Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/F9Xe_7jgOYvdTNT9YC7uc1m7clw.roa
File: F9Xe_7jgOYvdTNT9YC7uc1m7clw.roa (raw, json)
Hash identifier: dbf14IPOhGmAOgdUCZzI8fhPd/ppi3DXyc8q1YDOSJo=
Subject key identifier: 17:D5:DE:FF:B8:E0:39:8B:DD:4C:D4:FD:60:2E:EE:73:59:BB:72:5C
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 0194274795EDD014D18117E35DCA689D854A
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/F9Xe_7jgOYvdTNT9YC7uc1m7clw.roa
Signing time: Thu 02 Jan 2025 13:49:50 +0000
ROA not before: Thu 02 Jan 2025 13:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201735
IP address blocks: 213.162.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:95:ed:d0:14:d1:81:17:e3:5d:ca:68:9d:85:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jan 2 13:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17d5deffb8e0398bdd4cd4fd602eee7359bb725c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:24:28:57:53:3a:c1:0d:c8:de:56:95:2f:
5e:f4:a7:1e:c0:7b:14:d2:11:d8:7f:f2:89:e2:00:
73:bc:7f:38:be:12:17:52:c8:c0:e6:c6:f3:29:a5:
8f:33:fc:20:c9:06:ea:1e:2c:f2:c5:a9:c9:2f:d7:
a6:44:b5:29:20:20:31:8d:a0:b2:c9:a9:3c:15:80:
db:32:3e:e8:68:ba:54:59:4b:3a:fa:b9:4d:6c:e5:
69:00:ee:3b:91:ae:27:59:ba:93:9c:bc:ab:26:f8:
8a:ef:81:37:2d:77:21:8c:e5:21:2e:df:04:41:e0:
5e:0b:82:5e:1a:0b:1a:c7:10:0e:a3:17:87:d2:67:
9f:19:ff:73:ad:a0:90:b1:32:49:cd:c0:c4:81:5d:
15:c0:d1:1e:02:75:bd:4c:51:27:f2:5e:56:dc:3c:
03:cd:f7:f0:96:4e:9b:ae:bd:2f:3a:aa:f6:3a:78:
27:6a:04:60:62:de:61:01:1c:28:4c:23:9b:e5:96:
7b:55:87:78:23:c4:a6:45:ec:ba:a6:db:bc:ab:b3:
32:53:43:89:2c:d7:9e:a7:25:5a:39:34:18:ad:4e:
d7:87:f5:90:14:db:f1:da:d9:dc:64:2e:ad:3b:62:
63:61:fa:11:d6:bf:8c:b2:d7:f6:0a:e3:1c:ba:7b:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D5:DE:FF:B8:E0:39:8B:DD:4C:D4:FD:60:2E:EE:73:59:BB:72:5C
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/F9Xe_7jgOYvdTNT9YC7uc1m7clw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.162.220.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:27:98:31:58:10:07:ac:bd:62:e9:61:11:80:e2:66:0d:09:
0c:34:b9:b8:29:68:1a:e6:f9:47:ae:73:49:00:2e:85:88:4d:
84:7d:9d:78:df:75:ea:2c:3b:b9:fa:e9:da:aa:fc:b3:d6:f6:
df:3f:19:55:d9:81:5f:2a:8a:f6:60:df:5a:c6:06:8d:07:57:
ad:06:7f:df:ad:c6:8e:3d:5d:38:63:f8:16:99:f1:94:d1:9e:
df:f7:21:3c:0f:9a:0f:15:d5:71:3e:29:df:c6:22:a8:5e:10:
82:c9:58:1e:9c:d3:4f:a4:9b:b7:b4:ad:8b:b3:19:0e:7b:10:
4c:ca:70:9a:7e:ad:3a:99:44:bf:a5:07:f5:4f:9f:a4:4f:55:
27:f3:a0:3b:d6:dd:52:31:0b:24:f8:13:21:21:df:9e:77:a0:
6f:83:cd:31:cb:00:66:80:3e:8a:ca:41:b2:7f:38:54:5e:c5:
de:d6:a6:7a:89:e1:19:1a:01:c3:d6:c5:55:51:d7:c1:00:b2:
d2:6c:b5:81:00:cf:7b:88:56:75:db:37:58:ff:d5:7e:74:0a:
91:30:93:01:1f:34:c7:d1:b5:20:41:c4:fd:c6:84:9a:48:1b:
db:2f:9e:76:c7:5f:57:a1:30:71:0a:af:6f:be:a3:8c:e0:2d:
29:2c:f1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:38:29 2025 by rpki-client