Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/V87Zb9tsihkCIt_3rM2-pswZY7E.roa
File: V87Zb9tsihkCIt_3rM2-pswZY7E.roa (raw, json)
Hash identifier: 1Am3a4g3NH9NpS39M9YU8CgYio7Fti+T4SH2iokpK/E=
Subject key identifier: 57:CE:D9:6F:DB:6C:8A:19:02:22:DF:F7:AC:CD:BE:A6:CC:19:63:B1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421442FB8D920B6C1D2F19EC77900FBDB
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/V87Zb9tsihkCIt_3rM2-pswZY7E.roa
Signing time: Wed 01 Jan 2025 09:48:24 +0000
ROA not before: Wed 01 Jan 2025 09:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215523
IP address blocks: 217.145.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2f:b8:d9:20:b6:c1:d2:f1:9e:c7:79:00:fb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57ced96fdb6c8a190222dff7accdbea6cc1963b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d4:a8:be:78:80:bb:82:0c:bf:27:ce:2f:37:
c1:e6:b3:74:dc:48:f1:05:96:5d:1c:1d:aa:82:62:
2c:f8:ec:b7:89:eb:9c:25:17:ca:54:df:c2:ee:c3:
88:8c:a9:60:d4:41:92:54:c3:a7:4f:31:de:ad:a7:
03:2d:2a:da:9e:15:37:de:d4:30:9f:c0:f5:6c:8d:
fd:7c:4e:4f:17:28:b3:63:48:98:88:be:ce:60:56:
fa:73:18:74:78:cd:74:71:1e:08:83:47:4b:03:c5:
32:65:86:8b:5e:e1:1a:8c:1e:ef:9b:64:ea:c2:5d:
35:d6:63:8f:f6:1a:6b:e2:fc:08:50:be:da:ce:7d:
98:ef:dc:ad:83:e6:18:40:ec:02:89:8b:e1:e7:f5:
6b:8e:1c:7a:8f:2c:72:5b:ae:4a:67:a8:98:4f:39:
9f:28:dc:65:f3:61:59:2b:05:72:3a:85:37:fb:23:
5c:fc:fa:02:c6:90:12:56:f0:d6:91:40:8a:70:38:
c5:4e:0e:5d:3d:e2:d8:85:c2:16:54:0b:ab:16:5b:
26:e4:20:7d:6e:53:95:b7:d2:71:9d:dd:b2:d5:54:
34:24:4b:c7:a4:f4:7c:21:24:ed:9d:83:8c:69:5e:
cc:16:48:78:59:5f:70:5c:4d:ea:65:7c:cc:50:52:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CE:D9:6F:DB:6C:8A:19:02:22:DF:F7:AC:CD:BE:A6:CC:19:63:B1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/V87Zb9tsihkCIt_3rM2-pswZY7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.76.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:1e:63:d9:ce:c4:3d:3d:2c:b0:b8:18:a7:c9:fe:34:80:a1:
b1:b0:42:39:9a:a7:3c:f1:0f:3e:aa:62:d0:54:82:92:95:ed:
91:6d:1e:50:0f:4f:76:82:7c:93:86:7b:86:b9:3e:f6:17:f4:
fe:48:98:bf:b5:d9:35:0f:20:6f:90:f8:30:de:9f:27:dc:e1:
be:82:71:b8:f5:39:4e:73:7c:4e:d3:0a:e7:8b:45:59:8b:61:
0d:7d:52:c6:6f:4b:fa:e1:20:23:a0:b5:15:02:90:d0:b8:2a:
5f:f0:a9:b6:67:80:31:17:d7:15:4d:19:00:ac:9c:68:eb:ef:
24:f8:05:5c:2e:7f:91:af:e4:d1:fa:55:a2:70:fb:99:7f:d9:
ce:ea:92:ec:a9:1b:aa:9c:23:82:72:ed:d4:18:b2:53:dc:ba:
2e:50:66:28:bb:5d:b6:24:b9:15:fb:db:74:7d:15:b8:e3:78:
32:4b:61:bc:5f:34:65:7e:20:b5:4c:ff:a5:d0:c5:6a:1b:3c:
0b:2d:e1:14:3f:26:2c:eb:59:8b:ad:52:b9:3b:73:b3:8c:f7:
98:2d:9d:21:f2:25:96:c4:41:72:9a:70:db:09:11:84:37:56:
bd:79:c5:38:99:bb:28:00:6d:a6:15:99:02:6e:a7:c7:97:29:
20:89:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:42:29 2025 by rpki-client