Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aZd6595msdv6LoZRr00AeR_j_lQ.roa
File: aZd6595msdv6LoZRr00AeR_j_lQ.roa (raw, json)
Hash identifier: 4PR9qnlJGoWglgnbxT1nvw/kPEuEeKetZ7HIlE+5+PI=
Subject key identifier: 69:97:7A:E7:DE:66:B1:DB:FA:2E:86:51:AF:4D:00:79:1F:E3:FE:54
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194214416636F4DDB400A11F7827508F2B3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aZd6595msdv6LoZRr00AeR_j_lQ.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212027
IP address blocks: 82.153.159.0/24 maxlen: 24
213.130.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:16:63:6f:4d:db:40:0a:11:f7:82:75:08:f2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69977ae7de66b1dbfa2e8651af4d00791fe3fe54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:9b:9e:5b:4a:77:8c:d9:6a:33:9e:96:8b:
d9:8f:fa:d4:bf:5c:38:aa:de:86:a6:f5:2f:a7:a0:
e8:e1:ed:e0:2d:70:4e:96:12:a9:6f:67:97:ca:1c:
3e:36:99:6b:79:44:dd:a5:9c:0a:83:82:5c:8f:32:
cc:ad:87:9d:42:5f:45:3e:a5:7f:42:41:2f:8d:f8:
4f:1c:6a:d7:78:65:bc:88:a9:da:8f:d6:87:01:80:
79:fe:c2:6a:ff:7a:e4:5e:dc:89:54:74:b2:b8:c2:
ca:02:af:7a:68:7f:f0:05:7f:97:80:89:9e:6f:49:
76:b0:94:02:74:82:08:01:4f:8c:37:7b:50:3a:64:
e7:27:bc:8f:f8:b2:18:e7:3d:b8:5f:4d:58:27:ab:
cd:ce:b3:0c:f6:a6:fa:31:e1:b4:dc:3e:88:b9:57:
10:ba:70:43:93:3e:88:04:3d:23:87:35:31:88:e0:
fe:59:86:8c:88:73:6d:19:72:57:f0:d4:cc:44:eb:
f7:ed:b0:cc:e4:d4:68:d6:1b:01:6f:19:0a:c2:9d:
ee:e9:0f:9b:f0:e0:1d:52:e2:13:57:53:85:da:38:
47:cb:5b:74:d2:27:f6:07:fa:68:4d:9c:64:a8:9e:
66:78:6e:3c:5c:11:c1:2a:22:d7:c9:58:1e:3b:92:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:97:7A:E7:DE:66:B1:DB:FA:2E:86:51:AF:4D:00:79:1F:E3:FE:54
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/aZd6595msdv6LoZRr00AeR_j_lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.159.0/24
213.130.151.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b2:a9:63:4a:73:99:61:e1:69:b5:a2:91:05:6f:73:8f:c7:
c9:32:f7:5b:a9:75:21:fb:6e:94:69:57:28:c4:a5:df:af:ac:
8b:9a:70:98:e0:80:ea:c2:45:d0:22:17:ad:9b:f5:06:c3:aa:
44:10:46:bd:9f:16:fb:80:aa:c2:55:df:c1:b3:71:c8:fe:89:
65:36:6e:b4:79:f4:38:d2:d3:90:a6:ec:ea:38:bc:11:ce:fa:
88:8c:0a:9a:9d:a3:a6:11:25:d7:76:f7:2e:a8:de:c0:16:7b:
39:0a:63:61:48:a3:89:2f:ca:db:0b:1b:9a:20:0f:da:40:63:
e4:a6:53:9e:cc:f0:7d:26:18:fe:15:08:5e:03:6a:a1:80:0d:
89:ce:9a:bc:dc:f2:51:80:52:3b:e2:5a:d7:ac:ef:1b:52:67:
a8:47:bc:87:f5:44:55:84:6e:67:d9:b7:01:a6:15:1b:1a:7d:
4e:c5:9b:8d:ac:70:c6:79:12:ca:61:b1:e2:1f:cc:f3:8d:32:
c6:f1:c8:43:e5:d0:22:85:b0:8f:3b:b7:b0:97:e4:a8:62:e2:
78:03:2e:9f:5f:20:b6:a5:13:88:4d:00:e6:5f:c5:87:9a:ff:
04:a3:e9:06:17:23:db:36:95:76:cc:92:e2:37:0d:38:8a:a7:
3b:57:ee:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:39:44 2025 by rpki-client