Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/rJqP0FlZEZ4nTdC9T0nsIw-r0R4.roa
File: rJqP0FlZEZ4nTdC9T0nsIw-r0R4.roa (raw, json)
Hash identifier: 0/AMhBxslSHnkSz/7atutBB8j75xjJ93LSUDUChOOQk=
Subject key identifier: AC:9A:8F:D0:59:59:11:9E:27:4D:D0:BD:4F:49:EC:23:0F:AB:D1:1E
Certificate issuer: /CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Certificate serial: 019423D700269888E2916CFE044A0E2EAAE2
Authority key identifier: B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/rJqP0FlZEZ4nTdC9T0nsIw-r0R4.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202433
IP address blocks: 194.35.248.0/24 maxlen: 24
194.35.249.0/24 maxlen: 24
194.35.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:00:26:98:88:e2:91:6c:fe:04:4a:0e:2e:aa:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac9a8fd05959119e274dd0bd4f49ec230fabd11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:18:6e:cc:b3:58:59:09:ff:05:43:52:d0:
05:52:83:30:9b:2b:35:bd:7c:08:01:2a:1a:38:21:
46:ec:d2:95:b7:35:63:52:a2:55:1d:50:fa:92:91:
03:af:88:da:0b:c1:25:84:9e:d3:7c:3d:ca:d0:dd:
5c:07:9d:d6:93:05:7f:ab:41:1f:70:20:12:27:7c:
8c:8c:66:3e:6b:d4:2d:38:3e:51:d5:4f:ac:7a:e0:
a5:20:8a:30:34:b6:cb:5a:11:ea:f9:89:c0:10:a5:
cb:4b:38:c4:e3:4c:c0:ca:06:2f:6d:cc:82:1e:8a:
03:9e:47:b6:00:05:76:e3:08:da:0b:f3:1d:24:b0:
5c:ec:4e:0b:29:60:d9:be:4d:62:f2:bd:48:90:ce:
da:50:18:82:86:e1:a5:73:2e:d8:33:66:bb:0f:3b:
1d:6f:15:e5:a4:ff:d1:49:6a:1e:9b:29:e8:a4:1a:
da:d3:2f:9c:a7:8d:ce:5c:19:53:5e:55:ba:91:c0:
ad:3e:a3:b8:a4:20:2c:db:e1:43:f7:79:57:89:ef:
fb:f0:78:46:4f:fd:4e:3d:85:85:c8:08:08:b9:d3:
01:05:fe:ec:a9:73:3f:2f:14:05:e4:bf:23:d6:66:
67:02:92:cb:57:4a:d6:e2:4b:58:e1:fa:12:fd:ed:
33:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9A:8F:D0:59:59:11:9E:27:4D:D0:BD:4F:49:EC:23:0F:AB:D1:1E
X509v3 Authority Key Identifier:
keyid:B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/rJqP0FlZEZ4nTdC9T0nsIw-r0R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.248.0/22
Signature Algorithm: sha256WithRSAEncryption
72:83:32:f5:79:e4:2a:40:15:f8:a4:68:05:ca:e1:b3:07:61:
20:ea:e5:e7:ce:b5:05:fd:a8:b3:12:39:24:4a:17:fd:4d:e4:
ad:11:8c:99:d9:55:e6:93:47:bb:4f:31:2d:c0:21:33:8c:ec:
5f:52:c5:e9:a9:e0:00:1e:b2:01:26:ab:a3:7e:18:4b:49:91:
fb:4c:63:51:ed:01:36:f4:5a:e4:97:eb:c9:e7:45:39:aa:95:
d9:98:60:bd:79:d3:06:c8:73:84:f5:70:a6:64:ff:8a:da:7e:
6d:21:9f:4d:cd:fb:86:41:1e:b8:02:93:2e:b4:d9:f4:c7:25:
73:9f:89:9c:f8:1b:d5:2a:c4:49:d2:de:6b:60:62:ab:eb:ca:
2d:b0:80:55:36:26:18:d8:51:53:b0:40:df:cf:6b:cc:65:3f:
d9:74:3f:71:41:a8:94:57:5e:26:96:d8:4b:a3:02:ac:19:7d:
d7:de:b0:ad:ab:61:6f:01:53:e2:c5:f4:c8:49:cd:89:9a:37:
ac:76:43:5d:82:20:91:f7:93:d7:2b:0a:3e:d0:01:60:d2:30:
46:97:22:d6:60:51:96:d4:a5:d2:52:62:87:fe:ec:fb:de:cc:
b9:40:72:90:3e:43:bb:ea:be:fd:40:ee:bb:8f:c1:e3:17:08:
43:7d:b1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:45:07 2025 by rpki-client