Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/t0DJyinn4llKKpeCe0OBlE_2NVY.roa
File: t0DJyinn4llKKpeCe0OBlE_2NVY.roa (raw, json)
Hash identifier: NAk4z+1h3HiDOuSQgX+6rT4C+GeWqbjHTxsOaoe1l/I=
Subject key identifier: B7:40:C9:CA:29:E7:E2:59:4A:2A:97:82:7B:43:81:94:4F:F6:35:56
Certificate issuer: /CN=78878edda6ae4a0147db70b66105cfd17f2066a3
Certificate serial: 019422FC07464B58A7DD2F073E3B8756EF19
Authority key identifier: 78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/t0DJyinn4llKKpeCe0OBlE_2NVY.roa
Signing time: Wed 01 Jan 2025 17:48:49 +0000
ROA not before: Wed 01 Jan 2025 17:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 149.205.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:07:46:4b:58:a7:dd:2f:07:3e:3b:87:56:ef:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78878edda6ae4a0147db70b66105cfd17f2066a3
Validity
Not Before: Jan 1 17:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b740c9ca29e7e2594a2a97827b4381944ff63556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:10:97:87:07:a0:60:90:ff:e7:44:39:a5:
3e:22:b2:7d:d4:84:aa:18:ed:60:61:11:ac:26:da:
0a:4e:68:51:3d:2f:0c:45:38:84:f8:03:07:02:e0:
a4:f9:3b:52:c8:dd:9c:84:a2:7b:cc:68:e1:20:14:
dd:08:e7:1f:9e:d6:30:b0:d2:8a:01:b8:4c:2d:d6:
de:a4:c8:70:8e:99:1e:d2:c6:51:7f:57:11:ee:cf:
ec:09:02:a7:63:3e:18:6d:d6:09:42:a9:39:fc:6a:
d4:b7:a7:58:8d:63:3c:76:1e:fa:87:d3:07:d9:c7:
8b:db:ff:b5:d4:2c:ef:41:b7:16:de:58:0b:dd:d1:
7f:e9:c1:43:d1:8b:c0:dd:d5:5d:48:1e:01:e4:8f:
97:3f:f8:f3:b6:05:3d:3a:11:c8:c3:95:a6:a2:c6:
c9:48:ef:f0:8b:ed:a3:44:05:3a:b1:1f:00:80:12:
ab:82:d8:c1:38:f2:26:91:2a:2e:d7:c3:e6:4d:82:
7d:02:5a:d4:16:fd:0d:f5:77:29:cb:8c:ee:39:b6:
09:4e:70:c4:ce:3c:1b:41:f0:b0:9c:94:e8:10:66:
38:de:2f:11:ea:45:4b:1f:8e:3d:0f:02:78:a6:fb:
8a:52:db:e6:d6:36:72:09:e3:9d:c8:a4:ec:92:77:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:40:C9:CA:29:E7:E2:59:4A:2A:97:82:7B:43:81:94:4F:F6:35:56
X509v3 Authority Key Identifier:
keyid:78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/t0DJyinn4llKKpeCe0OBlE_2NVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.205.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:b8:b1:cd:8a:f5:27:d0:6c:4f:31:c2:2f:4b:a3:6f:79:57:
f3:77:1a:6c:fe:e6:12:80:d5:1e:17:62:ca:9c:36:4f:22:35:
82:21:07:71:5d:fd:96:f7:f0:56:ea:74:49:10:22:8f:f4:17:
01:ec:6b:31:6e:7c:66:fa:58:dd:b7:fb:43:d5:ed:0a:04:e3:
85:5a:0e:ef:08:c1:ae:56:ec:7f:dd:fe:8e:7b:86:68:8f:d7:
ce:46:a5:f6:0a:2c:56:44:a6:d0:df:15:94:6b:7a:62:57:04:
d1:4c:7d:fc:1b:37:2f:31:f1:d4:2d:7d:6f:e9:27:f7:85:79:
cd:0e:62:3d:2e:82:28:4a:58:49:3d:67:d2:f2:f4:3a:e4:30:
15:a0:9a:4d:25:be:c0:0e:eb:ee:8c:13:14:57:22:37:68:6e:
cb:2d:07:0d:dd:cd:b6:ef:2a:d7:96:cf:a5:34:7f:d2:09:77:
9e:92:8e:70:6a:fd:80:ff:58:7a:b1:f9:66:97:bf:b1:73:fe:
1d:aa:a8:8b:3e:8c:b6:27:8d:03:ac:5c:c0:1a:8d:8f:e8:5e:
4b:8c:87:1c:a5:ee:57:31:bd:d7:e4:1e:0d:fc:32:82:36:a4:
a0:42:e1:14:e8:03:61:e3:6e:3d:cf:97:91:01:89:96:b0:3e:
15:e4:8a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:55:04 2025 by rpki-client