Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/f1wW_BV7vZtAZNKpmUDuydqJlsA.roa
File: f1wW_BV7vZtAZNKpmUDuydqJlsA.roa (raw, json)
Hash identifier: CdljZlhyWSUXZqLfpyDj+9shC/3i0VNujpmPdvzAtoY=
Subject key identifier: 7F:5C:16:FC:15:7B:BD:9B:40:64:D2:A9:99:40:EE:C9:DA:89:96:C0
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0194221FD8CE86270A24B375306032C695B8
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/f1wW_BV7vZtAZNKpmUDuydqJlsA.roa
Signing time: Wed 01 Jan 2025 13:48:19 +0000
ROA not before: Wed 01 Jan 2025 13:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44213
IP address blocks: 213.137.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d8:ce:86:27:0a:24:b3:75:30:60:32:c6:95:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jan 1 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f5c16fc157bbd9b4064d2a99940eec9da8996c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:53:49:2d:2c:07:22:45:4b:54:88:cc:1e:f3:
4d:27:59:11:6a:df:a3:49:00:26:d6:d5:9a:e3:16:
a3:8a:b1:9a:f9:48:12:8d:44:f3:e5:45:a5:c9:46:
a0:bf:ca:44:73:65:42:3b:6a:d2:da:1d:79:29:eb:
a3:da:90:8f:55:14:a5:bc:b1:80:f2:99:29:3d:d8:
d5:44:5f:00:7c:d1:22:9a:cb:8a:53:2c:12:3a:94:
23:70:22:8c:e8:f4:07:cd:76:be:30:72:ca:d9:0d:
ed:e3:fd:72:0e:e3:73:57:be:5d:16:6c:1c:03:33:
7f:31:2d:24:f7:46:fc:d4:2d:b6:89:c0:ab:3e:5d:
01:3f:49:56:30:c3:06:5b:af:09:9d:80:b2:47:15:
74:70:89:68:01:0f:67:69:3b:5b:ec:06:a1:14:04:
04:8b:99:0e:df:d4:e3:bb:cb:c5:2e:d6:06:a2:8a:
ea:88:3c:85:02:da:b3:be:89:cc:24:4a:72:cf:ac:
14:ab:b2:f8:78:e5:b9:30:17:40:89:d8:a1:20:96:
21:e8:26:36:20:31:d0:fc:f8:77:e3:9f:ae:c3:72:
f8:47:38:2c:d9:4a:aa:65:d3:07:b0:12:d4:73:fb:
08:4b:87:29:81:6a:29:93:24:8f:9f:7c:1a:b7:5e:
13:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5C:16:FC:15:7B:BD:9B:40:64:D2:A9:99:40:EE:C9:DA:89:96:C0
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/f1wW_BV7vZtAZNKpmUDuydqJlsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.82.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:cc:9d:55:96:c6:67:00:d5:53:63:db:ff:b9:8d:a8:56:01:
fe:47:5e:3b:1a:eb:bb:cd:97:f9:a5:48:82:ca:41:60:6c:97:
05:6e:d8:90:8f:53:09:b0:f1:32:34:00:86:df:d3:06:8b:94:
63:2b:8d:6d:d7:3d:7d:02:9c:ef:b6:3c:31:e8:c7:26:20:1e:
24:83:d2:3a:c6:73:b7:aa:c4:24:b6:d4:7b:0c:f0:39:54:4f:
af:94:e6:c6:16:04:a8:e8:84:95:1f:f4:77:17:60:d6:ac:2c:
44:84:39:97:ec:bd:00:ac:b8:ab:7e:4d:b8:f7:31:fd:48:54:
34:c1:79:88:3d:37:ce:0a:11:74:d1:b1:97:cd:f5:4b:6e:04:
e5:e3:e5:c3:e1:1f:8d:65:35:1a:ad:ff:e3:74:2b:66:d3:89:
f0:5f:ca:0c:e2:64:f9:26:62:24:80:5f:40:e5:8f:58:78:63:
92:26:a1:43:97:23:26:15:c9:11:b0:08:d3:42:64:18:73:61:
6f:69:2f:19:41:d0:b7:47:28:01:fc:dc:54:24:75:46:29:29:
a2:fb:7a:6d:b7:f6:98:8c:10:64:cf:88:57:27:7f:7e:f5:32:
5c:32:cf:53:45:b5:95:1a:b9:b6:fc:31:aa:97:59:ae:27:e2:
8d:2b:a4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:14 2025 by rpki-client