Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/aZp_-IqiVFoAaaD08gi82AqrlBM.roa
File: aZp_-IqiVFoAaaD08gi82AqrlBM.roa (raw, json)
Hash identifier: xAjdvDvJZRM8tEfeaFE3V9XsMT9Nsdi0raaN7LzCKfw=
Subject key identifier: 69:9A:7F:F8:8A:A2:54:5A:00:69:A0:F4:F2:08:BC:D8:0A:AB:94:13
Certificate issuer: /CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Certificate serial: 0195AE1101DD7D3EE1475FD561BAFD1EA570
Authority key identifier: 4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/aZp_-IqiVFoAaaD08gi82AqrlBM.roa
Signing time: Wed 19 Mar 2025 11:01:44 +0000
ROA not before: Wed 19 Mar 2025 11:01:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62415
IP address blocks: 82.197.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:11:01:dd:7d:3e:e1:47:5f:d5:61:ba:fd:1e:a5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Validity
Not Before: Mar 19 11:01:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=699a7ff88aa2545a0069a0f4f208bcd80aab9413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:a9:fc:10:01:f3:5e:6e:b1:24:51:a7:9f:
99:3e:7b:89:63:7d:21:8a:4b:6f:9b:05:ff:99:1a:
60:e1:b6:ee:0b:ec:2a:bc:2b:ff:15:87:21:99:ea:
34:10:9a:de:b7:75:29:f9:2e:0d:cd:d9:d3:02:7d:
87:72:96:2a:da:38:d0:f7:f8:d4:a4:26:ce:fd:67:
b7:2f:e1:c4:08:31:5b:9c:39:96:9d:3a:04:98:11:
51:79:36:03:e3:b6:25:d8:1d:e7:d6:4e:bd:61:e7:
fa:a0:7c:be:49:61:55:88:59:d4:4d:78:5e:66:23:
10:07:e5:f5:fc:ac:40:ff:19:1c:e8:1a:28:0a:70:
1f:43:7e:c2:5d:90:c2:49:1f:de:cc:8e:23:c1:c5:
fd:cd:7e:c1:c7:d6:76:4b:70:e8:ef:3f:8f:a5:2e:
49:2c:09:cf:34:82:bb:9e:27:7c:77:db:14:e5:f1:
ed:53:ef:e7:17:a4:24:4f:7e:02:19:78:1c:92:f1:
36:a9:b9:a3:b3:c6:a9:c1:d3:cc:ed:8b:d4:ff:4e:
2d:5c:72:e6:a2:db:01:7f:4e:6a:b1:e2:21:66:3d:
70:8d:3b:4f:2f:67:e2:f0:21:88:95:47:c5:b1:a5:
69:97:1f:a0:7f:34:5d:b5:0a:c1:91:f2:8d:0c:61:
3b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9A:7F:F8:8A:A2:54:5A:00:69:A0:F4:F2:08:BC:D8:0A:AB:94:13
X509v3 Authority Key Identifier:
keyid:4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/aZp_-IqiVFoAaaD08gi82AqrlBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.52.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:9b:e7:86:74:1f:24:76:14:0c:a7:13:ef:b9:de:0d:e5:1b:
4a:75:26:8e:40:3e:d3:27:d3:19:aa:8e:d4:29:18:0f:01:ba:
78:01:c2:4f:6b:cf:c4:44:f3:41:cd:dd:96:35:a7:62:66:41:
b8:10:79:79:9a:3b:f0:f6:c2:c3:14:67:ee:b5:80:c5:c6:9b:
a5:1a:10:ad:b4:11:a0:b9:01:76:a1:8d:2d:60:b5:35:8d:aa:
71:9a:99:79:06:b1:c2:b0:9f:d7:c3:9f:2b:f7:d0:4d:5c:e3:
04:86:92:25:3c:e5:2e:74:77:3f:f1:5c:39:dd:23:54:7e:e1:
97:c4:28:79:19:d6:a8:a3:4a:37:5b:5e:69:60:2d:3e:41:47:
9c:ce:35:3e:57:62:29:39:92:43:f0:9c:81:e3:83:be:9f:5e:
72:a9:38:5d:09:0e:d0:0b:b4:df:5a:c1:30:24:3c:eb:b8:20:
cc:21:13:06:2d:cf:57:76:49:d8:7d:c2:81:4a:ba:ae:ce:ea:
da:9f:e7:64:11:31:9e:fb:97:18:2b:1d:89:f7:ce:ea:f7:ce:
ff:38:ad:8b:b5:87:89:8f:af:0a:15:79:62:e7:99:19:c9:0a:
17:a8:08:0e:0c:10:65:25:f6:f9:ca:ec:c5:55:f4:5d:b8:25:
e5:c6:65:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:56:58 2025 by rpki-client