Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/i6hB2IahOI67PvpUTSQc2nj4R3g.roa
File: i6hB2IahOI67PvpUTSQc2nj4R3g.roa (raw, json)
Hash identifier: d+MeIEX0oXT1ILgVQ/KLqsvbNLNFr38pDADmv1QHEqI=
Subject key identifier: 8B:A8:41:D8:86:A1:38:8E:BB:3E:FA:54:4D:24:1C:DA:78:F8:47:78
Certificate issuer: /CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Certificate serial: 019473BB0F376A17EA0045F1C5DF1F6F8848
Authority key identifier: BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/i6hB2IahOI67PvpUTSQc2nj4R3g.roa
Signing time: Fri 17 Jan 2025 10:07:06 +0000
ROA not before: Fri 17 Jan 2025 10:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 131.224.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:bb:0f:37:6a:17:ea:00:45:f1:c5:df:1f:6f:88:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Validity
Not Before: Jan 17 10:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ba841d886a1388ebb3efa544d241cda78f84778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:10:f5:48:8f:e6:e7:73:44:02:43:df:25:
ea:11:04:09:38:bd:7c:cd:92:2b:ca:56:ca:36:b9:
bb:84:0b:c4:84:f9:e6:a9:1b:ca:06:d0:fa:11:e3:
80:bb:c5:dd:35:43:31:bb:00:04:b6:12:0b:36:fa:
e5:b6:ca:51:f2:61:aa:64:59:1a:a1:0e:a4:4c:89:
80:61:e0:41:3e:aa:36:4c:d2:af:5c:0f:6a:63:20:
3c:bb:cf:d0:29:9c:4e:32:a5:40:e7:40:f8:8c:70:
76:39:e9:d2:47:20:6a:2e:2c:9e:c7:4b:d1:cd:8e:
40:c4:77:66:be:b0:b3:e1:83:18:38:ec:cf:a3:2a:
fd:a2:16:a4:e1:ec:67:b3:e4:7a:65:05:c8:db:69:
eb:85:7a:ed:e9:87:ae:de:c9:96:17:2b:92:73:15:
4a:6d:90:e6:26:9f:52:7e:1b:3f:ee:6b:ae:49:d0:
0e:67:8d:8a:b9:fe:4c:2e:43:e5:df:8c:a7:c7:71:
a0:ad:ea:10:26:ec:81:ed:e5:41:c8:da:a2:31:fd:
cb:4a:01:ca:45:89:2a:27:59:6f:7e:98:77:d3:0c:
3c:ec:a8:35:9b:8a:8b:44:52:2b:42:a5:20:3e:0e:
7d:2d:e1:0b:0c:34:b0:9d:d9:68:7b:ad:ee:a1:65:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A8:41:D8:86:A1:38:8E:BB:3E:FA:54:4D:24:1C:DA:78:F8:47:78
X509v3 Authority Key Identifier:
keyid:BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/i6hB2IahOI67PvpUTSQc2nj4R3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.224.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:66:76:28:76:49:bd:53:0f:8e:5d:94:90:64:79:4d:fd:14:
8c:63:3c:c7:82:77:2d:11:2f:29:f4:9e:f3:22:22:ab:8b:ea:
d7:1c:21:8e:9e:98:4a:6a:a1:b2:8b:0a:b0:2d:cb:7e:0e:d1:
84:a0:28:a3:50:42:0d:50:39:9c:36:4f:5a:ef:d9:af:3d:84:
5c:51:15:65:2a:dd:94:2c:60:fe:2d:e9:45:f0:cd:33:58:ab:
9c:a9:7d:6f:df:76:8a:90:1a:a4:6d:21:81:6e:85:05:82:4c:
50:90:1b:93:06:64:40:25:8a:1d:81:55:ca:57:7d:aa:a9:81:
74:48:12:27:3d:99:83:10:fb:58:aa:28:04:b5:d9:9a:8a:ba:
9f:ce:89:e5:27:4d:91:98:88:56:45:dc:9b:ec:f4:4a:f1:52:
36:4f:7b:7f:69:b4:8d:c5:e7:69:49:65:51:6f:86:6b:e0:a5:
98:c8:e1:d9:04:52:cc:b6:27:84:45:d2:62:9b:f3:ea:66:48:
07:9a:6d:9f:fc:88:da:a4:82:e6:7e:ae:58:ca:f5:58:9a:97:
6b:cc:c4:aa:8e:ef:f1:6c:e8:a0:2d:d3:62:a7:0b:dc:4b:1a:
c2:d5:9e:45:91:41:25:14:ad:04:dd:63:14:86:56:96:a7:2f:
a9:d5:75:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:38:15 2025 by rpki-client