Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/sbYki2S9rry6fN02izJCoCuBIoc.roa
File: sbYki2S9rry6fN02izJCoCuBIoc.roa (raw, json)
Hash identifier: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=
Subject key identifier: B1:B6:24:8B:64:BD:AE:BC:BA:7C:DD:36:8B:32:42:A0:2B:81:22:87
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 0194FEAA52548746E139DAEFB075C10BA634
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/sbYki2S9rry6fN02izJCoCuBIoc.roa
Signing time: Thu 13 Feb 2025 09:36:02 +0000
ROA not before: Thu 13 Feb 2025 09:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43576
IP address blocks: 217.147.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:aa:52:54:87:46:e1:39:da:ef:b0:75:c1:0b:a6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Feb 13 09:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1b6248b64bdaebcba7cdd368b3242a02b812287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:34:4e:0a:c4:4d:3e:5a:88:9e:4b:fd:b6:9c:
31:d5:a1:b3:21:7f:b2:1f:28:03:a1:fa:ab:18:0f:
04:fa:29:81:c6:74:34:4f:7e:92:a4:e6:a5:aa:0b:
83:60:27:9b:29:a1:89:23:ad:e3:31:1d:ff:80:f0:
ff:65:b8:d0:ae:9b:0f:54:23:13:e7:6c:2f:23:58:
1f:cb:d7:fd:89:14:36:75:b9:53:22:5c:f7:28:48:
ef:2a:47:5a:a4:ba:aa:ab:ba:ff:f8:ac:a4:ab:45:
46:50:51:06:2b:93:07:40:97:84:8f:9e:91:23:dd:
59:6e:9d:65:6a:9d:08:3c:5b:22:d7:cd:82:90:36:
15:32:75:58:87:ae:55:6e:d4:d9:d6:d4:be:1b:0e:
62:b8:b8:84:23:1b:2b:a6:c3:30:39:9f:b3:ec:00:
4d:04:d2:ce:34:e1:95:5d:8b:72:e1:5b:87:cb:0a:
56:45:f2:34:c1:2b:ec:fb:78:e2:97:8c:1e:05:6e:
21:54:62:8d:d7:e2:81:7a:a6:46:28:cd:a6:25:d8:
fc:2a:8c:1e:4e:50:65:86:9a:82:bc:95:db:db:ab:
c7:ae:b1:c4:98:8d:3c:aa:e1:68:a7:a9:ab:58:dd:
21:9e:0e:dc:01:9f:c5:f6:88:0f:22:3a:54:37:f4:
45:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B6:24:8B:64:BD:AE:BC:BA:7C:DD:36:8B:32:42:A0:2B:81:22:87
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/sbYki2S9rry6fN02izJCoCuBIoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:59:a1:96:d6:b9:49:0c:9c:96:16:25:64:f5:fd:97:79:0a:
24:10:9f:68:64:a1:7e:4a:12:f1:24:8d:b8:15:5d:50:f4:3b:
aa:87:d3:51:16:d9:5f:ed:74:3c:5f:9e:23:79:88:6e:a5:10:
9f:43:97:eb:50:6b:64:3f:c8:dd:c8:1c:cc:ed:fb:b9:40:d1:
4a:e3:e4:46:7e:e6:78:76:57:da:c3:7d:33:54:b1:ad:b0:bd:
ab:68:3e:70:be:3d:a4:ae:ef:95:ac:47:b8:39:6e:b0:49:bc:
5f:4e:38:8d:f9:7f:23:03:49:65:db:60:6d:b6:b9:ba:36:19:
ec:fc:08:74:43:ca:56:de:57:35:d0:77:2c:6e:51:45:be:a2:
11:69:b1:ef:1f:1d:68:67:fe:a0:f7:af:8a:65:e8:2e:ef:fc:
fc:88:8b:8a:cc:cd:9c:da:a5:ad:1d:ab:df:c9:d5:bd:cd:cd:
cd:f0:3c:9f:c1:fd:66:51:00:0b:f5:56:70:69:ae:41:80:7a:
c0:67:59:c0:0a:e9:0a:b0:a5:c3:50:c3:db:db:e9:5e:77:48:
1a:54:d8:d2:94:41:ec:a5:f9:3c:e7:ee:a5:12:8c:44:f3:7e:
66:41:c2:1b:fc:92:2c:b0:0e:07:58:fe:52:dc:68:9a:7e:47:
62:27:93:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:32 2025 by rpki-client