Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/I_-FRfZa9GeQgym8xYKEVr-rfgA.roa
File: I_-FRfZa9GeQgym8xYKEVr-rfgA.roa (raw, json)
Hash identifier: AmRbI2XP8GOvp3frMOHSnlH48LSP6GLhPNS9PY26J8Y=
Subject key identifier: 23:FF:85:45:F6:5A:F4:67:90:83:29:BC:C5:82:84:56:BF:AB:7E:00
Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial: 019422FB654284FE297B1474562EE75A33DD
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/I_-FRfZa9GeQgym8xYKEVr-rfgA.roa
Signing time: Wed 01 Jan 2025 17:48:08 +0000
ROA not before: Wed 01 Jan 2025 17:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 45.8.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 23:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:65:42:84:fe:29:7b:14:74:56:2e:e7:5a:33:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Validity
Not Before: Jan 1 17:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23ff8545f65af467908329bcc5828456bfab7e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:44:54:0b:ea:23:c3:d3:7d:e4:28:5c:d7:
9f:a8:f5:13:36:c1:c7:d1:75:b6:f3:d3:7f:56:f6:
c0:d2:55:9a:44:70:fa:cb:13:d2:58:ee:5b:5f:99:
79:df:14:bd:70:38:7b:95:5c:0c:d2:e7:e0:55:b1:
31:fa:ee:71:f2:f6:25:26:e7:95:f4:b4:36:26:b7:
1a:24:24:cd:15:f7:56:e6:bc:25:8e:0c:35:b1:25:
e0:70:33:b5:12:d9:ab:c3:82:81:d2:cb:b8:9f:ed:
04:c5:5d:39:cd:23:f9:2d:f6:da:f9:63:63:47:6c:
00:a2:80:78:06:21:6d:cf:5d:ef:60:6b:a6:41:27:
7b:98:c0:75:82:c0:be:05:b2:7e:b1:3c:f4:71:d5:
fd:55:67:01:8a:d8:99:49:85:51:a4:25:0e:00:9f:
b2:b6:47:cc:70:b6:bc:02:c4:75:b7:47:70:29:0f:
74:4e:2b:ea:2e:46:f0:8c:a8:34:c2:ea:fc:90:69:
d7:08:3c:0e:2f:8b:88:bf:05:8f:39:f0:87:86:41:
8b:8a:95:8d:5b:af:9a:f0:b6:14:4d:25:68:fd:a0:
75:be:f9:c2:f4:39:81:d9:11:ae:00:ec:40:91:7d:
91:fb:f8:66:7e:41:93:fe:23:5b:26:f5:7b:16:96:
aa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FF:85:45:F6:5A:F4:67:90:83:29:BC:C5:82:84:56:BF:AB:7E:00
X509v3 Authority Key Identifier:
keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/I_-FRfZa9GeQgym8xYKEVr-rfgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.9.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ac:17:9b:f8:ab:a3:4b:12:85:f5:a0:0d:e4:de:32:3e:2e:
ba:57:3d:b1:7c:4c:9b:7e:99:2c:d4:c0:14:fd:66:ff:f9:62:
be:8f:97:3d:be:f2:0a:7d:26:72:9f:24:55:96:73:65:4d:30:
2e:88:08:70:a3:85:7a:00:34:77:4f:5e:71:0e:4f:4e:0f:0e:
f8:23:ab:ea:47:0c:59:66:6b:3d:38:14:4c:d6:d8:2d:84:b4:
ff:fb:e3:a8:e4:d5:ac:37:c6:7f:6a:ec:5f:e7:ba:5c:c6:26:
0a:87:d1:11:58:83:4a:5f:15:91:a5:a4:14:62:b3:52:c1:8c:
f9:f7:d6:12:0c:33:3e:b0:30:1b:28:c9:de:c2:66:cd:06:d1:
1f:8c:c4:dd:9f:d1:18:a4:19:18:49:fc:1b:e2:ad:ca:1b:ec:
9d:5c:d3:4a:fe:66:74:74:95:0e:8d:5b:bf:6f:f1:14:10:f0:
1f:cb:70:10:ca:ca:f2:52:29:4a:1f:17:d3:1a:37:6f:a7:5a:
24:b8:29:40:04:5d:6b:2d:5b:07:0b:d9:c2:59:09:a7:33:e7:
b2:65:f5:15:3c:86:c4:ce:b8:23:01:79:91:d5:83:5e:bb:c9:
6b:9b:30:d9:0e:0e:39:f9:50:f6:71:67:3c:c5:83:d9:a4:bc:
4a:c4:9c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:26:04 2025 by rpki-client