Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/pG1Bdsuf0_FV53a0V5-fXU6QPcU.roa
File: pG1Bdsuf0_FV53a0V5-fXU6QPcU.roa (raw, json)
Hash identifier: EE/2MTb7p6dCpTayP3ZWsQTxamGzXh14iXDHyH+GCs8=
Subject key identifier: A4:6D:41:76:CB:9F:D3:F1:55:E7:76:B4:57:9F:9F:5D:4E:90:3D:C5
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0194228D95FA16DD5F4BD3D5C2E51E2EA729
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/pG1Bdsuf0_FV53a0V5-fXU6QPcU.roa
Signing time: Wed 01 Jan 2025 15:48:11 +0000
ROA not before: Wed 01 Jan 2025 15:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9074
IP address blocks: 85.153.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:95:fa:16:dd:5f:4b:d3:d5:c2:e5:1e:2e:a7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 15:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a46d4176cb9fd3f155e776b4579f9f5d4e903dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5d:05:a0:45:73:e4:60:e4:6b:c5:d1:2a:80:
f3:b5:5e:7c:bf:8c:cd:5e:77:31:d8:3a:61:3d:fb:
fc:58:e2:80:b6:7f:8b:50:f4:f0:13:da:42:c8:41:
d6:06:4b:e8:3e:ba:98:df:d1:19:c3:14:8b:3d:89:
79:a9:29:36:ee:c7:11:c3:95:bb:0e:4a:f6:dc:02:
02:74:22:ff:31:aa:b0:ea:6c:3f:41:90:e0:91:80:
10:67:fe:f2:5c:1e:85:7c:f8:15:3f:58:b5:d8:09:
73:c9:aa:a9:fa:82:b3:a7:02:1b:8f:ae:eb:a0:56:
6a:5f:bc:7c:fb:87:61:c1:94:8b:50:e8:a1:13:6c:
1f:85:c5:51:44:66:ec:03:62:c7:1c:59:b4:d8:dd:
ae:03:91:2e:c7:d4:a7:2e:eb:af:9a:61:be:f7:6f:
55:36:8e:64:fa:d1:13:55:fb:61:d2:50:ec:20:01:
c7:c1:68:3f:21:41:22:bb:aa:57:fe:2c:ea:ef:15:
90:b8:7a:fe:d9:c5:c7:ef:55:cf:0c:ca:7f:04:d4:
08:e0:99:1c:cc:ce:84:fc:04:92:6c:57:9c:5b:cf:
da:61:95:47:77:9a:f0:bc:46:54:27:c7:22:3a:0e:
4e:f0:43:4f:1c:50:6a:b7:08:f7:5b:b6:5c:d4:8a:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6D:41:76:CB:9F:D3:F1:55:E7:76:B4:57:9F:9F:5D:4E:90:3D:C5
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/pG1Bdsuf0_FV53a0V5-fXU6QPcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.179.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a0:65:c2:a9:f5:c1:e2:3b:50:12:e9:f2:d9:85:15:38:c9:
66:f3:29:9f:06:ec:b2:08:03:af:b8:52:c1:4d:dd:14:73:8e:
4f:40:f5:2a:e0:72:d7:cb:b7:1b:66:ae:48:6b:63:e1:b9:24:
1c:06:d4:10:73:9d:7f:2b:c6:a6:5c:0e:09:6c:5b:b3:b8:74:
dd:e8:48:12:eb:9c:22:a0:46:2a:7d:f9:f9:18:24:b6:a9:ef:
12:b5:25:36:fa:a0:12:30:73:66:d1:2f:fd:54:be:a7:a8:87:
b9:53:9b:0a:9c:b3:fe:95:55:b8:d2:e6:cc:18:46:b3:6c:48:
1d:d8:20:2c:30:df:07:14:9d:9c:91:39:70:8e:f5:9b:05:37:
75:b8:03:c5:04:ec:91:6e:78:e5:41:5a:74:38:cf:53:dd:ee:
3f:6f:87:85:d9:f5:ab:32:e9:ce:c9:fd:1c:69:b1:f3:0c:24:
71:b6:f5:02:d3:02:c5:3e:10:d6:6c:9a:db:b2:01:de:df:b1:
a5:97:18:df:db:0b:5e:84:3e:c2:36:7e:59:46:17:c6:b4:52:
d6:1c:ea:ee:11:d3:0a:56:53:e1:68:0c:aa:1f:0a:da:7c:68:
8f:31:79:2c:29:d2:24:78:fe:4d:5c:ba:69:fd:82:58:d2:e4:
a5:48:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:08:37 2025 by rpki-client