Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/rS8McXzCkBbcVb5uezFTBLPdaiQ.roa
File: rS8McXzCkBbcVb5uezFTBLPdaiQ.roa (raw, json)
Hash identifier: KC6Lr4AJ8lP/HwGwdQX+pnrzkPDHp47sMoI3Dyq3FbM=
Subject key identifier: AD:2F:0C:71:7C:C2:90:16:DC:55:BE:6E:7B:31:53:04:B3:DD:6A:24
Certificate issuer: /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Certificate serial: 0194266BAD5EC6F71969361F9A2DB8C922A2
Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/rS8McXzCkBbcVb5uezFTBLPdaiQ.roa
Signing time: Thu 02 Jan 2025 09:49:38 +0000
ROA not before: Thu 02 Jan 2025 09:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199522
IP address blocks: 84.244.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ad:5e:c6:f7:19:69:36:1f:9a:2d:b8:c9:22:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Validity
Not Before: Jan 2 09:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad2f0c717cc29016dc55be6e7b315304b3dd6a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8e:c5:f0:f1:b5:be:e5:8b:ba:bc:43:fb:e0:
95:4d:8b:3a:b8:cf:3f:bf:a9:61:aa:1b:7c:5f:fa:
4b:bf:55:45:b6:25:f7:7e:64:f5:4a:d2:92:86:78:
ec:75:13:1f:ca:ea:8d:8a:fb:d3:52:22:47:c8:0a:
2f:7b:de:c3:d7:1a:7c:f9:28:ce:dd:56:1d:3b:fa:
b7:11:5d:f8:cc:21:5f:14:cd:23:87:86:79:0f:25:
2e:e3:49:5d:4d:8a:3c:90:65:b2:e6:3d:a7:12:c5:
4e:da:a5:90:16:24:cf:7e:bb:15:b8:33:17:c2:54:
7c:b1:9a:ff:49:e8:9b:66:8f:f2:a8:bc:0f:73:be:
1d:c5:43:51:ed:a1:29:27:07:62:4d:76:0e:17:13:
99:6a:e1:73:31:5e:4b:f5:ab:72:00:d5:1a:70:12:
d9:2a:50:e8:fd:40:6b:f3:46:87:f1:65:a8:a2:be:
31:9a:2c:b1:ce:9e:36:25:8c:e0:1d:7f:c8:f1:5c:
db:8d:d9:6d:5c:88:d2:59:07:ed:bc:40:bd:26:fd:
d1:c2:28:23:ed:1c:4d:2e:e1:51:d1:e0:2e:76:55:
79:7d:fe:69:f3:a2:33:a3:45:9e:52:7d:88:e9:e5:
42:f4:01:a4:25:df:da:b2:2d:ad:7d:fd:11:0c:b2:
9d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2F:0C:71:7C:C2:90:16:DC:55:BE:6E:7B:31:53:04:B3:DD:6A:24
X509v3 Authority Key Identifier:
keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/rS8McXzCkBbcVb5uezFTBLPdaiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.244.172.0/24
Signature Algorithm: sha256WithRSAEncryption
31:2f:d1:48:75:38:29:18:2a:63:cf:31:a5:07:57:31:b2:a1:
cb:38:70:a4:15:e5:81:4f:0d:0c:3a:32:83:36:94:fa:76:30:
79:89:42:9c:ca:ed:54:35:6c:c9:67:f0:ba:87:72:f4:69:07:
f6:22:e6:85:00:dd:43:4c:6c:8c:e4:19:33:80:27:35:bc:fd:
6a:7b:46:e1:bf:ad:a2:5d:04:54:ed:40:08:3f:bb:a0:6c:2f:
40:81:2a:8d:59:e8:b1:09:b5:b0:d6:d1:d1:ae:d1:30:b9:e2:
62:82:c7:a2:d5:f2:81:ec:bd:9b:57:5c:44:ad:97:16:af:41:
7b:54:f5:c0:81:4c:ef:57:4e:ee:6d:ae:16:dd:e2:72:09:d9:
cf:88:43:c0:da:01:1d:78:b8:73:73:c6:11:27:27:cd:0f:45:
70:38:1b:8b:f3:62:7a:bd:83:bd:83:a9:76:1f:d3:74:9b:df:
02:9c:dc:d9:2a:48:1e:fd:00:86:50:a0:59:d1:7d:6c:e6:db:
14:8f:f3:9a:72:03:bf:ef:2d:d6:16:b4:2e:b0:c2:18:23:fc:
44:ee:d0:5c:73:ac:13:41:6f:de:bd:85:0a:74:db:72:6d:5c:
cd:37:73:42:f7:fc:31:d4:37:31:9a:87:8e:54:70:1a:0a:48:
ed:ef:78:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:14 2025 by rpki-client