Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/aZdPCjQPrpXH6_ugUt-kcLfLBww.roa
File: aZdPCjQPrpXH6_ugUt-kcLfLBww.roa (raw, json)
Hash identifier: bvQOO3EjkLFVPQ56lvOeF4mzLEyN5lqfogJ0iJmnl1o=
Subject key identifier: 69:97:4F:0A:34:0F:AE:95:C7:EB:FB:A0:52:DF:A4:70:B7:CB:07:0C
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019428260B46081CE0CF75520BD09E21A71E
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/aZdPCjQPrpXH6_ugUt-kcLfLBww.roa
Signing time: Thu 02 Jan 2025 17:52:49 +0000
ROA not before: Thu 02 Jan 2025 17:52:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35913
IP address blocks: 188.191.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:0b:46:08:1c:e0:cf:75:52:0b:d0:9e:21:a7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 2 17:52:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69974f0a340fae95c7ebfba052dfa470b7cb070c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1d:45:65:39:a7:55:9f:3f:cc:9c:a2:be:a8:
d0:11:27:eb:5a:a0:04:33:d1:72:76:85:22:8e:a2:
3f:82:ee:58:29:26:72:ea:d7:1b:f2:1b:cc:b4:0c:
b0:cc:99:62:d5:45:1e:a9:71:50:7f:27:6c:9e:9c:
45:c6:ac:92:d6:04:f1:d0:1c:5c:f1:ab:bb:2f:a1:
44:cf:f3:fe:68:15:f4:9e:f2:b2:1e:eb:1b:de:42:
19:8b:3b:60:50:af:7a:dd:1e:9a:b4:ef:c8:10:63:
53:6e:7f:48:5b:52:e8:20:55:58:bf:a3:c8:15:a7:
f2:7a:3a:20:94:be:83:9f:7c:70:9a:b0:3e:47:96:
c5:8d:95:30:da:88:9f:71:95:03:bb:a3:fe:8c:86:
88:0a:5c:f5:44:53:bf:84:ed:ab:93:30:1d:4c:6f:
3d:d8:5e:90:1f:a1:4a:45:d7:05:83:14:01:4e:90:
98:88:53:f8:8e:d9:b0:1f:0d:8b:20:63:1b:09:f6:
6a:de:01:a2:c8:ea:4a:dd:3e:05:35:02:08:28:07:
d8:32:9e:cd:40:db:ed:72:39:13:17:7d:e9:87:93:
8c:4c:8c:26:de:6b:10:ac:62:ac:b9:fb:38:eb:3a:
7d:f4:be:20:a5:0f:31:22:bb:51:b1:b2:fa:52:30:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:97:4F:0A:34:0F:AE:95:C7:EB:FB:A0:52:DF:A4:70:B7:CB:07:0C
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/aZdPCjQPrpXH6_ugUt-kcLfLBww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.111.0/24
Signature Algorithm: sha256WithRSAEncryption
85:6e:6f:b2:32:23:0c:51:05:ce:5c:b9:0b:8c:92:ef:95:3e:
68:02:26:91:6a:50:48:8c:d7:e5:b0:ce:55:ae:e3:61:b2:0e:
27:0b:d0:e7:1e:96:68:8d:41:23:f4:97:64:bb:cd:56:f9:01:
05:bc:1d:15:55:ba:4e:0e:b2:49:78:5c:26:5b:0f:16:02:40:
8e:04:19:32:43:75:c5:61:d6:84:60:4f:52:8b:55:97:b5:e2:
df:55:c6:01:cd:76:01:23:aa:0c:76:5f:aa:f1:7d:ea:a1:3c:
39:bc:de:21:cb:79:96:ef:14:5e:e2:f2:5a:09:c7:e6:50:32:
c3:ef:ea:bc:01:eb:b8:07:5d:16:90:87:01:22:15:a9:29:30:
1f:d0:5d:c4:f3:66:c0:6b:1e:8d:4b:79:3d:e7:84:d1:a0:fb:
0e:78:7c:17:a6:dd:bb:7a:24:9c:0f:5b:38:30:44:6f:0e:27:
3e:86:20:b1:3b:8d:3f:a9:d9:22:95:f6:b3:57:6b:16:a5:b4:
07:ff:4e:b4:27:5b:b3:95:32:fa:c1:ad:40:d6:5d:09:47:ae:
9b:f1:80:41:86:2d:bd:ff:e4:cd:76:e2:1b:d6:42:be:45:a1:
aa:62:38:4d:c6:49:86:fc:a2:ef:56:6b:a4:8b:78:2b:c5:78:
c3:d0:a6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:43:55 2025 by rpki-client