Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/1n78-BSLXm7rvJ2Ve1IqkBqqhTg.roa
File: 1n78-BSLXm7rvJ2Ve1IqkBqqhTg.roa (raw, json)
Hash identifier: G0Gifm987y56WK0jOJQu1XmPLu2HpPxSaSdoMhrNoMs=
Subject key identifier: D6:7E:FC:F8:14:8B:5E:6E:EB:BC:9D:95:7B:52:2A:90:1A:AA:85:38
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019421B1D2FF3C0BD5AE27C54F2974C07439
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/1n78-BSLXm7rvJ2Ve1IqkBqqhTg.roa
Signing time: Wed 01 Jan 2025 11:48:09 +0000
ROA not before: Wed 01 Jan 2025 11:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29183
IP address blocks: 81.182.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d2:ff:3c:0b:d5:ae:27:c5:4f:29:74:c0:74:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 11:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d67efcf8148b5e6eebbc9d957b522a901aaa8538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:14:75:b1:0f:3c:48:b3:06:13:e7:f3:89:
67:be:c8:d1:cf:0e:07:11:ce:36:29:a3:80:f9:fa:
0f:cb:0d:0d:6d:63:b7:b3:85:22:7e:61:44:ef:ca:
a1:fd:56:62:dd:88:c8:6e:70:1a:31:7a:8d:07:b0:
dc:2a:17:30:e5:88:88:92:64:3f:34:27:14:98:48:
55:1d:5c:5f:54:e9:bf:41:d3:d8:35:ce:32:66:78:
bb:0c:fe:d3:30:f7:72:17:c9:96:1b:12:cb:19:a7:
78:26:1b:81:dd:88:8c:15:52:c4:a5:5f:d4:ab:b6:
36:87:e4:8f:8a:8e:a5:de:2c:e8:88:0e:ed:ff:9e:
38:66:c4:09:29:cd:44:d5:8f:1f:18:4a:2a:ce:d1:
0d:13:85:d1:a3:35:55:de:ca:c6:70:f8:f3:e6:c7:
57:d2:a5:31:74:b8:bd:51:3f:b1:62:65:9c:b6:ec:
43:63:73:7a:1f:12:b0:03:54:8a:42:a9:4c:cc:02:
b6:aa:8b:29:89:af:78:3b:ce:dc:ec:5b:e6:e0:43:
ae:a9:34:7b:ca:84:9d:32:b8:08:17:8b:23:96:51:
7d:8d:5f:e0:09:7e:a0:47:25:10:9f:85:79:62:c5:
b2:4c:78:e2:1f:bb:56:ca:d0:da:b2:bc:76:86:c2:
2e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7E:FC:F8:14:8B:5E:6E:EB:BC:9D:95:7B:52:2A:90:1A:AA:85:38
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/1n78-BSLXm7rvJ2Ve1IqkBqqhTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.182.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:33:e7:68:6d:c0:07:99:5e:e3:60:1a:76:eb:85:fb:b9:fc:
3f:9e:e8:84:7f:2a:b6:93:46:64:b5:83:92:2e:f4:75:6c:e7:
6b:9a:32:42:3d:c3:38:44:d2:82:63:f3:b8:9b:11:0e:df:07:
30:32:65:1f:c5:ea:37:f5:24:e7:5a:a3:f8:d2:52:85:09:dd:
c2:b4:bb:77:81:fa:e6:45:6d:87:ee:05:d2:52:4b:17:dd:a4:
1f:e5:3a:3a:49:a3:d1:ea:1f:ca:5a:9b:32:db:05:e5:dc:7f:
76:a6:ab:c3:78:17:6a:e0:0c:54:b9:41:55:76:4b:5c:e5:80:
a1:91:15:80:d4:b3:9d:6e:56:af:57:aa:92:9c:cb:dc:d9:85:
64:07:2b:9d:c5:af:a7:a4:9a:58:e4:77:bb:ed:1c:6b:f1:79:
0b:1a:72:e6:ec:7e:a2:88:2e:c7:d0:40:2e:ad:8a:02:6b:78:
ad:32:c2:df:ce:e0:4b:d9:f0:41:e4:3a:d9:31:09:e9:fd:1c:
be:97:49:3d:4a:0f:a9:4d:7c:80:bc:f2:9a:3f:f2:44:fe:99:
37:ab:b2:fb:ab:d3:79:07:de:31:fd:2a:d5:71:96:ca:14:7f:
42:f7:05:bd:01:8f:50:d9:35:5b:c6:c5:d8:28:87:8d:af:33:
d2:4e:7f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:31:40 2025 by rpki-client