Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/f2o698ItMAllOLKssd0L2M_593M.roa
File: f2o698ItMAllOLKssd0L2M_593M.roa (raw, json)
Hash identifier: lFqphoSocx4AeEz62Ak7juFuX8tUyuaFWwiW3dYxmnI=
Subject key identifier: 7F:6A:3A:F7:C2:2D:30:09:65:38:B2:AC:B1:DD:0B:D8:CF:F9:F7:73
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421442CD86DC7C38B7C6AF9B97D1F5C72
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/f2o698ItMAllOLKssd0L2M_593M.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215238
IP address blocks: 212.38.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2c:d8:6d:c7:c3:8b:7c:6a:f9:b9:7d:1f:5c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f6a3af7c22d30096538b2acb1dd0bd8cff9f773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:43:28:48:c1:dc:28:26:0a:a5:6f:d4:49:
ca:91:4e:46:4a:2c:ed:ef:8f:5f:72:81:b6:62:2d:
49:5b:a9:4a:40:66:a4:23:6c:96:77:7c:68:0a:e4:
23:d2:d4:c4:9d:60:cb:3d:14:11:94:ff:9c:99:0e:
1b:8b:fb:7d:ae:c4:bf:e1:f2:1b:c3:86:79:22:58:
45:8b:f7:ce:bc:e1:2f:07:c7:05:32:dd:24:10:e0:
17:45:19:f7:54:df:b6:a3:4f:90:6c:a5:21:de:f0:
88:3a:92:22:08:ad:67:63:b0:6a:4e:8a:b1:7e:eb:
a5:ff:f6:5f:54:4a:fc:10:eb:59:d0:b0:0e:53:b1:
69:82:3d:59:66:ab:32:f6:1d:c6:09:15:95:dd:f3:
44:c4:a8:03:c9:8c:16:17:b3:c6:bc:25:45:85:60:
2b:5e:d3:e9:04:23:d4:6c:8b:37:cf:29:3c:13:ad:
6c:98:e4:ca:f4:37:91:08:86:fa:69:ab:23:2c:9c:
87:a8:66:8b:9e:d8:d8:34:58:a4:e8:60:19:25:31:
be:9c:6f:d8:e6:30:3a:57:d3:0c:57:a1:a8:33:67:
f9:7d:92:18:a0:65:8b:28:02:b7:6e:f6:24:9e:84:
39:1a:57:ea:ee:5f:1b:b4:bd:3d:28:b0:2b:f0:3a:
e1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6A:3A:F7:C2:2D:30:09:65:38:B2:AC:B1:DD:0B:D8:CF:F9:F7:73
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/f2o698ItMAllOLKssd0L2M_593M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.38.88.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:4c:28:8c:42:c7:df:76:11:bd:1d:40:eb:85:a1:f5:05:2e:
4c:25:14:40:1a:42:ea:cf:76:06:d0:d9:ed:c2:70:06:4f:56:
b2:5a:a0:27:01:41:9f:e9:46:14:2c:f5:ea:d4:77:64:32:03:
8b:5d:40:c7:fb:77:50:43:ee:6a:a3:f0:3e:49:4d:f9:b2:8f:
37:7b:bf:9f:42:a2:11:3c:61:d3:a6:bd:09:63:28:6f:1f:5f:
68:9f:25:d8:46:b3:d4:ec:c6:7f:ff:07:59:e8:26:62:a9:57:
ba:5e:f3:f0:9b:b7:7f:ba:b4:d3:03:97:f7:82:2b:4a:60:81:
69:0c:71:29:26:39:65:72:da:ad:8e:df:b3:69:31:3a:bb:e5:
b2:c5:d6:98:48:eb:fe:b3:f5:d0:7f:d8:46:b4:14:3b:ea:1d:
cd:4a:f2:c8:26:6e:5d:3e:79:f9:2e:ef:49:81:b7:43:03:1d:
65:63:b0:7a:7b:3f:78:ce:63:59:56:26:df:ed:76:2a:33:8d:
bf:48:74:1b:a4:03:0e:fb:08:37:ab:98:4a:10:76:4f:95:07:
0e:62:d8:b2:e6:2e:36:90:21:28:d1:1f:36:f4:c1:31:ad:f1:
46:37:65:ef:60:46:77:f9:4d:3f:01:5a:ef:aa:d9:1f:a3:b8:
92:c5:fc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:48:12 2025 by rpki-client