Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_k-y9Iyc4_sGDCw2_Q4L0a5SSg4.roa
File: _k-y9Iyc4_sGDCw2_Q4L0a5SSg4.roa (raw, json)
Hash identifier: HENdccgt6xBCpiOaxrLgRQefRAGeTvOk5t6p3ML2CQk=
Subject key identifier: FE:4F:B2:F4:8C:9C:E3:FB:06:0C:2C:36:FD:0E:0B:D1:AE:52:4A:0E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143FDE556966A81233D892F46A86A3B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_k-y9Iyc4_sGDCw2_Q4L0a5SSg4.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198831
IP address blocks: 213.130.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fd:e5:56:96:6a:81:23:3d:89:2f:46:a8:6a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe4fb2f48c9ce3fb060c2c36fd0e0bd1ae524a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:01:ba:b6:f4:de:9d:aa:7e:94:90:f4:70:
bc:0f:06:a5:86:20:6d:ad:f2:c6:b4:ca:67:95:2d:
f6:f8:cf:cc:49:64:e8:ba:61:97:d7:2c:02:04:df:
49:ac:e3:30:44:57:4d:2b:b7:45:7b:cb:87:40:0b:
fa:fc:89:35:2d:a5:2a:8f:53:b4:dc:21:6f:72:89:
ce:27:4e:73:34:87:fd:5c:2d:fb:35:a1:70:4a:6c:
52:4e:b9:3a:f1:bd:38:b4:eb:b4:ea:3b:cc:52:f9:
36:17:9b:f3:dd:99:49:16:56:b3:a4:27:a9:2a:9a:
fe:49:a6:21:44:e9:4a:f1:f6:04:c7:fe:4a:c1:28:
ef:3f:61:c3:e1:ec:98:67:2e:6f:b1:8b:a9:e1:ee:
19:d1:da:f1:87:ac:ce:7d:bf:e1:6a:b6:5e:9b:d1:
5b:62:6e:af:3b:00:08:86:bf:9c:8d:b3:f1:03:40:
4e:3f:7e:3d:dd:59:c5:a9:46:ea:12:58:31:9e:9f:
c5:12:58:64:02:a1:db:e1:73:19:e1:6d:3b:02:4e:
ac:be:98:a7:b2:44:f8:4e:50:06:1e:2e:cd:90:47:
0d:88:a4:13:ff:90:7f:6a:b8:24:9a:6a:ad:06:02:
08:a4:ab:35:ab:e4:4c:1f:ec:b9:92:76:c2:41:f4:
b4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4F:B2:F4:8C:9C:E3:FB:06:0C:2C:36:FD:0E:0B:D1:AE:52:4A:0E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_k-y9Iyc4_sGDCw2_Q4L0a5SSg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.153.0/24
Signature Algorithm: sha256WithRSAEncryption
63:6b:6f:03:ee:70:db:78:79:82:05:c3:e5:99:65:e5:49:64:
cc:fa:80:8d:67:3a:99:3b:72:64:6c:64:0d:a9:9b:8c:ff:35:
30:20:fc:f7:13:e5:a7:68:8e:b9:2c:6b:31:83:99:e2:69:07:
ac:4a:c8:d2:75:6a:8a:0c:6d:8b:e7:69:81:2b:19:9a:9a:04:
56:ac:b5:05:0c:e9:6f:40:4e:cf:7d:e9:1e:a1:bc:c6:2d:98:
e0:89:43:80:b3:b2:6d:82:4a:c4:dd:00:95:fd:0e:94:9b:98:
95:c5:73:d7:8b:e8:6a:ae:d5:26:4b:15:78:6c:8a:53:25:bc:
7e:9c:58:e2:17:a8:d1:83:6e:66:3c:8c:8a:1f:df:ea:5d:93:
27:dd:a6:c7:18:c3:8c:b6:8f:dd:29:45:d1:01:52:66:6a:27:
e8:2f:e2:4d:55:45:b2:75:d1:d3:77:e0:99:f3:95:1d:d0:77:
61:b1:88:10:3a:86:6b:2c:28:df:19:64:04:ef:c2:65:dd:30:
46:2e:48:55:b1:77:55:5a:22:83:ab:7a:be:bb:06:5e:95:b8:
72:b6:70:f2:49:91:fc:2c:ba:0d:44:6e:47:bb:6e:33:9e:03:
90:52:b0:0e:8e:df:d8:15:96:92:34:99:3f:ce:a9:b1:38:8c:
93:36:93:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:55:20 2025 by rpki-client