Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/mL9iMZ16_8ZjCy4qonDTON3ib5Q.roa
File: mL9iMZ16_8ZjCy4qonDTON3ib5Q.roa (raw, json)
Hash identifier: ZVZsKyrcHGv4PPqTEb+ceebYDVLTESRPFX1GG8GQzE8=
Subject key identifier: 98:BF:62:31:9D:7A:FF:C6:63:0B:2E:2A:A2:70:D3:38:DD:E2:6F:94
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 0194A6E49907C8BB51686AF7ECF360B7A35C
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/mL9iMZ16_8ZjCy4qonDTON3ib5Q.roa
Signing time: Mon 27 Jan 2025 08:33:06 +0000
ROA not before: Mon 27 Jan 2025 08:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213527
IP address blocks: 212.56.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a6:e4:99:07:c8:bb:51:68:6a:f7:ec:f3:60:b7:a3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: Jan 27 08:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98bf62319d7affc6630b2e2aa270d338dde26f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a8:d8:dc:cf:27:c8:30:bc:7b:20:85:3d:92:
c9:37:41:bb:a8:34:20:b6:c1:3c:50:aa:8c:dd:7b:
a9:94:a1:80:46:b3:1a:20:84:c7:46:95:cb:f8:b8:
0b:7a:0a:be:6d:ce:5a:a7:f2:a0:dd:88:70:cb:6c:
25:b9:6d:99:21:33:5a:a5:c1:a9:c8:d7:46:4d:40:
b0:45:e0:4c:b5:b3:0b:c1:97:33:7f:51:07:f9:4d:
61:f3:58:f3:2a:cb:be:fe:8f:33:ab:3c:6c:b0:b1:
0d:3b:e6:dc:29:3d:d8:80:4f:58:c3:9a:1f:08:a8:
2e:46:96:af:9c:c3:ba:0e:24:8b:cd:79:43:32:65:
ab:3b:36:07:ed:0c:43:5b:f3:dd:6d:b9:9c:aa:23:
0f:26:57:36:53:40:ba:31:15:7f:11:06:7d:78:34:
29:53:49:a6:a5:a2:8a:98:3b:33:d5:e4:e0:3e:19:
09:b6:6f:61:4b:22:95:8c:c9:1e:3a:74:b4:62:81:
c4:1f:27:c4:42:70:0e:ef:77:a8:76:9f:d5:20:9f:
b5:20:39:f5:0d:7c:c8:b9:6e:1b:7e:26:37:3c:73:
09:ea:1c:1f:47:38:56:13:c2:7d:c5:73:fd:9a:ab:
96:73:6e:6e:82:54:d6:0b:da:2a:89:c3:e8:c6:a9:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BF:62:31:9D:7A:FF:C6:63:0B:2E:2A:A2:70:D3:38:DD:E2:6F:94
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/mL9iMZ16_8ZjCy4qonDTON3ib5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.56.58.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:33:cd:dd:08:60:b1:15:79:99:76:8b:13:48:1f:05:c2:a5:
d7:e2:09:b1:c7:88:35:a4:9c:3c:35:45:1e:6a:2a:be:bc:f5:
45:77:0a:8f:d0:3e:bc:32:ff:8f:eb:5c:14:90:c7:46:33:0c:
22:5b:e2:bb:6b:f1:43:6f:f9:32:e9:fe:f4:57:ac:c2:c9:8f:
ef:65:13:22:da:00:ac:fe:f6:12:c1:dd:17:31:7f:94:78:0b:
3f:d2:18:4d:8f:71:43:1e:a4:a1:5d:f4:09:09:ed:ce:c7:7a:
f1:51:fd:04:da:62:10:de:a1:10:c7:c5:21:e2:66:4a:62:c4:
cb:d8:69:d5:ad:a0:b8:0f:cd:24:7c:51:b0:97:43:d8:d2:a6:
8a:b3:4a:83:25:ad:1b:f8:99:39:aa:3a:6b:c9:8e:09:da:85:
d9:5c:3f:c9:1e:ac:a0:35:6a:33:1f:61:85:f2:40:56:9d:d5:
df:f6:bf:7b:fe:a6:f4:6b:5f:5f:b4:fb:1b:48:1f:1a:7e:7f:
ba:c6:d0:7a:74:6c:5a:36:ce:2f:24:6f:c4:0e:75:bf:36:65:
f2:cb:67:c1:39:26:3b:8d:76:86:c5:1a:68:99:77:60:3c:88:
3e:b2:08:18:72:5a:c2:72:1b:42:26:b2:33:95:d1:75:16:6b:
61:eb:19:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 16:06:57 2025 by rpki-client