Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/B0JGrIFbhcfZ9k0gLZbKOC7BRts.roa
File: B0JGrIFbhcfZ9k0gLZbKOC7BRts.roa (raw, json)
Hash identifier: uan7Xlr3tx5QNJHwIPILAsu/3eaM2Ksrcs3oBa0JKWg=
Subject key identifier: 07:42:46:AC:81:5B:85:C7:D9:F6:4D:20:2D:96:CA:38:2E:C1:46:DB
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 019422FC28F9C943C4238E8CF06A4737E222
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/B0JGrIFbhcfZ9k0gLZbKOC7BRts.roa
Signing time: Wed 01 Jan 2025 17:48:58 +0000
ROA not before: Wed 01 Jan 2025 17:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210882
IP address blocks: 213.132.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:28:f9:c9:43:c4:23:8e:8c:f0:6a:47:37:e2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Jan 1 17:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=074246ac815b85c7d9f64d202d96ca382ec146db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:8f:61:1c:fa:dd:0d:94:3f:cb:95:13:6b:
f5:bf:9c:56:30:5c:f0:dc:fa:36:08:53:dd:07:eb:
33:b3:98:c2:c8:e7:b8:9a:52:da:ee:bf:c4:8a:e5:
a2:12:45:a6:29:a7:2e:62:88:45:0d:70:f9:7e:7c:
90:47:70:39:ab:a2:08:90:ce:c0:34:63:aa:22:ba:
81:0e:1b:29:20:12:27:79:eb:8f:3e:d2:b7:12:96:
b3:59:f2:29:42:47:98:9b:6a:62:f3:af:e7:f3:33:
18:ac:73:82:20:9b:50:ce:ac:66:96:c8:65:9f:be:
89:e3:7e:63:8e:02:61:3b:45:62:3a:c0:79:24:fc:
9b:97:e4:a5:23:21:73:db:69:9a:b2:f8:66:b9:2f:
f9:4e:37:e4:5b:53:6b:ca:87:26:c2:87:a2:ef:0e:
72:83:06:db:c9:d5:00:48:f4:57:43:41:5c:97:ea:
3f:16:7f:0f:af:b7:52:99:9e:57:47:02:fc:b2:81:
1f:94:89:d3:25:1f:98:56:7d:73:e7:fd:ff:0e:42:
db:f0:1c:f1:5c:d4:84:5f:c1:bd:57:12:97:24:0b:
83:ec:3d:b2:70:72:f7:1b:bf:d9:78:e6:29:54:be:
b1:b9:94:6d:e5:5f:79:ce:98:f1:d0:c6:9f:d1:72:
56:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:42:46:AC:81:5B:85:C7:D9:F6:4D:20:2D:96:CA:38:2E:C1:46:DB
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/B0JGrIFbhcfZ9k0gLZbKOC7BRts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.132.221.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ef:26:ea:dc:25:b0:07:43:d9:f0:c8:8f:24:c1:fb:b0:2e:
77:c5:b0:75:a0:ba:5a:66:b3:ee:d0:7f:be:be:7d:ea:fa:ca:
32:06:4c:53:cb:d8:bc:ed:14:b6:19:01:7d:85:a9:48:f5:05:
d2:c4:25:55:c6:19:12:03:f3:a7:c1:bd:10:a8:02:65:d1:af:
84:ad:6e:87:ce:2a:0d:b2:21:b7:fc:68:09:b2:5a:51:d8:af:
a4:4b:e2:2f:1f:10:da:5b:00:cb:a9:a3:99:cf:93:f8:2e:70:
07:8d:53:4b:64:9b:89:7a:cc:9e:37:c8:aa:c1:c7:d2:1f:50:
ab:3b:16:95:05:49:6c:f5:5b:dc:d0:f0:13:10:81:ee:dd:4a:
7d:f0:8c:3b:30:51:de:93:55:69:3a:9a:ef:fa:9e:2a:50:1d:
3a:18:0f:04:0c:c7:45:32:21:c3:bb:86:e6:2f:76:13:c0:24:
9e:1e:50:35:42:ec:3a:77:08:bc:41:31:57:36:48:75:40:97:
ca:21:f3:0c:65:10:35:a6:15:77:7d:90:dd:ed:4d:91:27:eb:
39:07:79:7d:63:63:1d:9c:f2:fa:ff:9f:84:16:0c:ef:9f:ba:
48:99:65:84:8e:3e:94:21:22:3b:6b:93:0f:e8:97:53:19:23:
44:83:d7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:09 2025 by rpki-client