Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/I8V5CqFsC4b2CVaA1ZHeg7rjvOc.roa
File: I8V5CqFsC4b2CVaA1ZHeg7rjvOc.roa (raw, json)
Hash identifier: BTAIBPAqARkRIHjzhMGLYskI22W5CmLK/OM0UhT9K+I=
Subject key identifier: 23:C5:79:0A:A1:6C:0B:86:F6:09:56:80:D5:91:DE:83:BA:E3:BC:E7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143FEEDB178788387187B4D281ADC52
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/I8V5CqFsC4b2CVaA1ZHeg7rjvOc.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199415
IP address blocks: 217.145.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fe:ed:b1:78:78:83:87:18:7b:4d:28:1a:dc:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23c5790aa16c0b86f6095680d591de83bae3bce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:e0:d4:ce:da:01:d3:c8:cb:92:58:75:a4:
cb:62:27:1f:d6:81:5e:81:6f:9e:59:bb:ef:8f:0d:
5f:bc:3e:78:57:24:65:c8:a5:57:5f:63:0d:0d:11:
75:68:a3:bd:53:80:57:0e:0d:ea:10:77:0a:cb:72:
02:99:57:7d:19:ba:8e:93:ea:e4:a9:f4:ef:a2:00:
08:95:8a:76:87:5f:39:1c:88:08:5f:59:bb:c9:92:
93:b7:99:95:46:50:80:d4:ea:f4:f0:07:5c:bd:b7:
63:7f:55:08:ae:df:25:b9:79:59:a9:18:b6:67:3b:
36:be:b5:a7:8c:34:e4:82:bd:84:43:de:77:d4:fd:
5a:2f:21:4e:35:f7:db:be:24:00:6a:82:f7:79:49:
85:37:20:30:50:35:e9:01:5e:56:e4:ba:d9:3e:8c:
31:13:a6:e5:e0:57:b0:18:19:7e:23:0b:30:6d:07:
91:ae:9a:1d:52:6e:93:6e:18:9a:9f:67:f6:76:1f:
cf:ca:1b:25:1d:9e:3c:40:41:46:cd:df:cf:0f:b0:
a1:c6:38:fd:74:c8:cf:bb:40:22:97:d1:fd:d0:dc:
6a:ac:7f:6b:95:03:44:02:79:47:b3:e4:a2:c2:cc:
7c:c6:72:77:c9:9b:84:eb:12:2d:5f:bb:ba:06:19:
3c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C5:79:0A:A1:6C:0B:86:F6:09:56:80:D5:91:DE:83:BA:E3:BC:E7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/I8V5CqFsC4b2CVaA1ZHeg7rjvOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.72.0/24
Signature Algorithm: sha256WithRSAEncryption
73:2e:b9:60:3c:d6:12:55:17:b6:ee:c7:04:d3:dc:c7:99:e0:
64:58:de:4b:65:5a:f8:7f:30:47:b1:f6:b7:26:59:e8:54:85:
32:ec:d2:7c:07:4c:f3:d0:2f:52:d5:8e:65:d1:e1:f7:d0:69:
e5:f7:03:dd:5a:9a:fc:d1:c9:a1:ea:69:bb:65:3b:fe:29:87:
40:9a:2c:76:b7:92:93:4b:9a:47:aa:10:e6:16:41:16:67:ec:
f5:ed:f1:9f:77:28:3e:d5:10:0f:ee:40:2a:05:e0:11:4b:bc:
8d:e7:b5:9e:f3:ff:85:87:b0:ed:ee:66:82:46:90:07:cd:19:
80:a9:7d:a8:9e:e6:5c:69:ae:de:3f:81:92:ae:6d:f4:3c:38:
61:f1:d8:9d:a2:01:b8:98:e3:c7:1b:46:b6:79:69:94:9f:c6:
2f:37:f6:1f:0d:38:43:ae:e8:eb:d9:58:41:1d:30:ad:e3:1c:
ee:4c:a6:5b:0f:76:54:84:dc:63:59:8a:0b:16:46:a2:94:94:
ec:b2:bd:b6:6d:bb:2e:7e:3b:80:87:00:65:a2:7a:05:ae:cb:
77:46:09:ce:e2:92:c6:60:89:ca:45:3a:54:64:8d:85:82:a6:
39:8f:27:5f:d2:97:f4:32:1f:5e:14:b1:28:97:07:2c:b5:f9:
43:03:50:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:51:40 2025 by rpki-client