Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/cur4FXdft_oIrPB-e2wMuxoxg0k.roa
File: cur4FXdft_oIrPB-e2wMuxoxg0k.roa (raw, json)
Hash identifier: EMpY5uYjW4BdaSy23lSxIa0kd9ZyYy6IZCRIGCLLNgg=
Subject key identifier: 72:EA:F8:15:77:5F:B7:FA:08:AC:F0:7E:7B:6C:0C:BB:1A:31:83:49
Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial: 01941FFAA2CC1CC08A6466686DA6133310A0
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/cur4FXdft_oIrPB-e2wMuxoxg0k.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 141.93.12.0/23 maxlen: 24
141.93.16.0/21 maxlen: 24
141.93.24.0/24 maxlen: 24
141.93.28.0/23 maxlen: 24
141.93.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a2:cc:1c:c0:8a:64:66:68:6d:a6:13:33:10:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72eaf815775fb7fa08acf07e7b6c0cbb1a318349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ed:eb:3a:7b:a5:52:67:4b:29:e4:14:27:97:
ed:30:ed:56:ac:6a:94:99:88:1e:87:0e:f7:c4:dc:
64:a3:48:9b:07:94:88:76:4b:b3:fa:f7:34:15:19:
24:5a:63:c0:4e:f0:44:7e:ef:64:3e:3f:87:c8:50:
cf:1f:a6:a4:9e:fa:f2:a2:f0:6d:e2:5e:d6:85:4e:
1c:f1:2d:5d:a0:5f:53:38:e7:8b:58:d4:08:91:25:
47:9a:05:85:4d:e8:43:f5:69:0e:b2:c3:f7:ca:62:
5b:52:d7:e7:e1:ea:74:82:5f:01:fb:89:ce:9a:7c:
f2:52:e8:65:58:9a:8b:57:e0:17:16:76:7c:56:5e:
96:44:42:5a:ca:13:4d:b1:29:46:f0:bb:52:65:93:
40:83:12:21:71:e3:4f:ec:0d:f5:e8:69:d7:53:9f:
fb:0f:da:a2:2b:bf:a7:06:89:71:3e:0a:af:8c:f7:
fa:22:7e:ee:21:d1:7c:fd:ba:cb:8c:b0:51:04:26:
6a:6d:bf:f0:76:04:c5:f6:71:17:4e:ce:39:5e:49:
eb:ef:13:ca:40:82:b3:fa:86:a7:25:44:fe:c1:93:
36:88:b5:48:c2:fb:e1:52:24:67:44:5f:5c:cb:95:
b7:c0:d6:c5:cf:0b:49:07:db:5e:32:63:0a:f3:41:
f9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EA:F8:15:77:5F:B7:FA:08:AC:F0:7E:7B:6C:0C:BB:1A:31:83:49
X509v3 Authority Key Identifier:
keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/cur4FXdft_oIrPB-e2wMuxoxg0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.93.12.0/23
141.93.16.0-141.93.24.255
141.93.28.0/23
141.93.32.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:17:ad:49:c0:25:38:eb:6b:0e:d5:20:76:ce:33:22:b1:ed:
5e:b0:fe:48:6f:b9:83:97:fc:0e:0d:b3:0c:c6:0f:c7:5a:89:
82:0c:c4:ff:15:9a:5a:31:dd:86:b8:59:95:b8:e7:56:30:a3:
7d:10:58:cd:ce:e1:01:e4:87:db:2d:eb:2a:f8:87:81:6f:3b:
0b:e7:f0:7b:80:2f:dd:4a:67:79:4a:3a:c1:70:60:49:0a:3b:
8d:0d:51:c3:2e:43:b8:3c:f8:c3:60:64:50:85:63:96:ae:86:
c4:31:5d:76:9a:ef:78:47:37:5c:b0:6a:39:61:b8:34:39:d3:
c2:c3:1d:f6:54:67:8c:cd:46:26:ba:88:f3:96:ff:39:99:36:
a1:55:49:e1:0c:e4:fd:37:cd:a2:f3:21:a4:e2:7d:4e:6f:09:
70:00:27:23:38:df:ef:ff:7d:51:81:29:30:bc:ed:b8:fc:ff:
7f:54:7a:23:f5:54:32:de:cc:86:be:03:57:45:e0:d4:a9:15:
82:aa:8f:47:c6:8b:41:67:18:32:a3:a5:cc:a0:95:b8:dd:23:
f9:86:1a:08:54:df:8b:29:cc:3a:40:be:1c:0a:72:76:ba:a3:
58:97:79:78:e8:a4:ee:4e:ba:07:7b:4b:5c:c3:e2:27:15:d4:
ff:aa:89:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:42:35 2025 by rpki-client