Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/lRD6maZmBb5U1_WohkEw__Nqbf8.roa
File: lRD6maZmBb5U1_WohkEw__Nqbf8.roa (raw, json)
Hash identifier: 61xquWrXWN+KUjD8mZcLMIEjB+WB6ZCJWf6rzFTdXjI=
Subject key identifier: 95:10:FA:99:A6:66:05:BE:54:D7:F5:A8:86:41:30:FF:F3:6A:6D:FF
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0194228DAA74073083B9C009BA3C77275AC9
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/lRD6maZmBb5U1_WohkEw__Nqbf8.roa
Signing time: Wed 01 Jan 2025 15:48:16 +0000
ROA not before: Wed 01 Jan 2025 15:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199333
IP address blocks: 212.252.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:aa:74:07:30:83:b9:c0:09:ba:3c:77:27:5a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 15:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9510fa99a66605be54d7f5a8864130fff36a6dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:3b:64:fd:e9:3e:a1:c8:63:57:aa:00:1d:
ba:d1:5b:a9:c1:eb:a9:80:1f:ea:b9:59:53:b5:db:
11:db:c9:72:51:b7:0c:2a:50:bd:81:c0:ff:83:8c:
81:18:83:1e:bc:5b:0e:be:ea:89:71:9c:42:41:55:
20:ff:f9:0b:d1:0c:76:e7:63:7b:99:38:7f:11:62:
a8:6e:ca:5f:b5:dd:70:88:cb:69:3b:95:f0:6d:0e:
a3:97:e1:44:85:5c:01:fe:b9:62:a3:ff:b1:6c:87:
0d:f9:fd:08:28:cd:08:fb:6a:2b:9d:fa:74:9d:24:
9c:d3:98:2c:42:de:7f:92:b0:c8:27:19:a1:ae:67:
3e:54:39:a1:90:fe:f6:06:14:43:f7:e8:b6:19:93:
67:f6:2c:5d:89:cf:ab:e5:23:c3:9e:66:f7:db:ed:
09:99:c2:d9:4e:85:ca:67:3f:66:eb:78:28:06:81:
8c:7e:65:af:72:98:e1:bf:71:50:1b:86:fc:be:9d:
0d:49:68:13:dc:9e:84:c4:d1:99:ee:94:df:6a:5a:
a6:37:9c:11:21:24:15:d8:c7:ed:aa:32:9a:56:98:
8b:c1:5b:8e:ed:bc:24:07:44:e1:be:69:7f:7a:7e:
55:bd:49:dc:38:42:64:21:88:4c:a3:ea:21:de:2b:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:10:FA:99:A6:66:05:BE:54:D7:F5:A8:86:41:30:FF:F3:6A:6D:FF
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/lRD6maZmBb5U1_WohkEw__Nqbf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.252.124.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e0:d4:f2:16:dc:fe:59:b1:77:c8:16:42:86:28:e3:29:b8:
b9:0b:86:30:53:a5:e1:64:9a:e4:c0:32:80:7a:c9:f0:b5:ab:
03:7f:12:6f:97:91:74:31:55:9c:04:6d:12:32:78:cb:bc:18:
fd:a8:45:a2:43:fa:31:59:63:25:0f:64:1c:2b:51:ec:cf:a1:
dc:5b:01:4e:38:8d:76:a5:c1:8a:85:03:db:fb:7f:b2:b7:16:
f5:6a:fd:3c:9a:50:95:cf:4e:08:53:7f:ea:81:cd:9d:38:ff:
c1:1b:8c:c7:84:4b:d4:7a:8a:dc:8f:05:b8:0d:ee:2d:0c:47:
e0:5d:bf:2d:da:af:b6:b9:5d:6e:bd:eb:86:17:15:1e:f8:be:
3b:58:81:53:a2:8a:13:01:74:4f:e9:35:3f:81:e5:af:e5:60:
f8:a8:f0:96:af:f7:cf:79:3d:2b:02:fd:b5:62:90:57:b1:7c:
0e:09:85:f6:ff:45:b2:e2:0d:bc:34:3f:da:38:28:f1:ae:b2:
3b:bd:6d:bc:87:9c:c9:77:27:33:58:d1:35:0d:e7:1f:5b:db:
19:55:24:7f:53:cb:c9:cd:64:76:f5:e8:8b:12:42:96:a5:25:
59:f4:e3:23:ee:60:7c:fb:eb:8e:a2:b6:65:a6:c5:36:81:a9:
35:54:d0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:36:49 2025 by rpki-client