Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/p4gLr8QizpVSiuP1_Kkcfly1rjA.roa
File: p4gLr8QizpVSiuP1_Kkcfly1rjA.roa (raw, json)
Hash identifier: Wzj0j9gfoenaBy8qXe/RI5cOEUtdX9DRCtW7mRo3wd0=
Subject key identifier: A7:88:0B:AF:C4:22:CE:95:52:8A:E3:F5:FC:A9:1C:7E:5C:B5:AE:30
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 019427B5B70E12446990990FEEF4CED4C1C9
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/p4gLr8QizpVSiuP1_Kkcfly1rjA.roa
Signing time: Thu 02 Jan 2025 15:50:07 +0000
ROA not before: Thu 02 Jan 2025 15:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205800
IP address blocks: 217.145.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b7:0e:12:44:69:90:99:0f:ee:f4:ce:d4:c1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Jan 2 15:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7880bafc422ce95528ae3f5fca91c7e5cb5ae30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:53:23:74:56:ef:ac:8f:c7:e2:7b:e7:6a:8c:
8d:5e:7b:38:43:80:09:bc:37:cf:67:ac:31:85:3d:
0f:63:50:67:3d:5a:5c:72:94:83:30:eb:22:40:aa:
eb:dc:35:f3:f0:8f:a4:b9:f7:38:e3:bc:86:e9:fc:
0c:d4:37:68:4c:84:e8:9e:85:46:2e:e3:08:d9:99:
73:7b:f3:eb:53:e9:07:fa:a4:58:7b:82:26:e4:b4:
bd:ac:89:57:73:1c:b5:fb:c1:9d:32:58:a0:10:e1:
17:79:ae:04:7c:1b:13:49:ef:57:4b:c9:a0:04:3d:
85:1b:af:c8:9a:fe:69:59:b3:0c:57:aa:fb:d1:dc:
c5:3b:85:3a:17:2c:fe:45:ad:36:8f:12:63:b8:cc:
d8:63:5f:59:63:cd:5c:79:46:61:75:68:2b:3d:d6:
06:99:1f:ef:86:7b:04:8b:eb:58:a0:0d:63:fe:5e:
a3:8e:52:68:19:c1:f6:4f:0f:ef:3a:99:a8:89:4d:
d3:38:87:91:b0:37:c2:91:8e:8a:16:9a:31:ad:3a:
f5:84:30:2b:a3:8d:4d:18:fc:7b:db:c9:1c:25:30:
f6:1c:3e:31:3e:81:23:33:6d:19:7e:b8:27:2e:ba:
a9:7d:a8:5d:5b:93:dc:ab:f2:e5:1f:84:d0:08:3d:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:88:0B:AF:C4:22:CE:95:52:8A:E3:F5:FC:A9:1C:7E:5C:B5:AE:30
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/p4gLr8QizpVSiuP1_Kkcfly1rjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:b5:ad:61:f4:d1:5b:aa:70:9d:26:d4:7d:f9:af:d4:7d:17:
90:89:58:8b:c1:08:42:80:12:35:fb:b4:38:55:87:95:27:e4:
eb:45:0f:4c:3f:5b:60:61:d2:c6:c7:f8:99:85:10:0e:75:70:
b9:74:55:99:f8:f4:d2:0b:79:e0:5d:c8:2c:e0:c1:d5:e5:1f:
66:71:46:69:b0:1a:e0:e9:f3:08:33:c5:0b:9c:00:6a:5f:e6:
1c:b5:6b:46:b6:e3:ed:97:a8:c4:e6:37:c7:f7:49:3f:6b:6d:
b1:47:cb:e0:0f:3f:58:ee:d5:f0:a3:56:2c:d0:f1:fb:a5:06:
a2:9b:b5:1d:0e:e8:cf:18:0d:fc:90:c1:1d:d7:90:ed:28:b8:
59:2d:e1:e7:c0:17:db:60:e6:3f:ae:39:35:46:52:02:db:a5:
76:b0:aa:ed:93:fa:ef:6f:9e:ab:f9:8d:3c:4c:ff:ac:27:cc:
a4:6c:d4:73:99:b3:4a:27:c8:24:b6:58:3a:34:0b:6a:95:15:
95:9c:5b:05:ff:23:4e:82:07:d1:2e:9e:fc:e7:9c:ad:d3:df:
c2:67:c2:33:76:8a:46:12:cd:26:0d:0e:92:c3:b4:80:a9:a5:
0b:0a:e7:a2:3c:34:2d:a2:77:58:72:76:e7:7b:2f:75:0b:0f:
01:9a:d5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:10:01 2025 by rpki-client