Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/g81BDZuaFjsKwaBqFnyHLcFPLZs.roa
File: g81BDZuaFjsKwaBqFnyHLcFPLZs.roa (raw, json)
Hash identifier: jSl9q0mLuOCF9O2+fEMHTTPvVPdoA/bqHU0pF52USoE=
Subject key identifier: 83:CD:41:0D:9B:9A:16:3B:0A:C1:A0:6A:16:7C:87:2D:C1:4F:2D:9B
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 0194221F71233371027A3EF630EE6943712A
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/g81BDZuaFjsKwaBqFnyHLcFPLZs.roa
Signing time: Wed 01 Jan 2025 13:47:53 +0000
ROA not before: Wed 01 Jan 2025 13:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214929
IP address blocks: 109.235.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:71:23:33:71:02:7a:3e:f6:30:ee:69:43:71:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jan 1 13:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83cd410d9b9a163b0ac1a06a167c872dc14f2d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:38:0a:0b:37:78:ae:10:1c:62:6b:2e:e2:
eb:cd:dd:23:21:1d:ce:69:f4:7e:3d:d0:15:a3:25:
7c:6c:4d:f7:ef:73:2b:b2:dd:1b:db:32:74:c4:1d:
c4:b7:e1:94:2c:90:6c:ea:d6:a4:f2:ae:92:a9:57:
70:b9:a4:a9:de:77:e8:07:ea:7a:eb:5b:88:fb:a8:
0e:c3:84:5e:a9:67:2a:29:5a:88:09:61:f5:d0:fe:
ff:ec:03:2d:de:71:d0:d3:02:c0:1b:8e:fa:b0:1e:
ba:9a:88:5f:b6:15:bc:e8:b2:9c:81:23:79:5f:7f:
df:92:82:04:b9:2d:3f:d0:67:6a:a2:de:2c:a0:2f:
33:eb:c9:69:13:5e:56:bc:5e:05:fd:93:1d:ad:9d:
c3:36:a3:2c:ba:ec:a8:96:bc:19:e5:7e:9f:00:d8:
a0:f9:48:b0:40:3b:cb:39:5d:b8:d7:64:80:eb:4d:
24:f6:a3:52:79:52:37:95:05:97:76:65:01:b7:b8:
0a:bd:d5:fa:bc:39:19:e3:f1:79:fc:32:ad:16:97:
34:ca:51:04:67:f1:6f:94:a1:fa:3d:3a:e3:6d:af:
4c:e7:01:cf:59:be:20:b3:f5:72:76:01:49:ef:18:
70:89:55:76:99:3e:ab:f7:f3:2e:19:97:5a:f7:8d:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CD:41:0D:9B:9A:16:3B:0A:C1:A0:6A:16:7C:87:2D:C1:4F:2D:9B
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/g81BDZuaFjsKwaBqFnyHLcFPLZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.253.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a3:94:0d:44:5e:d0:61:36:a8:c0:a8:5b:06:24:71:94:e5:
53:ee:7e:39:d7:fb:ed:26:60:e8:69:c1:7c:db:6f:e0:f0:bc:
9e:4d:0b:36:1b:86:f5:28:fb:8c:10:82:3e:c5:63:b2:5a:71:
c9:d9:43:f5:c8:99:7b:8c:2c:0f:b6:a2:f8:7a:45:e2:5f:30:
f6:7d:f2:c2:be:96:67:d7:97:c9:16:a7:e8:18:b8:d8:55:87:
99:55:84:cb:e5:e7:11:0b:f7:28:0f:84:a7:16:93:15:16:50:
b6:7d:59:90:f0:91:1a:65:53:91:72:45:c7:3c:60:98:c1:25:
10:f1:1d:fa:fe:fb:54:b0:94:22:07:c9:bc:b8:a4:b6:ad:60:
5c:59:ca:2f:50:6f:94:d9:cc:e8:1c:6f:fa:4d:df:ed:04:bf:
8b:f0:33:c9:cf:4d:7e:06:93:6b:60:0a:98:40:32:6f:39:08:
c6:3b:57:23:76:a2:fa:52:fd:73:09:9e:64:31:57:19:73:27:
69:06:45:3a:2d:3c:a8:e5:d6:79:7a:82:a9:9e:8c:d4:45:b4:
e7:d2:06:6d:4c:42:0c:37:5d:b0:fa:13:b2:84:5e:c2:fe:b0:
7b:83:34:fe:01:f6:cb:1d:fa:40:ed:a1:55:7b:29:cc:bb:b3:
4d:75:08:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:20:03 2025 by rpki-client