Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/p9KEvv1SRqyOhb5R1ZKX1AGCgRE.roa
File: p9KEvv1SRqyOhb5R1ZKX1AGCgRE.roa (raw, json)
Hash identifier: bVQz/2xz2S32nVIu+lGPNjoEvazAi2xi/WmxffFGB5U=
Subject key identifier: A7:D2:84:BE:FD:52:46:AC:8E:85:BE:51:D5:92:97:D4:01:82:81:11
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0194221F3C4E242D86E996EA0982BC17D90C
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/p9KEvv1SRqyOhb5R1ZKX1AGCgRE.roa
Signing time: Wed 01 Jan 2025 13:47:39 +0000
ROA not before: Wed 01 Jan 2025 13:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 46.8.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:3c:4e:24:2d:86:e9:96:ea:09:82:bc:17:d9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 13:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7d284befd5246ac8e85be51d59297d401828111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:de:b2:ff:47:4b:e0:26:04:c1:0d:12:b9:
54:11:6f:0d:b2:f6:b2:41:69:31:92:05:1d:df:8e:
55:90:30:c4:2c:1a:01:48:6a:4c:f5:58:ad:19:12:
2b:92:c1:f0:6d:68:61:1d:66:63:06:6d:ba:af:3b:
59:38:1b:01:ab:ad:90:d3:6f:86:1e:88:e4:a0:35:
90:0d:92:e1:9a:a0:c3:19:d8:30:11:8c:7b:c3:16:
b9:e1:a7:84:7c:2f:31:62:ce:63:a0:5e:e8:df:c0:
74:33:12:3d:6c:ba:66:31:e3:92:9f:11:1e:47:b8:
50:52:95:2d:71:1e:1d:14:7b:f8:99:0b:d5:8a:16:
20:37:30:da:69:53:d9:df:86:f2:80:09:0a:48:14:
ec:4c:2c:b8:c0:be:bf:f0:17:55:f5:37:7a:33:d5:
f0:d8:08:0f:ca:02:24:e2:2c:69:ec:58:dd:8f:9d:
39:0f:b1:3c:45:09:00:b2:50:9c:fd:39:bf:74:f6:
04:c9:21:e6:e5:59:76:57:5a:97:18:90:c7:ab:48:
5a:87:61:88:8c:6d:0f:0a:98:03:e5:fe:8a:31:ef:
ea:b4:62:c6:cd:b9:10:9e:9a:9b:c6:4e:2b:ce:ac:
e2:78:c2:6a:7a:43:4a:8c:d7:1b:0c:f5:ac:a8:b9:
c7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D2:84:BE:FD:52:46:AC:8E:85:BE:51:D5:92:97:D4:01:82:81:11
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/p9KEvv1SRqyOhb5R1ZKX1AGCgRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.199.0/24
Signature Algorithm: sha256WithRSAEncryption
58:60:68:62:d8:e0:1e:7c:a7:74:aa:76:43:19:d4:69:0e:a1:
6e:60:1b:d4:16:4a:de:e8:fb:b9:2c:08:3e:c9:3e:34:c7:5a:
44:a0:fd:fa:cf:0f:5a:0b:5c:8a:ff:f2:d9:64:4a:6a:61:0e:
30:a0:a4:3d:49:d0:3c:1b:5e:dc:33:b6:97:df:9d:fe:d6:bb:
9f:37:1d:c5:f9:ef:20:54:7b:71:ef:e7:54:db:ef:fb:6f:fe:
39:9f:b6:b3:34:5e:0b:02:d0:27:4c:c0:ea:6d:c2:6b:88:e9:
03:a4:54:a5:68:db:c7:e0:b6:4f:02:3f:d5:46:5f:a8:03:48:
c1:b2:90:f0:c7:e7:4b:f4:f6:48:0b:35:1c:36:21:d0:8c:2c:
06:1f:57:41:63:81:91:bc:1e:a2:a8:25:8e:cf:14:88:45:53:
13:14:d0:fc:95:91:64:0f:9c:08:89:12:c3:f7:51:24:db:5c:
20:a5:fb:39:95:14:dd:c6:a4:9d:d7:a5:4a:6e:87:f7:af:bb:
14:81:0c:e6:e6:62:be:1b:23:33:fc:eb:b5:58:8e:81:ff:62:
53:62:e8:26:35:a2:77:ff:4f:ec:f4:a6:6c:fc:71:98:73:2f:
0d:e6:1f:f0:5d:21:ef:f6:c1:fe:55:74:13:37:70:89:62:3f:
e0:74:be:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:35 2025 by rpki-client