Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/D7rLKs83gqvnTXGupcelojlKtjg.roa
File: D7rLKs83gqvnTXGupcelojlKtjg.roa (raw, json)
Hash identifier: K2x8TH1ASNYDDm4X/x/eYNrgqubzhXiYe7qsdHWs09I=
Subject key identifier: 0F:BA:CB:2A:CF:37:82:AB:E7:4D:71:AE:A5:C7:A5:A2:39:4A:B6:38
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143DA3D7ECBD8B8A5EB0324DC6FE9AC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/D7rLKs83gqvnTXGupcelojlKtjg.roa
Signing time: Wed 01 Jan 2025 09:48:02 +0000
ROA not before: Wed 01 Jan 2025 09:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24768
IP address blocks: 82.152.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:da:3d:7e:cb:d8:b8:a5:eb:03:24:dc:6f:e9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fbacb2acf3782abe74d71aea5c7a5a2394ab638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0b:fd:0d:e6:6b:c2:ad:f4:de:5f:4b:08:03:
7f:da:6f:7f:74:a1:e1:a2:34:b5:9a:67:98:e9:31:
ca:3e:b1:d2:bb:65:aa:c6:bb:83:6d:0d:32:60:83:
40:3e:2f:6a:31:b2:b8:45:93:62:e3:38:0d:9f:a7:
8c:20:71:93:22:64:3e:00:7f:12:b3:87:2e:6e:06:
ce:0b:55:8b:c8:5a:17:33:bf:2a:ba:8c:bc:09:92:
ee:57:72:f9:0c:9d:78:b7:ca:06:ae:b7:e6:78:4f:
fe:c6:bc:df:5e:70:75:62:3a:14:6a:e1:f2:d1:bc:
e1:d5:2f:db:12:12:67:cc:fc:1a:5c:29:8d:12:b8:
26:4e:e5:e5:2d:d4:12:cd:df:26:ca:01:ad:dd:e3:
a8:13:2b:ec:55:ca:82:ac:1d:ef:a2:7c:33:31:dd:
3f:29:9f:b7:4c:9f:50:95:70:a5:7b:eb:3f:28:c5:
68:50:8c:8e:76:6f:8b:8d:69:85:8f:3b:ce:d9:c9:
73:4b:20:78:d1:57:0a:23:03:4e:60:1e:c9:6d:37:
ca:45:fa:f5:a8:a4:55:cd:b5:5b:43:ad:a9:04:60:
25:c0:bb:c9:64:cd:38:de:f2:70:2e:20:4b:86:bd:
13:52:43:45:1b:c4:c2:d3:86:a9:c4:a4:43:4e:ef:
d2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BA:CB:2A:CF:37:82:AB:E7:4D:71:AE:A5:C7:A5:A2:39:4A:B6:38
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/D7rLKs83gqvnTXGupcelojlKtjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.179.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:66:71:12:da:c1:b2:d2:fe:88:1b:b8:64:54:b2:8e:c2:3b:
3b:0f:4b:9a:c1:a6:90:d6:c7:58:17:ec:ef:95:0c:47:13:4a:
9b:cb:bc:07:58:f1:3f:4a:5d:ec:88:66:2c:93:a2:25:30:07:
ab:bb:73:47:c8:6d:74:7a:ef:a3:32:45:d1:46:4a:6d:63:92:
8f:da:7e:3c:6f:2c:37:6e:ca:0e:47:a4:20:99:9c:41:20:64:
65:9d:66:e3:7b:11:81:92:df:b7:60:20:02:65:bc:82:bb:dd:
63:4e:cc:95:29:6a:b4:06:e3:f6:16:40:97:50:ee:e5:22:55:
31:63:7d:e8:19:9f:8d:e9:b2:94:4d:d4:e7:b4:d1:e5:f9:aa:
42:6e:14:5c:69:12:13:6e:bf:0b:ee:68:5a:49:8a:cd:96:ce:
07:dd:8a:2c:64:a7:72:0f:5c:a6:78:08:59:d2:29:45:3f:0a:
b6:33:71:33:d4:7e:dd:9e:9c:1d:8a:34:22:5d:c1:f5:f9:f7:
6a:96:78:f6:f8:c3:fe:a8:cf:7f:3d:e8:33:b1:7b:40:b1:43:
c5:5e:26:fe:60:ac:91:70:f5:d7:69:ec:64:38:c9:33:3c:ff:
2f:66:47:20:28:3a:9f:b5:d3:19:ee:26:d5:bd:e7:f7:d5:e7:
90:14:96:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:43:52 2025 by rpki-client