Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1V-M8IfVlFDixQv7qWK7CBvA-I4.roa
File: 1V-M8IfVlFDixQv7qWK7CBvA-I4.roa (raw, json)
Hash identifier: EbmQdFFyKsrd5tbHzPVYdjoCyOS8tCaWk3RmJ2oua6A=
Subject key identifier: D5:5F:8C:F0:87:D5:94:50:E2:C5:0B:FB:A9:62:BB:08:1B:C0:F8:8E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F94037CE88A8E05ECD239AFF8A21C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1V-M8IfVlFDixQv7qWK7CBvA-I4.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41102
IP address blocks: 93.170.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:94:03:7c:e8:8a:8e:05:ec:d2:39:af:f8:a2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d55f8cf087d59450e2c50bfba962bb081bc0f88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:85:5b:3c:6e:3b:64:fd:50:e2:8d:14:aa:
c8:d6:9a:e1:df:ef:9a:50:31:39:84:dc:b4:0b:03:
8a:9f:58:d5:06:90:26:f1:22:ce:01:cb:3d:09:55:
71:90:a9:cf:b7:3f:6e:08:ce:84:3c:fa:40:60:b2:
d6:7f:85:d7:e5:7d:e5:8e:6f:65:09:18:c9:28:2c:
73:41:06:e6:b9:db:f9:eb:ab:dc:91:d3:32:a3:48:
14:c3:83:b8:28:e0:6b:48:91:fb:22:be:79:56:53:
36:a6:c1:e1:4e:dc:58:a5:ca:31:ab:0d:4f:88:97:
67:1d:e2:56:6a:42:a6:a3:f5:2d:b2:c8:7d:99:d9:
82:84:96:b4:0f:59:1f:77:fe:db:d5:ae:f5:37:dd:
da:c7:a2:ad:7c:cd:1c:7b:16:12:08:70:50:91:e7:
ba:ab:f1:25:8e:b3:89:66:a0:6c:36:13:6e:78:6b:
f6:a1:5c:b7:a2:2f:85:02:03:e8:1f:86:9a:bd:7e:
ba:d7:74:a4:6e:0e:4d:01:3c:22:9b:59:ae:c6:62:
c7:54:64:3b:ea:3f:af:04:d4:52:7f:a5:fd:59:2b:
cf:eb:ab:9e:fa:1c:a1:99:ea:ad:5e:22:ba:e0:c9:
67:69:a9:d9:e7:be:d6:a2:bc:74:55:da:5c:c4:ab:
42:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5F:8C:F0:87:D5:94:50:E2:C5:0B:FB:A9:62:BB:08:1B:C0:F8:8E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1V-M8IfVlFDixQv7qWK7CBvA-I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.218.0/24
Signature Algorithm: sha256WithRSAEncryption
51:95:cc:ca:b4:4e:34:85:64:6e:c1:b7:52:ff:0a:3c:43:e4:
c3:f1:7d:77:90:b3:44:2f:be:42:9c:fb:30:a8:6a:5f:3e:10:
97:57:e0:33:95:5d:09:b5:d8:be:ad:ee:9d:1b:ce:19:e2:68:
15:1b:ce:be:17:9c:5d:28:78:c4:b2:fe:c6:aa:c0:ae:0b:f8:
0e:7c:59:b7:a9:9d:6d:59:1d:54:44:5f:4d:4e:50:1c:3b:62:
3c:18:61:f5:53:3c:35:18:dc:03:85:34:b2:f4:e7:06:2a:5a:
ee:67:09:61:29:bd:1c:4a:e4:48:f1:6d:97:d9:c7:34:fe:6c:
b1:0f:6f:c9:41:46:a7:c0:f6:b9:e4:75:fa:e5:60:60:2c:01:
e7:b3:5d:9b:fc:36:3f:b5:f2:f1:40:2b:39:99:8e:db:9c:e3:
84:23:39:f8:a6:6e:3f:b2:8e:0c:5d:7a:e1:42:e5:2a:51:1e:
84:a6:18:16:48:e4:a4:cc:5b:51:c7:7a:e8:70:08:28:90:f0:
fd:c4:bf:50:26:b4:2f:70:54:73:84:33:35:0a:44:22:8f:41:
99:f8:0b:cc:ac:40:1a:73:f3:b2:88:2f:13:94:08:3d:06:6e:
9c:46:ee:c2:97:82:d8:ae:2f:9a:db:d7:44:a2:e7:e9:f5:fe:
21:e3:ad:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:00 2025 by rpki-client