Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/1-o7g3L28fO-PQjnRpt-UgWkTHQw.roa
File: 1-o7g3L28fO-PQjnRpt-UgWkTHQw.roa (raw, json)
Hash identifier: eDwV2kux0bA6vYCRB0ZxUOPv76wEVLU7G2rZyoTStqs=
Subject key identifier: FA:8E:E0:DC:BD:BC:7C:EF:8F:42:39:D1:A6:DF:94:81:69:13:1D:0C
Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial: 019425FC1DB81A2FC1D81BFD5464FF81EE9B
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/1-o7g3L28fO-PQjnRpt-UgWkTHQw.roa
Signing time: Thu 02 Jan 2025 07:47:47 +0000
ROA not before: Thu 02 Jan 2025 07:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212508
IP address blocks: 176.97.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:1d:b8:1a:2f:c1:d8:1b:fd:54:64:ff:81:ee:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Validity
Not Before: Jan 2 07:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa8ee0dcbdbc7cef8f4239d1a6df948169131d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:f8:2d:7d:3c:d6:4d:54:c4:14:f8:45:95:
19:76:62:92:56:68:f7:c2:67:8f:b2:e9:14:10:fb:
d8:5c:1f:2b:8e:e6:c8:47:29:9f:da:67:a0:69:b0:
19:9d:c8:40:ee:6e:73:f1:8d:6b:05:4a:8d:66:8a:
67:8c:04:e1:df:b5:cd:63:ce:7e:01:5d:d4:32:2b:
98:39:c3:90:7d:11:d1:fd:e7:38:ee:0e:04:48:2f:
2a:c0:6c:b1:5e:a8:ed:2a:b3:0f:6a:a3:63:33:42:
b0:bb:0d:b3:f9:e6:83:69:5f:40:89:b0:33:42:d9:
87:38:53:b6:e0:03:c1:09:08:76:2f:b8:e4:19:7e:
28:f4:3a:f2:b0:76:65:84:5b:66:51:4a:db:2a:63:
52:29:5e:b3:d2:2f:37:97:49:65:eb:7d:86:d7:a5:
be:1d:8f:93:c8:bc:b6:fd:52:ff:ef:69:dd:27:d2:
ba:4d:f6:90:54:61:35:6f:20:6d:c1:7c:85:90:e3:
31:3b:86:66:93:13:84:53:a1:dc:97:87:90:8e:95:
37:e3:a5:42:eb:8f:ac:a2:73:54:22:a4:4a:e5:b6:
32:5a:c0:91:72:fb:81:1e:50:b9:d3:c9:c9:a8:5d:
3d:60:07:a2:15:ba:af:31:b5:e3:a2:f8:81:ee:f5:
92:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8E:E0:DC:BD:BC:7C:EF:8F:42:39:D1:A6:DF:94:81:69:13:1D:0C
X509v3 Authority Key Identifier:
keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/1-o7g3L28fO-PQjnRpt-UgWkTHQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.212.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:7c:60:e0:a1:3e:17:3e:16:5f:ea:79:3a:57:15:46:2c:60:
f8:ff:c4:53:7f:97:58:9a:ba:a5:26:d3:d9:38:c1:a7:8c:66:
5f:ef:52:c2:f6:28:c7:d6:59:6b:bf:8c:ad:69:e4:bd:d6:aa:
32:0a:fa:5b:b3:cd:87:95:bb:36:81:81:bf:fe:77:41:8c:f4:
5f:4e:31:1c:6e:54:cb:d9:9e:57:86:5e:9f:23:b8:9c:ad:10:
a2:a7:3e:6f:4a:3d:f0:29:e6:97:14:48:57:f8:3b:64:eb:99:
25:f6:82:a0:ed:40:b7:28:5d:86:fd:f3:74:ee:6b:db:63:aa:
6f:9d:b4:e4:23:26:09:12:00:69:ac:52:e3:eb:15:28:13:1c:
b4:84:c3:df:19:9d:51:e2:01:1a:b6:77:9c:07:60:18:2a:cc:
36:2b:19:9a:13:db:a4:1c:f2:fa:a0:c1:29:45:22:5d:d0:ba:
2f:5c:1d:9c:c0:06:1e:0c:43:2b:65:1e:eb:98:f7:9a:6e:6c:
ad:a7:ad:68:76:37:8b:b9:60:98:e5:72:47:3b:0c:f8:b2:d4:
43:29:5f:6f:b8:5a:c1:bd:e0:3e:d9:02:2d:96:83:02:b0:94:
a0:6f:0a:c4:e5:88:33:7d:32:de:22:d2:6f:24:0b:4e:c4:c7:
d8:aa:ea:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 05:44:33 2025 by rpki-client