Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/c1o3ffEqrdrU8ebbTBwhLFlhPXg.roa
File: c1o3ffEqrdrU8ebbTBwhLFlhPXg.roa (raw, json)
Hash identifier: fm+w7SzhvawtVdf496aqLGV6dF6J/LTyEnyM1VppA6o=
Subject key identifier: 73:5A:37:7D:F1:2A:AD:DA:D4:F1:E6:DB:4C:1C:21:2C:59:61:3D:78
Certificate issuer: /CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
Certificate serial: 019421445E6114FD82E1633DE12EF8322173
Authority key identifier: FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/c1o3ffEqrdrU8ebbTBwhLFlhPXg.roa
Signing time: Wed 01 Jan 2025 09:48:36 +0000
ROA not before: Wed 01 Jan 2025 09:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49722
IP address blocks: 91.215.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5e:61:14:fd:82:e1:63:3d:e1:2e:f8:32:21:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
Validity
Not Before: Jan 1 09:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=735a377df12aaddad4f1e6db4c1c212c59613d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9e:1f:5f:23:5d:20:92:e9:d8:e4:b6:b6:6c:
67:88:89:8f:70:30:39:1a:5b:67:b8:4d:91:05:14:
15:92:f7:54:57:ae:ac:54:3e:ed:43:1f:a1:5d:ad:
00:b5:c6:18:06:4b:49:b8:32:84:01:4a:59:33:da:
c9:f1:6c:c0:c3:77:67:7b:f6:18:c0:8b:ad:67:2c:
e3:03:f2:ee:4b:e0:67:76:60:5b:9c:d7:d4:bf:66:
b5:40:49:46:03:95:df:ff:d1:f4:4c:ca:51:34:f8:
fb:56:ef:6a:b5:7b:85:ca:dd:8a:dd:e8:af:05:dd:
15:54:a6:af:4d:09:db:35:e1:da:50:e3:d9:31:6c:
29:19:fc:d7:45:10:7f:39:35:9c:0d:7f:c5:9a:8e:
08:26:c8:7c:8e:c2:b4:ef:08:b4:39:e5:e8:ac:1f:
d6:2e:1b:40:bc:80:9a:27:4f:ef:cb:2c:80:d8:9b:
7d:fd:63:d2:7b:72:61:c1:e0:84:34:f1:cf:be:f1:
cb:d8:a0:2e:48:62:cc:2c:eb:75:d9:b9:3b:e4:b1:
6c:1a:eb:44:2e:bd:ca:1d:0e:26:7c:71:87:74:f5:
d3:e1:d6:4b:19:21:03:ba:8e:e5:20:cd:e0:89:00:
c8:fe:97:5f:9f:f0:b8:e1:88:c3:b2:41:6e:20:6c:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5A:37:7D:F1:2A:AD:DA:D4:F1:E6:DB:4C:1C:21:2C:59:61:3D:78
X509v3 Authority Key Identifier:
keyid:FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/c1o3ffEqrdrU8ebbTBwhLFlhPXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.224.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:e6:66:be:4a:19:70:05:6c:6f:d6:a0:94:37:96:e1:fe:bf:
ec:c4:ee:7d:50:e8:e9:48:f6:76:b3:f0:5e:bd:ea:b8:b4:25:
53:47:4c:f3:c2:b6:af:5a:26:2b:91:45:79:cb:3b:89:19:9e:
2e:01:b9:f7:cf:a8:34:93:a1:b6:e7:60:b3:ac:43:9b:8e:5c:
f0:66:bc:85:fc:f4:17:73:62:cc:c6:4d:07:84:6f:08:74:c4:
c5:09:ce:c4:e4:63:a1:dd:c8:ae:51:c8:f5:e1:fb:f4:50:d4:
61:82:a3:0b:7a:33:15:c0:70:9a:45:ed:c3:bd:b4:31:58:6d:
fa:65:7c:3a:d3:de:d9:f7:dc:b6:fc:4a:99:d2:bd:6a:cf:c1:
ee:64:c3:48:87:0b:bc:63:d0:fa:bf:8e:23:19:29:5a:b3:f0:
a5:8e:2b:6f:c8:27:e7:a0:96:e7:86:86:2b:45:04:cc:0a:4f:
4d:7c:7f:c5:e1:ba:f7:1b:fd:f4:e8:fa:18:5f:8b:ab:df:93:
7c:40:db:a5:51:9a:c8:81:4b:93:6d:e3:05:c5:9a:be:17:ae:
c6:18:57:d6:48:5b:7c:47:d6:a9:78:a5:d7:95:d0:36:54:4b:
e1:cf:e6:da:cc:4d:2a:62:18:5b:e1:be:19:dc:59:1b:dd:3b:
81:23:a0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:59:23 2025 by rpki-client