Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/72WUZg4a8Mn3wM6qcS6lKaFMvy4.roa
File: 72WUZg4a8Mn3wM6qcS6lKaFMvy4.roa (raw, json)
Hash identifier: J12B/L+u1x8UjkZE3gEtXs8elHp+K5+c+2ncMirPn90=
Subject key identifier: EF:65:94:66:0E:1A:F0:C9:F7:C0:CE:AA:71:2E:A5:29:A1:4C:BF:2E
Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial: 01941FFAAAD8363E1E6AD7E1D39DD7E2FC74
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/72WUZg4a8Mn3wM6qcS6lKaFMvy4.roa
Signing time: Wed 01 Jan 2025 03:48:28 +0000
ROA not before: Wed 01 Jan 2025 03:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205257
IP address blocks: 178.17.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:aa:d8:36:3e:1e:6a:d7:e1:d3:9d:d7:e2:fc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Validity
Not Before: Jan 1 03:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef6594660e1af0c9f7c0ceaa712ea529a14cbf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:43:aa:cb:d4:51:ea:e4:17:10:51:45:04:2d:
9f:fe:c2:7c:0a:16:31:5c:f1:0e:d1:fc:15:21:57:
36:a1:76:72:52:a3:7f:41:18:e0:4b:75:66:84:54:
d9:03:84:cc:1b:25:f0:be:96:af:15:b7:b0:c2:ae:
e1:c3:3a:fa:2f:37:f6:ce:16:45:df:e4:6f:67:a7:
45:c7:cc:a0:70:ff:f3:85:71:42:41:25:e5:7b:5e:
53:00:a9:25:5e:45:b9:13:f8:fb:41:19:62:c2:0e:
80:b4:27:94:cf:11:09:85:4a:32:15:1e:c8:db:cd:
b5:32:e3:07:3d:9c:b4:1f:f8:bf:0b:29:b8:2c:5f:
bd:5a:0a:e9:58:89:d0:a8:4a:3b:58:f9:d4:c2:b6:
d4:4e:e2:22:d9:71:9c:3c:0c:1a:04:3c:e0:87:07:
5b:6e:fb:24:7f:f0:9b:e5:4e:75:09:31:38:16:04:
ce:0d:3c:9d:2b:68:74:66:2a:7f:b0:d6:42:00:21:
a1:1c:62:92:f4:5b:96:10:8d:17:1b:00:36:3b:d8:
39:44:39:6d:00:e2:38:0e:39:08:26:cd:50:15:0a:
94:44:66:ef:d0:8b:80:f7:f1:e6:5a:a6:5a:00:b6:
ee:25:68:ea:3f:00:27:c0:75:c8:2e:64:1a:f5:e6:
a8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:65:94:66:0E:1A:F0:C9:F7:C0:CE:AA:71:2E:A5:29:A1:4C:BF:2E
X509v3 Authority Key Identifier:
keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/72WUZg4a8Mn3wM6qcS6lKaFMvy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.217.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c6:7d:6f:56:bb:52:e7:dc:04:66:b6:9c:3a:70:f3:e9:95:
b0:d8:38:4c:a6:3a:0b:7c:e8:e2:a1:3c:7f:2d:fa:b7:10:44:
d5:61:d3:eb:70:8b:3d:38:ed:d4:c8:9e:30:46:69:5e:0e:41:
dd:a8:ea:7f:f9:47:7d:89:6c:1b:d8:66:a2:64:ba:46:62:5f:
f0:9b:27:3c:54:02:1d:ab:60:d6:f9:b2:5b:36:e9:9d:60:22:
dd:e4:be:b0:27:70:13:b3:af:3a:08:82:2d:30:f3:16:37:66:
da:38:a5:db:37:42:ed:74:f6:c7:f6:48:ff:13:b1:05:d8:dd:
6d:03:5a:c7:0e:81:60:c5:0e:98:6e:85:a8:75:41:58:1e:d1:
0c:0a:17:94:a5:1f:2c:6b:79:7f:bb:af:4c:a6:b6:63:91:68:
a6:f3:e3:9c:58:af:59:08:62:19:5d:ec:49:8b:f6:1b:ac:91:
34:33:6c:67:42:8a:6e:43:89:79:c7:aa:2e:2a:d1:79:3a:85:
c2:2a:74:aa:21:8d:17:b4:be:f7:cf:e9:5d:22:5e:46:c4:d7:
98:40:98:ae:26:e7:f3:dc:9c:63:42:84:25:82:4e:ef:bd:1c:
bd:4a:33:53:9d:68:6f:c1:a7:97:86:0a:6c:a2:a6:2f:0f:b7:
82:54:c7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:12 2025 by rpki-client