
ad:07:84:ec:4c:49:92:db:12:44:a4:5f:b9:27:b9:27:26:29:
8b:f9:5c:44:8b:f3:52:f9:0a:25:9c:41:38:02:f6:b5:9f:43:
64:f7:52:7b:9e:07:80:69:a5:e5:03:e8:23:2f:49:70:21:a6:
d4:1d:54:96:b8:1c:6b:8e:2f:ef:98:34:0e:25:27:93:08:7b:
72:8a:ad:5e:31:50:03:43:1d:ac:7d:fe:7c:cc:46:79:7b:3c:
68:72:80:c8:43:5d:31:34:fe:48:3e:45:c4:0e:5c:4e:49:4a:
9a:65:d7:a4:72:be:30:de:19:b2:cb:bb:11:4a:9d:42:0b:6b:
1e:cf:c8:4d:c0:da:12:f7:e8:d9:d2:86:7e:3a:c9:c1:df:23:
b8:09:07:9e:2c:28:32:21:82:84:d7:26:d3:1f:7b:9d:1d:ac:
63:e8:d8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:58:18 2025 by rpki-client