Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/rPNof6DogEeZBOoLRZwMk-ApPt4.roa
File: rPNof6DogEeZBOoLRZwMk-ApPt4.roa (raw, json)
Hash identifier: CTp7V/ExiJcmMtx5knVlKl/ZFReGeFmiKwsyPdlpDgU=
Subject key identifier: AC:F3:68:7F:A0:E8:80:47:99:04:EA:0B:45:9C:0C:93:E0:29:3E:DE
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 0194266B81697302FC4AF1CA95558D2BB1FC
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/rPNof6DogEeZBOoLRZwMk-ApPt4.roa
Signing time: Thu 02 Jan 2025 09:49:27 +0000
ROA not before: Thu 02 Jan 2025 09:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48623
IP address blocks: 81.4.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:81:69:73:02:fc:4a:f1:ca:95:55:8d:2b:b1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 09:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acf3687fa0e880479904ea0b459c0c93e0293ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e6:7c:e4:84:33:62:e0:fa:bc:da:30:6a:a5:
21:ae:ba:a5:a8:5b:74:60:bc:33:07:06:e0:b9:a3:
2f:6d:1f:f3:37:8c:d7:20:ea:ea:f3:b2:0d:09:db:
25:5b:60:19:36:58:91:59:c4:b3:2d:47:df:1a:e3:
9f:5e:9e:31:ba:73:18:c0:d8:ee:a7:dd:4c:48:90:
7f:52:0a:8f:f2:b0:53:d6:6c:bb:36:8f:0f:3c:ab:
96:73:42:1c:3a:9c:ad:19:13:be:e5:6c:fc:87:d0:
aa:36:50:01:83:7b:50:5d:9d:e3:6a:e4:51:b2:0b:
14:c0:85:3a:96:34:2a:57:9d:94:50:62:e4:1f:b2:
c5:ce:3b:e9:77:7a:1b:36:c6:66:96:d3:ed:b0:93:
a4:97:9e:3f:a6:62:b4:97:01:91:07:23:3d:dc:88:
9b:05:8d:9b:50:0b:b0:ca:5a:0d:e4:0f:94:ec:6e:
64:70:47:76:d8:52:49:b6:51:dd:7c:2f:bd:bd:88:
a4:5e:18:0d:e0:16:4b:2f:a7:39:cb:63:21:a9:31:
45:a1:f3:ec:4d:86:bc:15:2a:f0:5f:28:a1:71:c2:
b6:ad:0d:1c:29:0e:3e:11:e9:d3:7d:fa:7f:4f:09:
29:1a:0e:d4:d7:e2:23:74:46:06:35:92:aa:f7:9b:
c6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F3:68:7F:A0:E8:80:47:99:04:EA:0B:45:9C:0C:93:E0:29:3E:DE
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/rPNof6DogEeZBOoLRZwMk-ApPt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.4.154.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d5:93:2e:91:18:e9:76:4a:77:b3:55:99:b0:de:21:91:8a:
54:7d:ab:54:2f:f0:1c:f2:7f:f6:46:7f:df:18:68:b3:2b:aa:
da:1f:8b:d1:f2:46:87:7d:a0:59:fc:cc:41:32:f0:cf:d8:29:
38:cd:70:55:e2:b1:40:6f:96:08:05:41:88:d4:81:ef:48:ca:
8b:c0:ec:57:d9:fb:a3:bc:b1:53:fe:e7:dc:d3:be:fb:70:67:
e5:82:37:b9:a1:ee:24:2d:93:74:49:d3:14:c0:cf:33:35:d3:
84:e2:9d:ff:fe:6a:a7:3d:16:7f:19:ca:6a:05:be:c7:7a:ff:
be:c2:a6:85:56:c2:e9:71:e5:16:11:2b:66:68:e7:10:76:b7:
43:02:ba:45:b5:04:52:8c:9b:74:0a:70:ac:a4:91:b6:a2:3b:
0d:ab:03:c1:86:28:77:a3:c0:1f:cb:6f:44:0c:9b:30:08:84:
28:10:19:3d:da:42:b2:2d:3c:df:73:0a:ae:e6:0b:18:6a:25:
2d:e7:3e:d9:ea:8d:9c:2b:d5:53:5e:db:d5:30:9b:ec:25:79:
2d:99:f5:04:18:dc:bc:fc:05:07:10:8e:6d:12:c8:0d:0c:82:
ff:3a:a7:98:1e:85:3c:21:46:fa:97:fb:f6:47:a8:03:5a:30:
73:fc:70:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:06:10 2025 by rpki-client