Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/R4XHwh-uR65EL_DdpXZF6OARJ4Q.roa
File: R4XHwh-uR65EL_DdpXZF6OARJ4Q.roa (raw, json)
Hash identifier: iFcX7qqj7I+Qr0pVVXkrPFoUP0jPJo5pY3SNhZeIPSE=
Subject key identifier: 47:85:C7:C2:1F:AE:47:AE:44:2F:F0:DD:A5:76:45:E8:E0:11:27:84
Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Certificate serial: 01942BF67295B07CF3E9ED99C14D75F81682
Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/R4XHwh-uR65EL_DdpXZF6OARJ4Q.roa
Signing time: Fri 03 Jan 2025 11:39:19 +0000
ROA not before: Fri 03 Jan 2025 11:39:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 80.244.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2b:f6:72:95:b0:7c:f3:e9:ed:99:c1:4d:75:f8:16:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Validity
Not Before: Jan 3 11:39:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4785c7c21fae47ae442ff0dda57645e8e0112784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:92:b0:67:31:f9:1d:b2:54:e9:8e:4c:a5:60:
bf:34:9d:78:75:8a:38:0a:e2:2d:12:55:71:c4:4b:
b7:89:26:26:25:77:c1:e0:5d:37:35:ea:f0:82:1a:
51:62:31:b6:a6:d8:23:25:5b:16:a9:44:d6:1b:83:
80:91:89:0b:fb:d9:f9:13:32:6c:80:95:83:98:fc:
bb:b5:c7:d4:de:92:56:78:14:e7:d1:6f:02:44:86:
94:4c:83:f4:a6:c6:8f:1c:e3:78:b3:45:97:cf:9d:
d9:99:fa:6d:c1:88:fa:a5:4e:f4:84:30:fe:ee:fc:
c7:25:7f:43:40:a2:d7:89:aa:78:76:3b:82:f6:da:
a7:6a:80:e5:aa:85:c3:d3:65:46:42:34:af:aa:83:
58:72:8b:84:46:f1:c1:b7:fe:e8:a9:14:db:c0:56:
d0:f3:1a:ca:4c:fd:5b:87:9f:65:44:ea:3e:72:ff:
0f:d8:4f:c5:3a:62:c8:33:f2:94:33:b0:44:f7:b1:
a6:fe:f2:7c:52:ea:bd:65:45:a3:60:2c:7f:1d:05:
5a:41:15:2d:77:86:fb:d1:d4:94:db:1d:97:b0:bd:
24:af:73:56:36:45:c6:6e:f1:f0:6d:c3:72:41:23:
49:eb:8f:8f:7c:80:d4:12:59:ca:46:a1:aa:29:62:
24:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:85:C7:C2:1F:AE:47:AE:44:2F:F0:DD:A5:76:45:E8:E0:11:27:84
X509v3 Authority Key Identifier:
keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/R4XHwh-uR65EL_DdpXZF6OARJ4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.7.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ea:a1:57:01:e9:09:e0:4f:20:28:25:5c:54:7f:8d:86:11:
7e:81:d5:2e:a6:2d:ec:88:db:3d:55:d4:72:67:c1:67:3e:de:
f8:a6:3c:88:1c:74:a1:54:9e:96:8a:6e:c1:6d:a3:e8:69:67:
fa:5a:dd:1e:ea:e4:6a:32:b0:dc:be:eb:1f:75:58:4d:c4:06:
af:b0:35:2a:de:08:0e:18:c1:88:a3:e8:78:69:af:7e:72:39:
e7:e7:3d:29:b7:d6:d9:c9:fd:83:3c:de:af:90:92:79:ea:0c:
c5:b4:79:aa:e2:8c:1c:45:c0:f4:ea:75:16:ab:18:00:5e:19:
e4:b9:80:10:be:59:02:e4:af:58:23:12:86:48:84:ae:de:55:
7a:be:33:98:21:97:c5:d7:50:a9:98:70:a5:9d:7e:9f:3b:31:
03:14:bc:ef:34:d8:1c:39:b6:a9:be:77:3e:5c:06:b7:3a:14:
9c:31:e3:cd:08:68:dd:8f:f1:25:04:85:e5:a4:e1:89:79:e1:
4f:d8:14:29:99:9a:f0:a7:fd:8b:5c:76:b7:f0:ba:bd:6a:33:
0c:b3:74:c5:c9:dc:3e:04:e7:e8:74:f1:28:db:ff:ff:66:d3:
3a:ab:9f:bb:e8:e3:78:4e:5c:a4:bd:5a:95:6c:88:1c:e2:8d:
00:bd:b1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:19 2025 by rpki-client