Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/9O8IcndAWkwvcHSAJVLczJO27EI.roa
File: 9O8IcndAWkwvcHSAJVLczJO27EI.roa (raw, json)
Hash identifier: +Qdbk8K/SlJ6hCrhnzJAsvlRShB3Z4yYs0mEKhPyCAY=
Subject key identifier: F4:EF:08:72:77:40:5A:4C:2F:70:74:80:25:52:DC:CC:93:B6:EC:42
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A561E46CACBB848C4AF032023B4D3
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/9O8IcndAWkwvcHSAJVLczJO27EI.roa
Signing time: Wed 01 Jan 2025 19:49:18 +0000
ROA not before: Wed 01 Jan 2025 19:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1128
IP address blocks: 145.94.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:56:1e:46:ca:cb:b8:48:c4:af:03:20:23:b4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4ef087277405a4c2f7074802552dccc93b6ec42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:ca:0b:26:41:3b:23:47:7f:45:64:23:25:
29:ea:15:54:dc:f1:61:b5:d9:b8:c4:01:20:ff:fc:
d5:84:50:fc:17:42:00:89:a4:8a:15:01:3e:76:9e:
a1:59:2d:e8:6a:33:77:12:4f:9b:b6:2d:49:d1:16:
2e:9c:a5:21:5d:95:3c:cc:b3:c0:73:b8:38:e3:4c:
d3:13:c3:f4:c6:27:83:17:27:c7:cb:59:3c:f6:ce:
75:8b:ea:87:ca:39:e3:97:35:a9:18:fc:61:54:5c:
41:43:ca:e6:f0:65:23:ad:05:23:bd:24:03:e5:7a:
4d:eb:ff:bf:54:11:34:d8:e5:99:83:ca:8b:ed:0f:
cf:a7:ff:f0:af:74:fd:cd:4b:01:ed:d6:60:31:15:
79:0f:d7:2e:4f:87:04:b2:25:be:93:3f:e4:d7:c5:
15:64:a4:e0:6d:6d:3f:74:0d:01:15:54:60:8e:98:
27:55:94:be:de:a3:6b:b6:88:e9:66:bb:5a:3a:37:
72:84:f6:28:ba:d4:e2:0b:28:a7:98:dc:15:ad:51:
20:7b:3e:c9:24:74:2a:91:d3:98:58:ee:f0:24:d6:
86:12:a4:bb:94:3f:dc:84:f5:d3:58:dd:60:a2:4a:
93:da:cb:60:c8:ad:0c:d2:3e:6f:49:7e:4b:a5:69:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EF:08:72:77:40:5A:4C:2F:70:74:80:25:52:DC:CC:93:B6:EC:42
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/9O8IcndAWkwvcHSAJVLczJO27EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.94.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:9a:59:ac:9f:ac:8f:0f:bf:a0:44:ef:e5:ea:28:fa:e8:65:
00:47:42:33:03:e4:cf:71:4f:7c:3a:a1:da:82:a5:c6:21:0e:
44:4b:71:ed:d0:aa:87:4c:4b:32:4a:04:57:a3:8a:b4:ac:9a:
69:2c:b2:32:3f:73:b8:ab:8c:36:c6:47:e1:67:b7:63:68:82:
db:0f:80:e2:b2:b5:15:cf:27:62:c3:59:16:7f:f4:a1:09:02:
6a:33:76:49:35:f4:e6:f1:76:26:24:9c:ac:60:f0:17:ad:9f:
58:30:d7:8c:5d:3e:67:eb:0d:9a:66:1b:f7:99:cb:9f:9c:08:
7d:85:b3:5e:ce:c0:be:cb:79:7f:7f:51:03:dc:38:5d:08:6d:
81:c1:ed:06:21:a6:58:08:8c:6a:58:f7:4a:55:99:0f:bb:16:
ce:cb:79:5b:12:3c:eb:5d:03:8f:9a:9e:73:74:d5:f4:68:8d:
bd:37:45:31:9b:27:0f:1e:67:8f:ec:65:69:10:ea:d3:ae:43:
8d:75:9c:2e:2d:b7:63:0f:cf:dc:f7:73:11:58:cd:79:06:eb:
5b:6b:1a:68:5c:61:15:cb:17:2d:4d:9c:23:2a:1f:2b:5d:71:
fe:1a:be:8f:da:b4:7b:26:42:98:f2:b9:60:a3:64:83:79:b4:
4f:67:39:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:09:50 2025 by rpki-client