Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8Y93Ui6LI_FvFnzY0lc8HBAT0aI.roa
File: 8Y93Ui6LI_FvFnzY0lc8HBAT0aI.roa (raw, json)
Hash identifier: zj0NcVfunH4gJJi4cGUAAX7c8xIxezUYMfSXwVKubYY=
Subject key identifier: F1:8F:77:52:2E:8B:23:F1:6F:16:7C:D8:D2:57:3C:1C:10:13:D1:A2
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746B6F07F17EDB477A3D916DDB7EED5
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8Y93Ui6LI_FvFnzY0lc8HBAT0aI.roa
Signing time: Thu 02 Jan 2025 13:48:53 +0000
ROA not before: Thu 02 Jan 2025 13:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211711
IP address blocks: 78.135.70.0/24 maxlen: 24
188.132.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:b6:f0:7f:17:ed:b4:77:a3:d9:16:dd:b7:ee:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f18f77522e8b23f16f167cd8d2573c1c1013d1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:31:75:2a:8a:47:f0:98:1d:05:6b:fc:7d:
6f:7c:a2:a0:a3:a8:ac:cc:20:7f:fa:4a:56:56:dd:
ca:bf:c2:19:f5:e9:8f:6b:d7:35:47:fd:4a:55:a7:
07:66:1a:5a:d5:0d:03:88:8a:f2:66:f7:0f:80:77:
3e:6f:e5:58:3f:30:c1:41:fe:4f:89:6e:0a:06:c1:
e2:a3:da:d4:74:24:93:1e:0b:ec:ab:fb:57:49:6f:
db:f1:b4:6c:36:8c:29:01:50:de:22:f6:97:5f:04:
33:18:9f:e7:2e:25:db:c7:88:f4:5c:e1:90:94:80:
da:15:34:b2:2e:35:2d:86:31:7a:78:3c:83:44:5e:
9d:a0:6c:c3:d2:74:2a:54:7d:6a:4a:8e:c5:7b:59:
52:90:f6:1f:5a:12:0e:01:e3:7c:50:cf:be:70:8b:
9d:c7:fb:b7:ca:e2:9f:7b:d5:a9:87:93:4b:7c:f0:
f5:52:a4:de:9a:1e:21:38:ac:83:a8:0f:ff:21:68:
1c:c4:ae:91:48:5a:2a:bc:f4:99:6f:be:e0:e6:e8:
ee:f2:01:b2:69:28:cf:fd:51:60:69:5f:53:29:5b:
75:d7:fd:63:92:67:dd:04:fb:74:40:95:67:e6:3d:
65:86:f5:9a:b0:47:da:9b:b6:10:59:83:58:32:7d:
72:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8F:77:52:2E:8B:23:F1:6F:16:7C:D8:D2:57:3C:1C:10:13:D1:A2
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/8Y93Ui6LI_FvFnzY0lc8HBAT0aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.70.0/24
188.132.159.0/24
Signature Algorithm: sha256WithRSAEncryption
55:db:1b:d3:de:56:78:5b:45:62:ae:ba:ec:c2:10:58:a6:7c:
b6:5b:bf:91:68:48:12:a8:4b:26:5b:8d:b4:27:33:52:d8:bf:
c0:90:d6:36:cd:59:3b:f9:81:8c:12:65:8b:ae:39:7a:d8:c0:
f8:f3:76:d6:df:09:0f:4a:f5:b1:26:92:94:68:cc:19:a0:2e:
d3:ba:b6:97:be:01:c0:11:2c:d3:05:26:62:46:86:b5:81:f3:
48:fe:5b:ff:64:e7:c0:dd:49:41:a9:59:05:89:df:1a:76:e0:
00:a6:5a:ef:63:4b:f4:b2:ee:66:cf:67:05:d3:07:02:e5:af:
de:63:d5:46:a3:a8:57:a2:05:1f:b5:e2:c2:11:10:ab:1f:4f:
ca:7f:7f:d4:6f:62:f7:fb:f3:c9:e6:59:d3:fd:96:2a:64:00:
69:8d:6c:34:bf:20:fb:94:a6:18:69:f3:fa:85:cd:09:35:8c:
c8:34:5a:7a:e0:2b:5d:56:13:1f:20:d1:3a:d0:f6:1a:dc:56:
db:aa:07:eb:4b:c9:49:d5:55:c5:6a:00:bf:df:14:7d:d4:78:
6c:cd:22:19:38:37:3f:f6:cc:7a:b5:a4:21:c2:8b:f1:10:90:
a4:de:d1:5d:a4:f0:29:ff:91:12:a5:ce:91:2e:7a:59:d7:15:
a3:2c:b0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:27:24 2025 by rpki-client