Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/65jp3a6f2gh4Tkpte2rBeESresA.roa
File: 65jp3a6f2gh4Tkpte2rBeESresA.roa (raw, json)
Hash identifier: 07jq7hxGRgJkHsgPxiO4p+naJnzzp9QCQTCf5Ueq5Sc=
Subject key identifier: EB:98:E9:DD:AE:9F:DA:08:78:4E:4A:6D:7B:6A:C1:78:44:AB:7A:C0
Certificate issuer: /CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Certificate serial: 01942444D6F97BC16A0D32A27EEAABF405C3
Authority key identifier: 1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/65jp3a6f2gh4Tkpte2rBeESresA.roa
Signing time: Wed 01 Jan 2025 23:47:58 +0000
ROA not before: Wed 01 Jan 2025 23:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204760
IP address blocks: 194.56.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d6:f9:7b:c1:6a:0d:32:a2:7e:ea:ab:f4:05:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Validity
Not Before: Jan 1 23:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb98e9ddae9fda08784e4a6d7b6ac17844ab7ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:ed:af:45:1c:3c:3e:d6:54:12:0c:e4:d6:
86:d1:22:05:b1:cf:fb:a0:d0:c5:c8:83:60:2e:90:
b5:71:7c:3f:22:96:4b:73:e3:92:86:27:4e:80:72:
73:fa:02:00:fe:4c:ae:a4:18:da:ee:5d:5b:06:6a:
ef:78:b9:77:01:36:70:4c:f3:5c:1b:fb:bb:bb:b4:
b7:8c:08:ed:db:d2:2f:2b:73:f3:06:6c:6f:5c:a5:
34:e6:8c:25:de:25:38:73:f7:0c:25:e3:59:e2:e0:
70:ba:48:78:00:18:f0:c5:16:dd:31:73:31:d9:da:
8a:54:eb:dc:ee:dc:6c:71:8f:df:61:af:dd:52:6e:
3c:6c:1b:62:d2:7a:f2:21:0e:3c:25:94:11:d7:a1:
98:bc:cb:9f:94:ad:8e:73:4a:6c:24:ac:2b:3d:72:
aa:85:7f:36:a2:c1:11:4c:d7:6a:3c:f3:bf:c7:01:
41:ac:51:4c:08:a0:62:77:31:d7:ee:66:4a:45:55:
ef:78:d7:3a:3f:89:81:b7:1e:93:1a:03:79:0a:55:
1e:22:6e:6b:62:69:2b:5f:da:d5:a9:ce:b1:49:05:
5a:27:06:8b:d5:ac:b4:b9:8f:a5:65:7a:1b:3e:df:
65:f9:9e:54:40:a9:4f:e6:6f:d4:b4:85:36:60:05:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:98:E9:DD:AE:9F:DA:08:78:4E:4A:6D:7B:6A:C1:78:44:AB:7A:C0
X509v3 Authority Key Identifier:
keyid:1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/65jp3a6f2gh4Tkpte2rBeESresA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.88.0/22
Signature Algorithm: sha256WithRSAEncryption
64:69:2c:b6:8d:dc:a3:94:7e:0c:dc:69:28:9d:6d:ba:d7:e2:
17:29:d9:6c:e8:7b:10:b1:a6:ed:55:e4:90:4e:95:64:5b:81:
d4:8d:c0:a7:06:76:10:60:61:af:21:14:d2:a3:d0:44:90:64:
61:e3:c5:90:6f:37:b4:d6:b7:ca:64:3d:1e:a4:8f:fb:21:67:
1c:2b:b8:36:12:b8:4b:77:55:1d:f5:ad:b2:69:c1:46:7a:36:
6c:d5:23:3b:57:df:7c:0a:dc:1a:0f:07:ad:7d:d9:bb:77:ae:
47:ba:37:5b:68:f3:65:fb:0a:18:3c:5d:52:b5:29:25:2f:7a:
0e:71:46:ed:fa:8f:d8:85:a8:30:1c:4b:66:b6:69:d2:31:d7:
7b:8b:8f:b8:0e:e9:0d:26:47:4d:57:16:f8:ff:a7:4c:e1:8a:
9c:72:77:46:e0:6b:43:4d:de:b4:19:fa:2d:0d:c5:06:70:7b:
af:a6:e7:3e:2b:33:6d:2a:18:a4:93:a6:9d:84:b8:b5:3a:1e:
75:59:9c:2d:2e:c3:95:74:0e:5b:bc:f0:d9:55:40:4d:06:6f:
84:9d:e6:91:6b:82:d7:e7:d3:65:de:be:f4:dd:72:d2:9e:0c:
e7:35:27:59:95:57:ec:ac:09:ff:07:3b:45:95:26:c5:89:0a:
38:42:17:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:51 2025 by rpki-client