Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/AzSrLJFmfeHq4hW1Qf7AEyHb8Pc.roa
File: AzSrLJFmfeHq4hW1Qf7AEyHb8Pc.roa (raw, json)
Hash identifier: eCVsXCjLEvLJa9+iW+ysDbya4Y+X231ugmswa/aHdwo=
Subject key identifier: 03:34:AB:2C:91:66:7D:E1:EA:E2:15:B5:41:FE:C0:13:21:DB:F0:F7
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 019424B36C299C19E55A2F76898B040F5156
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/AzSrLJFmfeHq4hW1Qf7AEyHb8Pc.roa
Signing time: Thu 02 Jan 2025 01:48:45 +0000
ROA not before: Thu 02 Jan 2025 01:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 91.245.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:6c:29:9c:19:e5:5a:2f:76:89:8b:04:0f:51:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Jan 2 01:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0334ab2c91667de1eae215b541fec01321dbf0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:00:29:2c:5b:54:dc:a7:c0:5b:f9:73:8d:47:
89:c6:5d:18:2e:0a:2d:a4:73:9a:8f:16:d3:eb:76:
28:14:76:ac:4a:88:ff:ec:49:3e:91:d0:e1:8d:7e:
f4:41:15:e9:99:f4:81:94:0a:81:b2:aa:eb:54:3c:
ea:dc:12:1b:92:cd:cc:33:da:6a:39:b8:9d:87:7a:
63:cc:2e:97:70:f4:82:6d:61:f1:dd:25:91:4b:f7:
c7:59:55:58:fb:05:d5:bd:60:c2:f0:7e:a1:30:ab:
80:5a:2d:63:db:46:3c:d0:6e:c0:ca:6a:f6:5e:b0:
34:9f:36:99:58:b2:76:02:26:e1:94:28:d7:75:ac:
c8:55:22:34:8e:ae:83:2c:b6:55:47:12:29:61:82:
fb:db:34:4a:0c:c1:7c:c8:24:66:fa:e0:ef:e1:a7:
0c:48:ff:3a:5c:75:c7:42:c6:fc:57:e1:45:56:4f:
a9:d3:f5:16:76:e5:23:4e:1e:fa:cb:66:be:d9:d7:
56:bb:3f:2e:d6:80:94:27:64:e3:83:1b:9e:aa:4c:
73:9f:e2:ea:8d:e9:2b:eb:1b:96:c0:e4:b7:ba:cf:
04:09:ad:84:9a:b3:2a:b0:c3:99:23:75:26:c7:a5:
f6:cf:da:e5:5b:29:b4:66:17:8d:ab:4a:2c:c9:57:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:34:AB:2C:91:66:7D:E1:EA:E2:15:B5:41:FE:C0:13:21:DB:F0:F7
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/AzSrLJFmfeHq4hW1Qf7AEyHb8Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.215.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e6:b9:3e:f8:c9:68:8d:93:d3:ec:54:43:69:4f:64:20:ee:
cb:8c:6d:aa:c8:8a:28:47:a2:3c:57:cd:68:7e:40:ea:5c:df:
bb:f2:61:5c:f6:0c:9d:e4:0c:fd:23:7e:d5:6c:ad:cc:c2:6b:
cd:b0:3b:4d:ed:49:f1:59:ef:ad:fe:ed:f6:4c:ea:5d:5a:29:
84:61:cf:f3:9a:bf:2c:ac:04:02:f9:b7:3b:6d:f1:a7:f7:6b:
73:d5:9f:98:75:dd:70:31:97:6e:10:ac:08:50:9e:50:d0:80:
1b:e3:97:a4:9f:83:6b:8a:7d:49:f2:87:e3:f3:87:0c:99:2e:
77:5c:3e:56:b7:53:5f:bc:97:cd:a3:79:91:9f:9f:fd:7b:c9:
7a:54:26:fd:73:80:aa:45:58:e5:dd:14:66:a3:cc:ce:b7:a4:
c5:32:e4:b0:b0:60:b6:32:f1:2c:81:d8:b8:27:49:fd:b5:16:
36:75:3d:72:17:38:ab:11:81:bc:70:6a:ef:39:17:89:2d:33:
d6:72:d2:50:cc:f4:26:9a:5e:8c:cb:d1:9e:3f:49:3f:6e:af:
26:bc:7e:80:7f:7b:c9:17:e8:e6:42:6d:a6:18:ae:73:a5:b1:
bb:de:40:2d:0f:eb:40:05:bf:f8:7b:62:e4:2c:69:0b:94:14:
d3:cf:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:38 2025 by rpki-client