Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/9N77sGkqVPgPzl64HnlAQCAiJiI.roa
File: 9N77sGkqVPgPzl64HnlAQCAiJiI.roa (raw, json)
Hash identifier: 8rr1/h/HEPqZmQ/y+1jYrrv0fcfQ6nqe4NWrJHpDdT8=
Subject key identifier: F4:DE:FB:B0:69:2A:54:F8:0F:CE:5E:B8:1E:79:40:40:20:22:26:22
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 019420D5CAF327FE068A896884E73185DC04
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/9N77sGkqVPgPzl64HnlAQCAiJiI.roa
Signing time: Wed 01 Jan 2025 07:47:49 +0000
ROA not before: Wed 01 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15739
IP address blocks: 82.146.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ca:f3:27:fe:06:8a:89:68:84:e7:31:85:dc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4defbb0692a54f80fce5eb81e79404020222622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:75:ae:63:53:3a:cb:ff:c4:ee:51:97:8a:
98:f8:5c:97:e4:13:c7:dd:70:5e:8a:b6:06:0a:8c:
51:73:12:6a:de:c0:e9:73:ef:7c:d5:03:8b:c1:c3:
58:ee:2a:39:3b:16:ce:cf:1d:85:60:1c:ce:d0:a7:
86:73:db:ea:fa:98:7e:a3:e3:1b:bd:c5:75:b0:aa:
62:e6:cd:15:94:81:34:d3:fd:81:20:25:f5:15:8a:
7d:85:4a:f8:6f:c4:4c:db:68:ea:5d:6a:df:e2:ce:
fa:2b:5d:88:75:5e:64:11:e2:66:3d:a1:65:b4:25:
ba:31:04:74:66:ab:b2:2c:90:bc:f2:6d:c0:6f:50:
4c:73:dd:37:24:79:f0:c1:8a:e7:8f:24:a5:f6:8a:
f3:af:1d:c5:4d:1f:83:d9:de:cb:12:15:fc:d1:a9:
39:25:ff:7b:ca:3a:54:38:ed:a0:11:56:60:41:c0:
aa:59:c1:5b:d1:21:1a:21:29:c5:1a:d4:ff:cc:0b:
17:82:fd:2d:73:eb:11:ff:43:70:ad:43:cb:0f:2a:
6e:d7:1a:d7:1f:22:04:3c:60:9b:9a:ec:ae:44:6b:
fc:0c:66:48:56:bb:16:59:a8:59:01:c4:c6:16:ef:
37:c1:bc:7b:6a:fa:30:8a:7d:0e:3c:a0:b1:d0:80:
54:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DE:FB:B0:69:2A:54:F8:0F:CE:5E:B8:1E:79:40:40:20:22:26:22
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/9N77sGkqVPgPzl64HnlAQCAiJiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.170.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:ea:e0:8d:71:ea:d3:73:07:c0:ef:62:d1:63:e9:66:95:c1:
82:c5:18:09:ad:af:27:6a:69:f4:38:2f:f0:bd:ac:80:ad:42:
c0:47:44:41:73:22:0f:f8:0c:b9:e6:81:f8:ff:a8:33:8b:65:
69:e9:e4:09:ee:1c:4e:a2:d1:d7:0e:1e:2a:5d:4d:50:90:64:
15:1c:37:18:a3:fb:7e:dc:25:fb:6f:63:15:5c:ca:15:22:7e:
f7:e5:3b:f0:ad:28:29:51:be:94:51:27:0f:ed:aa:53:5e:03:
c8:bf:26:10:4e:d7:12:0b:e1:c3:79:40:26:26:bf:d2:71:90:
c3:e5:a0:14:b6:aa:fc:01:56:b9:a7:99:86:5e:5f:d4:94:3f:
cb:a8:8d:75:26:c3:68:11:1b:af:86:13:be:d9:69:f4:c5:8b:
66:1e:ba:1b:a1:4b:5d:15:70:46:88:a6:86:31:8a:b3:18:29:
b9:6f:c4:e2:c0:da:bb:45:a9:07:82:65:8a:30:43:4f:78:41:
23:0e:f3:df:f2:0c:ae:b4:aa:ed:2a:e3:fb:9c:df:d0:0b:a1:
1d:e2:27:97:d3:fa:92:80:b7:b5:a4:f7:36:45:d0:24:1f:be:
7b:59:ed:93:a4:1c:8f:74:d7:78:2f:1e:15:52:e0:e5:80:98:
b9:b3:b8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:08 2025 by rpki-client