Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/1gDQPq0ajb_5Y6dEg-ENYqy7TZk.roa
File: 1gDQPq0ajb_5Y6dEg-ENYqy7TZk.roa (raw, json)
Hash identifier: 1mq5wz/1iFM0nRuaGbWeQP9cbSRi6hrmjA/870kNVwc=
Subject key identifier: D6:00:D0:3E:AD:1A:8D:BF:F9:63:A7:44:83:E1:0D:62:AC:BB:4D:99
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019421B1D18730F1BD3381704D84437E700A
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/1gDQPq0ajb_5Y6dEg-ENYqy7TZk.roa
Signing time: Wed 01 Jan 2025 11:48:09 +0000
ROA not before: Wed 01 Jan 2025 11:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24822
IP address blocks: 217.65.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d1:87:30:f1:bd:33:81:70:4d:84:43:7e:70:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 11:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d600d03ead1a8dbff963a74483e10d62acbb4d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:67:5b:2c:8a:6f:2f:f9:84:e7:c8:99:79:
08:da:7f:1b:5f:c9:74:6f:98:3d:c4:3d:cf:69:72:
84:08:21:dc:b9:e8:84:5a:bf:cf:2c:53:80:22:4d:
ca:21:40:db:30:8a:81:3a:b3:6c:76:a8:7a:5c:da:
bb:aa:f8:82:ec:11:e5:1b:9a:c5:00:89:af:cd:06:
92:a8:8b:7e:9a:aa:2f:14:16:5f:62:0f:6c:59:0b:
bb:c8:c6:12:4d:91:ed:ce:87:51:de:04:c1:ac:75:
3e:89:55:68:cd:a5:2f:62:6d:f6:e4:1e:8a:d1:cc:
35:82:2a:c2:00:8e:d9:a2:60:3e:0a:e6:fb:1b:95:
ff:2f:90:24:3d:c5:34:f1:c0:4b:b6:12:13:f5:ba:
8d:09:ba:8b:93:31:ef:35:75:3b:f5:15:3a:2d:93:
33:36:4b:b2:2c:4c:2c:91:c0:46:19:3d:03:b9:99:
36:b1:31:9a:02:09:47:bf:e5:91:bc:ae:03:f2:02:
97:32:eb:d8:88:63:84:be:b2:34:58:46:35:a0:e8:
06:92:cf:ec:43:de:3c:41:41:5d:74:f6:c9:07:d6:
4e:92:e7:08:a0:fa:45:cb:3f:89:10:c9:6e:f5:e1:
8f:ca:21:8d:a3:19:12:0a:0a:49:78:a4:d8:5d:32:
24:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:00:D0:3E:AD:1A:8D:BF:F9:63:A7:44:83:E1:0D:62:AC:BB:4D:99
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/1gDQPq0ajb_5Y6dEg-ENYqy7TZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.65.109.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ba:1b:5c:26:f8:56:3f:af:fe:14:72:84:ff:18:13:61:dd:
2b:e3:2c:22:60:1c:37:bf:f9:36:92:c0:77:6f:fb:8c:8f:6d:
52:33:bf:ee:73:05:d6:45:d3:eb:22:63:cc:3e:db:5c:19:8d:
7c:e1:c1:c3:db:c5:38:6b:86:3c:36:9e:69:e3:f8:f5:60:1e:
78:54:97:61:bc:54:47:ec:33:c3:7c:4b:1c:60:ce:61:12:53:
c3:cd:4d:9e:69:b4:b7:23:e2:5a:34:ad:db:37:72:c8:eb:1b:
58:09:f1:83:b4:dc:1e:24:ed:09:12:19:f7:5a:38:69:5c:e5:
eb:30:01:d8:b4:b9:d4:bb:f3:58:ab:51:0a:f3:83:62:51:d8:
3c:0d:60:c2:8b:97:10:1e:07:02:56:3c:a4:00:19:a8:7a:a7:
40:a5:ec:39:7c:5d:a2:0f:39:c6:e6:20:4e:f3:83:6b:c6:52:
c7:bc:ee:12:8f:fa:d9:1f:62:f6:ee:02:4f:f5:27:80:ab:46:
f6:53:cc:e1:bd:b7:7b:9a:2b:f2:47:6c:83:92:c0:a9:72:c9:
45:8c:d8:80:33:c3:2a:29:eb:dd:2e:3f:f0:70:8a:4d:cd:d6:
ff:2b:5f:6e:d6:9e:93:e4:29:d9:b2:cd:e6:0d:61:ab:59:db:
bc:92:22:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:44:14 2025 by rpki-client