Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/TOEtygW-JFsbCGpcVCPKCUmvT8Y.roa
File: TOEtygW-JFsbCGpcVCPKCUmvT8Y.roa (raw, json)
Hash identifier: JOt+ILdNMnAl8qaOPRPYlPMnVx4wLH49n9I8LiobkQA=
Subject key identifier: 4C:E1:2D:CA:05:BE:24:5B:1B:08:6A:5C:54:23:CA:09:49:AF:4F:C6
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019421B1F310D4E571277113B0836B670C94
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/TOEtygW-JFsbCGpcVCPKCUmvT8Y.roa
Signing time: Wed 01 Jan 2025 11:48:17 +0000
ROA not before: Wed 01 Jan 2025 11:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211904
IP address blocks: 151.247.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f3:10:d4:e5:71:27:71:13:b0:83:6b:67:0c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 1 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ce12dca05be245b1b086a5c5423ca0949af4fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:8a:9b:6d:62:14:20:10:a8:6a:41:1b:55:
d7:f4:3f:66:76:f9:ca:16:c2:6d:00:2d:cd:33:0a:
19:f5:0c:3a:24:2b:35:48:31:6b:9d:45:d2:89:26:
68:12:dd:32:da:a6:6d:6c:30:79:62:23:c9:4d:38:
1f:55:d3:54:5a:5d:1f:f5:1d:60:c7:8a:c6:0a:ec:
e7:57:17:98:a4:95:1e:79:08:db:e7:ff:53:65:c9:
c0:24:23:6b:c3:6d:9a:9c:29:98:95:a1:d0:16:90:
cd:c9:b0:a6:1b:23:7b:69:da:2e:dc:84:b7:12:b8:
76:54:fe:b4:89:46:83:b8:5f:42:d2:b7:b7:be:75:
29:4b:62:f7:0a:5f:d6:7a:74:85:9b:06:3d:31:eb:
bd:bb:a0:87:8d:ae:1e:68:8e:11:a9:c2:e1:9a:ef:
4a:07:1c:00:eb:a1:ad:1f:30:5f:43:cb:c1:b0:09:
5c:33:2a:76:f3:f6:26:7f:53:20:70:9f:e3:98:63:
f3:8f:19:7b:48:0f:04:d2:90:0d:2c:0d:7d:68:35:
1c:b0:64:7c:19:48:54:56:df:d6:b4:1b:fb:04:d2:
69:db:ae:9a:dd:2d:fc:e5:36:d9:e8:85:d4:fa:be:
a0:20:1c:61:fb:60:7f:5e:c5:f6:f2:8f:74:4d:04:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E1:2D:CA:05:BE:24:5B:1B:08:6A:5C:54:23:CA:09:49:AF:4F:C6
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/TOEtygW-JFsbCGpcVCPKCUmvT8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.242.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:97:ac:5f:3c:22:9b:62:c7:1e:36:99:ba:ef:8a:63:3d:b0:
fa:c6:f7:88:b4:f3:1a:9a:d7:77:c0:5a:c6:2a:cd:14:6d:14:
a2:ac:76:4d:6c:3d:4f:ec:e1:0c:2b:bf:56:63:f3:4a:95:b1:
25:a9:de:53:bd:c4:1b:67:95:17:9d:30:de:d2:99:5d:f6:57:
6b:cd:83:36:71:d9:87:28:05:0c:b0:ea:8c:d9:b3:cb:d7:bb:
3a:bb:67:37:e6:44:b0:57:84:43:f1:db:f7:39:9d:1f:bf:64:
fc:75:c6:c3:c2:82:6f:b9:59:fd:a1:2b:41:8f:ea:c2:b2:51:
71:1e:f9:1a:2d:07:8b:58:db:17:a5:a4:a2:30:1d:f0:17:04:
b0:8a:cf:51:96:04:9b:e5:58:2e:97:ba:6d:1b:1c:aa:5d:51:
c8:e1:29:1f:dd:36:d8:99:57:a6:ea:32:f2:45:6e:0a:21:9b:
39:14:5a:47:fc:2e:15:18:02:ab:52:bb:50:0b:88:17:3b:df:
2f:92:b2:63:d5:59:ac:ce:6e:f6:40:f7:25:7c:f2:8c:58:8e:
7c:49:84:64:f5:34:d5:d3:97:39:e4:b3:db:f7:55:f6:dd:48:
b0:80:a8:1b:bf:38:6d:62:20:ac:88:5d:8a:b9:b0:b7:82:12:
6a:7d:01:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:35:31 2025 by rpki-client