Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/AxvZFZvFTyXmTJp4vwKjL5P7BJA.roa
File: AxvZFZvFTyXmTJp4vwKjL5P7BJA.roa (raw, json)
Hash identifier: DT207lrgFqp9k/8o8ytERsNd+6+ux/7h7W27NxLgDyI=
Subject key identifier: 03:1B:D9:15:9B:C5:4F:25:E6:4C:9A:78:BF:02:A3:2F:93:FB:04:90
Certificate issuer: /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial: 019424B401DC5DD89E2E13414095EA882F54
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/AxvZFZvFTyXmTJp4vwKjL5P7BJA.roa
Signing time: Thu 02 Jan 2025 01:49:24 +0000
ROA not before: Thu 02 Jan 2025 01:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399382
IP address blocks: 213.173.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:01:dc:5d:d8:9e:2e:13:41:40:95:ea:88:2f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
Validity
Not Before: Jan 2 01:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=031bd9159bc54f25e64c9a78bf02a32f93fb0490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5e:e2:6b:f5:da:07:06:85:d8:dc:54:d9:3c:
9d:97:54:6a:53:27:33:7c:ea:6d:9b:fa:72:3e:fd:
a4:47:23:68:da:5a:85:a8:3b:ca:01:58:48:d5:0f:
43:37:d1:45:2c:19:e4:a8:34:8d:54:1e:9b:95:7d:
ef:a3:35:0d:17:68:6d:c4:c3:cb:99:48:ed:35:3d:
95:00:cf:4a:4e:4c:6f:b0:58:ed:1f:01:aa:e5:b0:
3f:5d:0c:a8:42:c6:61:3f:cb:63:55:25:f3:82:0f:
67:47:82:00:0c:21:0b:5b:e1:a4:c9:ec:dd:88:f0:
28:4d:1e:ef:bf:6c:cb:88:7e:25:8b:96:b1:d9:e1:
5f:50:93:09:86:94:69:80:e8:a0:9e:46:e0:4a:5b:
f7:c0:16:80:e1:6f:89:2d:a1:95:a6:a0:4c:c8:07:
29:4f:50:49:ff:f6:b4:e2:80:90:92:f5:96:13:1d:
22:af:22:b9:11:51:95:6e:93:6a:a4:0a:16:09:65:
64:16:1a:69:4a:c4:fe:82:f5:dc:dc:f1:b7:8b:52:
c6:ba:6e:53:ee:5e:d3:9b:e6:4e:fa:a4:08:c1:4c:
f7:b5:6b:ae:c9:cd:47:db:0a:f1:09:a0:59:8b:36:
f7:c6:89:e0:02:db:03:d9:4e:28:fa:e1:42:3d:cc:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1B:D9:15:9B:C5:4F:25:E6:4C:9A:78:BF:02:A3:2F:93:FB:04:90
X509v3 Authority Key Identifier:
keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/AxvZFZvFTyXmTJp4vwKjL5P7BJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.173.36.0/24
Signature Algorithm: sha256WithRSAEncryption
07:99:23:8c:10:17:55:ae:cd:e4:cb:e1:b8:7d:a2:9b:76:c8:
2a:9e:db:35:50:27:da:0e:2f:5a:71:be:2a:7a:7c:60:5a:bb:
cb:e4:5e:d1:44:32:03:f7:ad:48:92:6b:45:82:9e:5a:85:72:
32:76:62:62:26:97:f1:1a:8e:f6:73:60:e0:9a:85:bd:34:45:
36:9e:a3:8e:2b:be:6e:ce:55:8a:e9:b8:fe:e8:c8:bd:ff:d7:
d5:f6:63:89:1c:35:86:3c:21:c7:54:b5:29:bd:4e:58:52:95:
4c:cf:f9:fc:f4:90:99:3f:52:a3:0c:1e:3a:41:53:cb:bb:58:
ec:19:b7:d9:88:59:02:af:27:7d:dd:74:f8:20:8e:9b:55:19:
e4:ec:25:53:ef:87:22:59:69:dd:56:6b:5e:78:b3:a3:bd:f7:
6e:17:09:95:fb:3e:69:0b:8c:e5:06:07:9e:84:17:d2:ac:d8:
b2:9c:1a:46:e6:f3:f6:b0:7d:a1:91:ba:36:fb:32:d6:ab:32:
f3:84:a5:7e:ea:7b:00:12:96:23:4e:68:1c:0a:5e:d8:0e:46:
eb:c3:c3:ca:e9:aa:28:99:4d:fc:64:37:d3:aa:69:7c:91:a0:
91:85:cf:38:c4:ac:e3:d6:34:d0:ba:ce:10:2e:89:23:3d:bb:
73:7f:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:17:00 2025 by rpki-client