Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/_cD4yVpG6lnwIeREBiUBwAEeAKA.roa
File: _cD4yVpG6lnwIeREBiUBwAEeAKA.roa (raw, json)
Hash identifier: jnUyAI5YI7WapRKSFkmTN6SUzj6iHT0vp3PMP0QrWlQ=
Subject key identifier: FD:C0:F8:C9:5A:46:EA:59:F0:21:E4:44:06:25:01:C0:01:1E:00:A0
Certificate issuer: /CN=b154b4611b8ce8287275bc47a69afa378b4140bf
Certificate serial: 019421B1F216F82BF2513908802A31F05EFD
Authority key identifier: B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/_cD4yVpG6lnwIeREBiUBwAEeAKA.roa
Signing time: Wed 01 Jan 2025 11:48:17 +0000
ROA not before: Wed 01 Jan 2025 11:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214683
IP address blocks: 176.112.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f2:16:f8:2b:f2:51:39:08:80:2a:31:f0:5e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b154b4611b8ce8287275bc47a69afa378b4140bf
Validity
Not Before: Jan 1 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdc0f8c95a46ea59f021e444062501c0011e00a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:64:3a:65:0e:1f:1d:bf:c2:74:01:ef:5b:d4:
bf:be:81:0b:04:50:bc:25:40:f9:a8:94:f8:9e:df:
6c:20:ed:50:eb:3d:27:ee:37:49:a8:f4:6f:1f:07:
43:58:40:9b:e2:e2:ac:c8:21:b4:9f:ea:92:74:cd:
92:0c:59:50:c2:e0:e5:b5:04:25:ee:6d:61:6d:a6:
40:f5:02:bd:ee:d1:04:32:57:01:ad:34:49:12:2a:
44:44:f0:5d:f7:c7:e7:79:41:7c:42:e4:91:41:d9:
11:48:c2:db:d8:7d:21:72:e0:b0:dd:eb:29:59:71:
e2:6c:7a:cf:55:1b:e6:75:ca:21:8e:e2:f2:4f:7e:
ea:11:69:6f:e7:f9:c9:ba:2a:64:5b:ad:6b:6d:e5:
09:62:9e:1d:56:81:58:7e:62:67:a8:f2:60:21:b5:
8f:09:63:29:64:1d:7e:84:69:03:c2:99:d5:1e:dc:
6a:ab:94:de:bf:95:83:74:92:e7:95:88:f9:18:5a:
0b:3c:3c:35:59:80:2a:10:18:a6:ee:b5:cc:0f:26:
3c:f5:1b:53:13:62:df:57:de:4e:ec:92:ed:15:86:
dc:00:47:56:6a:bb:4e:c1:82:e5:a3:58:bf:9e:5f:
aa:09:83:27:75:ed:70:af:82:22:b5:9d:3c:4b:08:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C0:F8:C9:5A:46:EA:59:F0:21:E4:44:06:25:01:C0:01:1E:00:A0
X509v3 Authority Key Identifier:
keyid:B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/_cD4yVpG6lnwIeREBiUBwAEeAKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.112.91.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:34:8a:91:38:ae:2a:5f:58:9b:f6:3e:b6:18:09:eb:ad:56:
e0:06:7b:0b:21:56:6c:13:92:d1:66:0c:22:cb:43:74:33:55:
69:0b:85:88:af:f4:a4:a6:e9:e0:09:8d:22:d2:02:7c:10:5c:
d3:17:97:ba:0b:71:b2:84:4b:29:2b:99:ad:05:80:4b:d2:cd:
16:98:ce:b3:a8:5a:40:ee:fd:b0:ab:7d:c4:34:90:a5:95:f9:
89:58:25:8b:87:49:d6:2d:54:14:60:87:15:b2:c6:f9:73:9d:
29:00:f8:dd:04:f6:eb:bd:4f:76:68:f0:5b:d9:54:e6:38:a9:
b0:23:04:33:3a:0b:30:8e:0e:51:93:19:6c:35:12:ec:14:78:
74:f9:00:79:cc:cc:98:74:56:16:88:2c:37:a0:8a:7b:95:df:
9a:ea:8f:76:6a:a2:af:b7:61:7c:90:c7:a0:d7:c9:95:18:b4:
61:70:90:d9:eb:fd:00:8d:e2:72:39:e6:8c:c7:5a:07:84:37:
2f:bc:1b:05:df:e3:a4:b2:3e:d6:a9:59:eb:ff:5f:71:55:be:
c8:af:af:ee:5e:46:b6:b0:4a:e2:44:4d:d9:12:15:5d:a2:0f:
7b:ec:b2:6c:64:8e:91:4b:87:0b:0c:87:ec:46:4e:35:9c:b5:
67:f8:29:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:36:09 2025 by rpki-client