Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/rn2OzWXr6K24aCgI1KPo3kv4TYQ.roa
File: rn2OzWXr6K24aCgI1KPo3kv4TYQ.roa (raw, json)
Hash identifier: 9VXtiGKfWxpSdxMJj0fkd9DD9buccGHwka6UlCUhOEA=
Subject key identifier: AE:7D:8E:CD:65:EB:E8:AD:B8:68:28:08:D4:A3:E8:DE:4B:F8:4D:84
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747C74675CC9DE2700E12A6C5FACEFC
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/rn2OzWXr6K24aCgI1KPo3kv4TYQ.roa
Signing time: Thu 02 Jan 2025 13:50:02 +0000
ROA not before: Thu 02 Jan 2025 13:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 109.248.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c7:46:75:cc:9d:e2:70:0e:12:a6:c5:fa:ce:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae7d8ecd65ebe8adb8682808d4a3e8de4bf84d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:04:b1:bc:95:e9:16:82:b6:90:00:cd:14:
e9:bd:e8:f5:f3:fb:f2:4a:26:89:00:af:6e:01:d2:
a7:fb:86:db:a2:db:f1:2d:c4:1a:ea:f5:40:20:1f:
fb:03:04:58:b3:1f:47:04:0b:a6:1f:ee:86:34:80:
17:f9:1b:e2:41:68:d3:21:c4:c7:f4:3d:d6:f3:26:
f8:86:da:b2:e5:c3:0d:6b:f0:55:f2:cd:45:2b:d6:
e8:51:00:25:90:5f:24:11:c0:d4:9d:b0:39:7d:f8:
74:e7:0c:2d:f7:bb:91:73:38:28:fa:0a:8e:aa:a8:
58:80:0c:fc:ca:97:69:5d:47:28:d9:19:27:e3:c3:
b9:f0:86:7a:97:d4:03:70:20:8f:4e:a0:b2:de:bb:
30:15:c0:3a:4c:fb:b0:a8:78:f0:d8:26:87:38:cb:
e5:75:0b:8e:4f:19:30:cb:e2:c3:ac:53:ac:bb:1a:
11:82:b6:55:9c:52:27:a5:2d:a2:d2:3b:95:f5:7b:
68:7b:dd:69:c0:94:af:87:bd:fc:dc:7c:1b:42:15:
60:b0:72:4a:bc:eb:fa:65:86:4e:ca:a0:3f:5b:90:
05:fc:34:3f:91:68:7f:10:a8:0a:be:8f:5f:47:aa:
83:a0:52:e1:0b:b4:8c:8e:4d:93:5e:c1:65:1d:e2:
d5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7D:8E:CD:65:EB:E8:AD:B8:68:28:08:D4:A3:E8:DE:4B:F8:4D:84
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/rn2OzWXr6K24aCgI1KPo3kv4TYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.42.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:95:0e:fd:8b:e1:b1:07:3f:f3:33:43:35:21:c6:70:74:69:
45:c3:0e:10:f4:62:fe:fe:73:58:aa:1e:82:86:73:26:d8:97:
01:cc:3e:40:45:26:3e:a8:ae:94:19:e9:dc:96:65:12:33:17:
52:67:9f:ad:c0:ca:22:65:88:6d:1f:7c:d2:6b:57:7b:23:10:
57:c3:bc:42:fe:53:7f:56:f8:ad:c3:ad:52:0a:93:5c:e7:4c:
d3:99:22:5a:2c:9e:c1:08:55:64:60:88:04:47:f3:9a:e8:35:
e8:02:e4:55:a7:ff:40:2b:45:9c:1f:e8:29:27:66:ae:6c:a5:
15:17:56:cf:71:cb:f1:e7:22:51:9b:96:58:a5:6c:3a:11:6a:
23:3e:8c:e8:ae:6a:0c:35:ef:5b:65:cf:39:ff:ae:23:f2:7d:
d6:03:4f:44:c7:e6:c2:70:1f:f9:b9:f5:7c:3c:13:3b:c2:90:
9c:a9:d9:36:54:c3:10:67:fe:b1:0e:74:34:73:0a:34:7b:e9:
67:0b:de:2e:14:77:cf:8a:f2:46:f4:f2:0b:cc:bb:31:27:40:
ff:24:e6:94:97:c7:ad:8f:7f:59:0f:e9:5b:9d:bc:db:42:72:
31:66:1f:a6:16:a1:16:4a:bd:8e:0d:70:3d:1a:69:fd:b4:9d:
5d:8c:cd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:36:05 2025 by rpki-client