Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cBU0CrLuVp0jLiUsaJZXiHOBIUQ.roa
File: cBU0CrLuVp0jLiUsaJZXiHOBIUQ.roa (raw, json)
Hash identifier: e/taHF1+wghErSxL76XdybY4VT5aonAjjFxh3lV5wAA=
Subject key identifier: 70:15:34:0A:B2:EE:56:9D:23:2E:25:2C:68:96:57:88:73:81:21:44
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194214436125775D6921990413672943DB6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cBU0CrLuVp0jLiUsaJZXiHOBIUQ.roa
Signing time: Wed 01 Jan 2025 09:48:25 +0000
ROA not before: Wed 01 Jan 2025 09:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216183
IP address blocks: 109.176.245.0/24 maxlen: 24
213.218.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:36:12:57:75:d6:92:19:90:41:36:72:94:3d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7015340ab2ee569d232e252c6896578873812144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:3a:bf:71:0d:ae:aa:3b:32:e8:42:da:96:
7f:68:22:9b:9a:6b:ad:c1:7e:2d:09:a7:bf:10:de:
4f:eb:ab:c2:59:bd:59:f9:80:30:3c:1b:2c:2e:f0:
19:1b:fd:a3:01:4a:fd:3f:fc:21:4c:f5:ce:8c:be:
39:e1:21:09:f8:67:12:b3:91:e8:94:63:f2:cc:25:
7e:e7:4c:7f:fc:8b:05:e5:a3:86:30:a8:0d:01:88:
f7:5c:5d:24:42:b3:25:83:01:cf:1f:a8:e0:66:be:
18:d6:d4:56:ff:01:23:6d:1a:07:ee:a6:f8:1d:5e:
aa:13:da:42:84:0d:58:75:30:8c:27:0b:79:81:40:
53:6f:50:07:ea:25:a4:b7:7b:5d:2f:36:c6:2e:af:
a9:04:b4:36:24:a4:10:c1:90:e3:74:60:23:15:53:
53:34:08:15:30:49:7c:d2:47:d7:5d:b9:f8:90:7f:
e2:8f:de:7f:09:74:ff:f0:6f:bc:e5:21:ad:fd:3a:
52:4d:b8:c6:35:40:46:a6:cf:85:6c:3a:bd:23:68:
6b:93:0f:95:40:cb:44:9f:3b:3a:58:d0:a3:e7:88:
f5:38:99:4e:2e:9f:1b:8b:d7:74:69:52:da:f4:5d:
a5:52:32:7c:a8:dd:87:ab:34:86:78:f8:f4:3d:de:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:15:34:0A:B2:EE:56:9D:23:2E:25:2C:68:96:57:88:73:81:21:44
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cBU0CrLuVp0jLiUsaJZXiHOBIUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.245.0/24
213.218.250.0/24
Signature Algorithm: sha256WithRSAEncryption
41:0a:03:6e:2d:c0:c0:b6:1f:aa:5e:fa:65:3a:a7:32:bb:94:
bd:54:71:15:11:a3:ee:3e:e4:17:48:3a:02:0e:50:33:2b:e3:
63:ab:eb:b0:db:d4:e6:91:44:97:b7:3f:3d:43:89:fe:34:28:
f8:84:99:9b:b1:2b:a9:ab:ff:c0:54:8d:6e:8a:43:86:7d:85:
f9:05:f9:67:7b:61:ff:c5:f2:38:be:43:f6:34:a9:c8:a0:db:
e9:b4:b0:b4:15:c2:eb:54:ca:6c:23:eb:cc:1b:46:57:ab:5b:
c8:f5:91:5a:70:0d:82:60:13:c1:d8:96:23:c2:77:ef:57:61:
6e:41:90:8f:a1:37:75:6e:af:d6:95:8f:98:74:18:71:8b:e2:
de:d1:cc:7b:36:15:87:fd:8e:85:32:ad:ce:b6:de:6c:b6:23:
c9:33:3e:2b:9f:4d:d3:8e:d6:9c:c5:86:e1:33:63:87:ce:64:
33:04:79:1b:af:f1:7f:73:18:19:8e:aa:74:21:7b:24:e0:4f:
41:a9:61:5f:7d:03:95:81:42:a5:6a:e9:d9:3e:da:58:e8:1a:
d6:c4:45:24:5f:f0:42:81:73:d0:a8:84:2a:e6:d5:87:63:b3:
52:ff:7f:7d:ab:c0:d7:04:11:64:fc:99:e0:1e:0f:40:93:0b:
cc:26:1c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:47:06 2025 by rpki-client