Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/D39tyqkHzUar743HSOtaz_PbEVw.roa
File: D39tyqkHzUar743HSOtaz_PbEVw.roa (raw, json)
Hash identifier: 3v479Ukt7ALaWZSOqE7SXtI+6RElyE29evHrm/wKO5s=
Subject key identifier: 0F:7F:6D:CA:A9:07:CD:46:AB:EF:8D:C7:48:EB:5A:CF:F3:DB:11:5C
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019424B3E373690EF410663C06D5C5392329
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/D39tyqkHzUar743HSOtaz_PbEVw.roa
Signing time: Thu 02 Jan 2025 01:49:16 +0000
ROA not before: Thu 02 Jan 2025 01:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48031
IP address blocks: 86.111.230.0/24 maxlen: 24
86.111.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e3:73:69:0e:f4:10:66:3c:06:d5:c5:39:23:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 2 01:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f7f6dcaa907cd46abef8dc748eb5acff3db115c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:bb:71:77:c2:b5:68:d3:38:cc:44:d9:25:
49:e6:a5:3b:80:2d:35:39:c0:dc:2f:b5:46:a2:83:
4f:d4:e9:f8:53:cd:dc:26:24:9e:ab:0b:a7:f7:23:
1e:f2:10:0b:25:f4:ea:d1:e0:1c:6b:3d:c2:f0:5e:
41:b5:dd:ac:f6:34:d9:8c:78:ad:43:61:7f:b9:d0:
4d:80:f9:6f:e7:96:30:9d:62:bf:30:18:ca:70:34:
14:e8:77:78:d4:53:6e:fe:e8:19:60:cd:cb:6c:98:
68:ce:ca:30:74:5a:ea:d7:1d:04:63:1c:23:f3:bc:
d8:7d:53:3a:a6:fb:35:32:04:f0:7c:fa:d3:cf:a0:
bf:6d:98:7a:ee:f6:b9:49:b9:8e:ac:26:29:e3:af:
bb:49:99:06:70:cb:ec:ef:dd:b3:40:c3:95:c4:cb:
83:5e:42:d9:43:d9:f1:87:d9:34:88:93:c9:2c:c9:
64:34:24:59:23:e7:23:35:74:4c:56:5b:67:14:cd:
c7:32:89:e4:fa:4a:f7:7f:b7:f9:c8:12:6f:cb:93:
1e:12:3e:7d:a7:8f:91:5b:f0:aa:97:ad:dd:cc:9e:
96:db:05:02:16:de:2c:e2:f5:74:7a:82:65:6b:0d:
ad:c8:e8:31:24:6f:15:97:d0:bc:49:77:82:65:25:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7F:6D:CA:A9:07:CD:46:AB:EF:8D:C7:48:EB:5A:CF:F3:DB:11:5C
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/D39tyqkHzUar743HSOtaz_PbEVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.230.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:34:16:91:07:15:4d:d7:be:5c:53:14:20:97:6c:6a:60:af:
e3:e8:1d:3c:06:dc:ca:a3:16:e3:4d:ab:15:dd:7e:26:31:50:
99:98:6f:6d:78:13:33:b2:09:c2:51:63:f8:cc:99:ab:5f:87:
a4:19:05:3e:ea:25:61:d7:05:1c:75:29:49:ee:85:3c:08:dd:
b2:84:6f:54:83:be:c8:a3:05:ea:e0:1b:e8:ba:b2:98:60:03:
c3:94:3d:f8:6e:35:a8:3f:cd:2e:08:93:da:14:b8:21:87:01:
c0:b1:31:b6:25:cf:71:f8:c7:a2:f4:fa:48:96:39:10:e5:db:
d3:7a:d4:5e:bf:2d:56:d6:51:51:1e:5c:bc:60:99:5e:60:ff:
45:4b:ba:d3:77:b5:52:cd:2b:fa:9b:e0:eb:fb:9a:00:f1:16:
c7:f0:3a:23:74:71:b7:c3:33:9c:86:87:43:06:b3:2f:58:bb:
09:86:ec:de:27:1e:ee:77:d6:15:7e:c1:d9:32:33:f7:a0:20:
ac:6e:85:5d:2c:30:ad:75:aa:d7:c2:ee:ec:30:bf:6b:3f:fd:
73:c1:6a:c1:f7:54:ae:f2:7d:87:64:cc:93:a1:e0:48:e0:d5:
cd:1e:71:0e:96:2d:c8:da:c0:9a:90:26:e3:49:35:45:0c:2b:
9a:85:e2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:26:22 2025 by rpki-client