Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/AU4ugvV5IAEAhCk8GTQf9WBLDKg.roa
File: AU4ugvV5IAEAhCk8GTQf9WBLDKg.roa (raw, json)
Hash identifier: g9W79I4Y+ZlSbr/hHfWCFarDN4OLUZ4qhEZ6t7xBiw0=
Subject key identifier: 01:4E:2E:82:F5:79:20:01:00:84:29:3C:19:34:1F:F5:60:4B:0C:A8
Certificate issuer: /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Certificate serial: 019428278211F2BAC33040F667D1B93865D5
Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/AU4ugvV5IAEAhCk8GTQf9WBLDKg.roa
Signing time: Thu 02 Jan 2025 17:54:25 +0000
ROA not before: Thu 02 Jan 2025 17:54:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213269
IP address blocks: 86.111.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 18:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:82:11:f2:ba:c3:30:40:f6:67:d1:b9:38:65:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Validity
Not Before: Jan 2 17:54:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=014e2e82f57920010084293c19341ff5604b0ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:b0:5f:f8:f2:23:14:fa:40:72:d0:da:cd:
1f:54:84:c5:50:0c:80:a8:d0:43:0d:14:87:a6:57:
b6:63:c7:8b:4e:e7:4b:4d:3b:d0:38:67:65:72:e7:
f4:3d:0e:f8:89:28:00:7e:12:2e:8b:da:60:c6:7e:
76:7d:a4:ae:36:8f:14:46:11:3e:e9:f1:6a:0a:a3:
7c:4d:bb:3f:87:b2:4c:7c:d1:38:cc:79:92:aa:8a:
a4:2a:a9:68:df:40:67:28:b5:4d:8d:18:c3:ac:64:
c3:26:fd:1a:7f:6d:dc:05:5e:2b:a7:fe:90:3d:d4:
71:5c:6f:a6:7b:af:12:7a:67:8f:1c:cb:d8:48:d0:
0f:3b:6e:44:ef:3c:20:90:94:50:b7:db:aa:3c:99:
5f:d9:30:15:85:a8:29:3d:9e:aa:5c:aa:02:49:dc:
b6:6c:e0:58:90:ae:f3:72:a6:25:aa:1d:40:cb:d1:
37:d3:b8:38:e8:e4:30:08:a4:9d:27:2c:bb:79:80:
9e:94:c6:21:5b:00:5f:ed:6f:cc:73:1c:81:02:24:
c6:9a:7a:ae:d7:81:bc:91:0b:8e:3a:71:42:32:d4:
7f:cd:f7:90:b2:17:20:4e:01:06:49:4d:fb:0f:c4:
83:37:a7:2f:75:87:90:a1:53:c5:16:33:24:e4:44:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4E:2E:82:F5:79:20:01:00:84:29:3C:19:34:1F:F5:60:4B:0C:A8
X509v3 Authority Key Identifier:
keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/AU4ugvV5IAEAhCk8GTQf9WBLDKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.212.0/24
Signature Algorithm: sha256WithRSAEncryption
94:aa:e8:83:8e:6b:dc:1a:4a:7e:f3:5d:0d:48:21:d1:bd:5a:
2f:89:08:8b:81:f2:95:04:ef:98:37:e0:ce:82:6c:fb:ba:fc:
24:90:1c:c8:3a:bd:1c:06:2a:16:94:63:36:4a:79:d7:94:1c:
77:a8:97:3c:6a:92:c3:48:cd:c0:b3:70:e3:6d:a2:4d:6e:8c:
cc:f7:0b:86:b1:d7:6f:c2:fa:76:a6:94:df:60:00:6f:af:9f:
46:a8:72:84:9c:09:d3:e2:de:5d:c2:2f:9b:b1:62:83:0e:56:
99:e6:b6:75:f5:1e:52:39:cb:e1:ae:bc:aa:e8:b5:33:51:9c:
a0:45:43:1a:a6:c0:e4:7f:c0:fd:9e:77:de:f9:22:bb:ab:46:
08:09:79:8f:b5:71:b4:cf:1a:f8:11:92:f4:25:43:b2:1b:09:
ff:a6:1f:46:b8:fe:9c:36:93:59:3f:66:f1:0b:a0:bc:56:f4:
3d:6d:93:e0:a8:be:83:5e:d0:62:f1:3d:4d:2c:60:86:9c:79:
16:b8:cd:5e:53:d7:38:af:bb:57:88:e0:dc:94:69:c9:5f:b4:
2e:cd:2e:bd:39:ae:03:27:9e:ec:e0:2b:5c:c5:de:50:5d:76:
90:ff:71:61:9d:70:d7:54:42:a0:4a:1b:6f:c9:52:fb:fb:92:
55:b5:c2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:08:07 2025 by rpki-client