Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/83F_Jp7hhNkTyKzmQu0uAqQ-Hug.roa
File: 83F_Jp7hhNkTyKzmQu0uAqQ-Hug.roa (raw, json)
Hash identifier: /GIKVjlq0TkCjqFIvHfnkG7+yghgu5kkQctxwrpV6qw=
Subject key identifier: F3:71:7F:26:9E:E1:84:D9:13:C8:AC:E6:42:ED:2E:02:A4:3E:1E:E8
Certificate issuer: /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Certificate serial: 019423D73D37FCC6B63646C83F4E768D77A5
Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/83F_Jp7hhNkTyKzmQu0uAqQ-Hug.roa
Signing time: Wed 01 Jan 2025 21:48:15 +0000
ROA not before: Wed 01 Jan 2025 21:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41289
IP address blocks: 141.38.0.0/16 maxlen: 16
141.38.12.0/24 maxlen: 24
2001:67c:1364::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:3d:37:fc:c6:b6:36:46:c8:3f:4e:76:8d:77:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Validity
Not Before: Jan 1 21:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3717f269ee184d913c8ace642ed2e02a43e1ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:97:68:da:87:7e:fa:5a:b5:98:ce:e9:35:
82:fb:42:24:56:f9:f9:df:55:f3:4b:f0:82:20:43:
ca:f6:bb:97:ca:34:ae:f0:9f:63:ec:8b:69:d4:63:
68:84:fc:32:47:d1:ce:27:9d:a3:40:26:fd:fe:38:
25:62:f6:3d:b9:de:c6:92:4b:fa:da:5d:91:04:16:
3a:cd:d2:e5:0f:3d:51:59:8b:b0:8b:ce:f3:62:e9:
c6:68:54:0e:1f:38:2f:1c:b8:93:62:3c:8b:dd:fd:
41:3b:c7:28:12:b5:17:f0:84:57:d5:69:25:63:41:
fa:5b:4d:a4:6d:2e:78:9f:3b:e5:ec:88:49:02:ee:
48:0a:97:7e:a2:7a:df:d9:2f:a1:f6:5f:28:43:06:
ad:86:f3:2a:1e:8a:c0:5d:42:fa:ae:f6:5e:0a:25:
27:7d:37:81:9f:e4:e3:0b:c3:05:87:b5:09:f1:20:
1d:81:78:fd:03:94:05:a4:0e:56:7e:be:75:59:8e:
21:d1:17:4a:f6:dc:1f:71:98:b4:93:63:ff:11:eb:
7d:02:dd:d1:f5:32:10:23:dd:71:e0:ff:fe:71:60:
b5:a1:83:d1:54:44:a7:a0:ca:aa:00:e0:04:2a:e7:
12:60:2e:fb:41:58:8e:a5:9e:26:1b:84:be:26:fd:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:71:7F:26:9E:E1:84:D9:13:C8:AC:E6:42:ED:2E:02:A4:3E:1E:E8
X509v3 Authority Key Identifier:
keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/83F_Jp7hhNkTyKzmQu0uAqQ-Hug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.38.0.0/16
IPv6:
2001:67c:1364::/48
Signature Algorithm: sha256WithRSAEncryption
2b:42:81:7c:5a:96:36:4d:f2:6f:88:92:68:13:02:61:bf:91:
1a:47:8f:dd:86:85:fd:de:d3:67:3a:38:f3:78:34:9f:72:65:
cf:f2:ce:f6:01:28:b2:eb:cf:4f:6e:54:f3:13:a7:81:a4:71:
88:b4:7c:91:f1:19:d9:6a:3f:8a:9e:96:ce:9c:52:31:ea:fe:
ec:df:06:b3:dd:27:e4:29:3d:75:fd:90:47:0f:94:b1:2b:b8:
47:29:22:47:d5:2f:2c:e0:81:c9:28:0e:39:cb:52:c8:3f:a7:
55:ff:b0:8a:ca:1d:64:1e:41:a2:f7:e3:76:c3:d3:1f:61:d3:
b2:6d:e5:25:92:ed:c3:c9:aa:ea:fa:7e:19:b2:06:d9:54:ee:
77:24:d8:23:37:1c:21:ed:6a:33:00:34:cb:38:9d:eb:2a:6c:
29:eb:b9:16:25:b0:f3:81:08:5a:0b:a6:c3:f3:e0:aa:f4:e4:
77:4c:4b:de:8b:ea:f6:b0:ae:31:88:68:0d:3d:bb:b1:98:c9:
94:f1:1a:6d:6f:43:8e:31:31:70:cd:ee:f6:d5:eb:f2:ad:ac:
00:6d:c7:2e:4b:d1:a0:ec:24:5b:8d:b3:40:7f:ab:d5:36:d9:
10:c7:cd:58:98:26:6e:65:c6:30:43:22:70:39:bb:1c:4b:e8:
ec:e5:56:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:35 2025 by rpki-client