Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/9rQktfe60tRvMDwU3GwyUPZ-lAg.roa
File: 9rQktfe60tRvMDwU3GwyUPZ-lAg.roa (raw, json)
Hash identifier: e4RtHXeu64DJ7p6Z4JwI2m4uUq/KWxx4lMDQezRXXZ0=
Subject key identifier: F6:B4:24:B5:F7:BA:D2:D4:6F:30:3C:14:DC:6C:32:50:F6:7E:94:08
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01942444965CBCD276748D858D3CBEC06A98
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/9rQktfe60tRvMDwU3GwyUPZ-lAg.roa
Signing time: Wed 01 Jan 2025 23:47:42 +0000
ROA not before: Wed 01 Jan 2025 23:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 212.23.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:96:5c:bc:d2:76:74:8d:85:8d:3c:be:c0:6a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6b424b5f7bad2d46f303c14dc6c3250f67e9408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ac:d2:45:60:6f:d8:d2:9a:03:14:06:b0:65:
c1:f6:d0:15:ba:5d:84:7c:e2:20:08:cf:cc:98:c2:
db:57:04:42:27:83:ac:74:85:3b:7e:27:63:6d:c4:
86:09:a6:c7:7c:8f:8b:63:dc:6c:37:47:46:20:c3:
8a:4a:57:0b:cd:16:56:ad:a7:41:c9:a8:5e:47:0c:
f3:d8:92:f8:c9:8b:23:4e:44:bf:04:4b:1a:db:1e:
65:e1:e5:cd:54:1a:1d:03:c6:74:dd:40:d7:a0:30:
78:91:f6:92:ee:a9:84:70:bc:0c:e3:e3:56:6c:a7:
e2:ab:4f:d6:8d:a0:52:ab:d4:a6:59:8b:3f:d3:e4:
79:8a:ce:5b:9e:be:cf:f6:65:12:19:2a:5e:0c:5d:
bb:45:7d:1d:2d:16:1f:43:a0:cb:0c:fa:82:ad:e4:
95:a4:0d:f2:fb:33:c7:6f:f3:30:45:6e:31:8f:38:
63:e0:07:c4:84:81:dd:d5:fd:73:a6:bf:a3:c8:21:
88:68:08:76:78:bc:4f:81:f9:65:a1:b1:49:c9:10:
6f:72:c1:e4:6c:e5:78:6c:f9:02:06:ce:e5:ed:2c:
4c:4c:94:4b:ae:17:41:38:33:ea:00:fb:20:8c:f2:
12:80:06:fa:b9:28:cb:fd:af:d1:36:a0:8a:24:89:
5f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B4:24:B5:F7:BA:D2:D4:6F:30:3C:14:DC:6C:32:50:F6:7E:94:08
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/9rQktfe60tRvMDwU3GwyUPZ-lAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.196.0/24
Signature Algorithm: sha256WithRSAEncryption
68:8e:14:4e:91:88:6a:d6:27:6b:dc:93:7a:1c:94:e4:8d:4c:
ff:4a:d4:42:9e:4e:6f:29:cb:75:25:c3:24:44:24:0a:51:2d:
0f:31:fd:3b:90:e7:fb:f3:23:c6:1e:d9:cc:02:f4:dc:33:bf:
8b:d7:b9:99:db:e8:fc:07:02:7b:2f:50:d7:a4:02:67:c0:60:
c0:dd:d3:1a:16:01:3b:92:01:42:16:ee:f1:77:5a:a3:be:81:
be:1a:2d:9b:f4:b9:5f:a8:5f:d1:64:a9:51:07:63:ff:33:53:
f2:bd:d8:18:68:de:7b:ea:29:1c:6f:79:71:1d:d1:d6:1f:ce:
af:70:6b:d4:f1:7b:29:47:36:b1:b6:b8:91:cb:97:e8:2a:5a:
65:11:63:42:4c:0a:53:58:73:f5:3e:c3:13:4b:71:ed:9f:2a:
8c:cc:ce:31:03:10:98:15:14:44:48:32:8d:35:22:94:f1:84:
53:98:96:92:25:c8:2e:aa:7c:81:97:3d:15:b2:58:8b:51:b1:
4e:28:97:d7:6a:fb:2e:20:94:11:39:49:73:e3:c4:a9:3f:9f:
e1:e9:77:0b:f6:f2:4e:68:0a:a5:e4:e7:cb:cc:e9:f2:e1:30:
6f:62:91:5a:71:35:58:89:23:c6:ba:58:fe:b7:75:f6:84:47:
0f:b4:e6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:57:27 2025 by rpki-client