Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/1-TOVnm2gd04tI-uLivEABR6Pazo.roa
File: 1-TOVnm2gd04tI-uLivEABR6Pazo.roa (raw, json)
Hash identifier: QVp2c0LkMSwloi3MOMCG1fyuxaPczwJ3tn0nHSxmhjE=
Subject key identifier: F9:33:95:9E:6D:A0:77:4E:2D:23:EB:8B:8A:F1:00:05:1E:8F:6B:3A
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 019427487DE7446D33B113B659D580F51D10
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/1-TOVnm2gd04tI-uLivEABR6Pazo.roa
Signing time: Thu 02 Jan 2025 13:50:49 +0000
ROA not before: Thu 02 Jan 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48708
IP address blocks: 185.202.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7d:e7:44:6d:33:b1:13:b6:59:d5:80:f5:1d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: Jan 2 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f933959e6da0774e2d23eb8b8af100051e8f6b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:41:ea:d0:23:3e:af:bf:fa:8e:ee:39:1e:
8d:fb:a1:ef:53:04:cb:db:0e:e4:be:f5:9b:4a:77:
31:51:89:71:cc:73:83:1b:b3:c3:ba:9a:d7:c5:e2:
4a:7a:4c:3f:88:f3:23:57:20:81:28:5f:66:5b:a3:
08:de:fd:04:cb:89:e4:a1:73:89:c3:12:d3:55:39:
b3:70:96:76:95:79:a8:6c:a2:ed:74:bf:b9:49:4c:
7a:2f:27:ee:9b:6f:f9:71:a1:84:7a:50:81:76:16:
29:6e:08:33:02:89:62:86:59:46:58:61:ab:d5:23:
1c:55:67:76:81:4b:a9:ac:25:53:16:d1:24:00:0d:
bb:6a:25:95:53:85:bd:f2:93:90:f1:3b:36:79:fe:
10:dd:8b:c1:42:a5:41:0c:f5:88:45:d0:40:b2:33:
33:b4:8f:fa:2e:81:0a:11:43:99:2a:8a:7e:96:12:
77:da:bb:bc:93:f1:92:17:8a:5c:c6:0d:f4:b7:e5:
86:01:2f:a5:c9:2c:90:94:e2:92:4b:03:a1:2f:ac:
7d:9f:37:32:d3:7a:38:5a:2d:a8:35:85:85:28:15:
44:8a:b9:92:f1:34:06:e7:0f:e6:85:5e:19:f8:90:
25:44:66:6a:95:b8:ab:8f:b6:90:4a:92:8b:52:ad:
1f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:33:95:9E:6D:A0:77:4E:2D:23:EB:8B:8A:F1:00:05:1E:8F:6B:3A
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/1-TOVnm2gd04tI-uLivEABR6Pazo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.79.0/24
Signature Algorithm: sha256WithRSAEncryption
68:2c:5e:c1:e9:69:8e:18:a8:4c:f1:28:9b:7a:72:9a:86:bc:
95:b7:50:d0:4f:57:05:16:bf:50:16:43:09:f7:2e:ef:61:ee:
a8:78:a2:a7:37:9b:b0:03:37:0f:fd:cc:1a:fa:6a:8d:83:0d:
eb:75:60:14:b9:37:86:5e:43:8a:e0:1b:54:fa:09:ef:01:67:
ac:c6:00:4b:d7:01:39:b1:22:de:07:15:a1:bf:d9:6e:cc:ed:
60:11:53:e6:0c:33:84:df:7f:f9:93:7c:6d:d4:3a:59:07:a7:
9f:76:79:f8:3d:16:19:b9:53:2c:ca:cf:37:b0:57:43:70:ea:
36:1d:6b:be:3b:0f:8d:6d:a0:23:dc:99:32:f9:1d:fc:12:7b:
0c:ae:f7:76:45:6f:9c:79:95:86:32:49:2b:5a:2e:03:9b:a2:
19:e3:ff:56:01:99:03:88:b4:aa:47:5c:ac:ce:01:c7:d3:d7:
7d:d6:ca:9b:2f:f3:9c:53:d0:3b:85:32:18:d5:af:35:9d:f4:
8c:84:dc:9a:9e:f5:b1:80:96:b2:38:46:94:04:ae:38:13:15:
6f:ef:f5:92:c0:f3:38:ce:90:13:fb:cc:3e:47:dd:13:a6:33:
d5:9d:86:1e:98:9b:1d:b6:a7:0e:b3:85:33:cc:bb:eb:37:65:
c1:2a:be:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:37 2025 by rpki-client