Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/pL8DPUuY6V_LTawy1OdUwrIg01c.roa
File: pL8DPUuY6V_LTawy1OdUwrIg01c.roa (raw, json)
Hash identifier: yxyfBx5vs5Lhayo07nTfHgtEaPhrWIe0WeuncjCeyYo=
Subject key identifier: A4:BF:03:3D:4B:98:E9:5F:CB:4D:AC:32:D4:E7:54:C2:B2:20:D3:57
Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832
Certificate serial: 01946DD55AFC64A2071A39AB0501152E26B0
Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/pL8DPUuY6V_LTawy1OdUwrIg01c.roa
Signing time: Thu 16 Jan 2025 06:38:06 +0000
ROA not before: Thu 16 Jan 2025 06:38:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59516
IP address blocks: 81.161.116.0/22 maxlen: 22
2001:67c:2b78::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6d:d5:5a:fc:64:a2:07:1a:39:ab:05:01:15:2e:26:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23607105955c764a813fd9524a7e41b940c56832
Validity
Not Before: Jan 16 06:38:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4bf033d4b98e95fcb4dac32d4e754c2b220d357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:ee:ef:4c:0e:50:47:28:6e:ec:74:c4:a3:
e5:dc:0e:37:4f:ef:b8:4b:36:8a:fa:a7:71:f1:de:
4e:63:ab:24:39:f4:aa:ae:2d:f9:20:22:40:63:d8:
2a:e9:a0:c6:bc:32:46:c3:ca:eb:57:09:aa:c8:3d:
de:09:f1:f1:94:22:77:f9:31:b0:31:a0:86:74:4e:
a5:c2:c1:61:4e:e7:86:00:92:fa:87:a8:fe:70:69:
ba:81:7f:78:e3:41:e9:dd:88:b8:89:56:75:9d:f7:
54:6d:21:c3:7b:c6:d1:58:f5:b3:02:bf:77:9d:64:
e4:eb:1e:e5:4a:3b:1b:fd:7c:9f:63:c8:14:40:55:
89:2c:f9:ee:9d:fb:24:a1:c1:03:0e:66:f4:eb:3e:
d8:67:cf:94:f4:8d:75:72:1b:62:18:60:78:57:de:
4d:d7:cc:08:b3:af:d0:94:5a:54:8b:31:3f:04:19:
54:f4:d9:44:2e:4c:79:19:12:26:eb:ae:c9:55:78:
9f:4b:ac:c0:4a:c9:af:20:ee:a8:3f:de:83:1c:91:
56:37:07:b0:c8:a9:57:30:5d:6b:c5:fa:c2:7b:2f:
21:c8:cf:be:75:9d:ba:50:7b:02:43:c8:f8:97:0a:
1f:44:51:6b:25:a3:b7:44:45:7e:3d:7f:19:61:84:
27:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BF:03:3D:4B:98:E9:5F:CB:4D:AC:32:D4:E7:54:C2:B2:20:D3:57
X509v3 Authority Key Identifier:
keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/pL8DPUuY6V_LTawy1OdUwrIg01c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.116.0/22
IPv6:
2001:67c:2b78::/48
Signature Algorithm: sha256WithRSAEncryption
00:ec:28:09:5e:b9:b2:61:df:6b:07:8a:fc:46:ff:4b:40:2c:
a5:91:08:a4:60:b6:73:e1:71:ef:e6:f8:cd:fe:b7:06:15:4f:
be:3e:2e:42:a7:1a:0d:db:fc:de:38:4d:7a:b5:dd:fa:df:a4:
10:ee:0d:98:a6:53:99:b1:fe:75:c0:81:82:75:c0:dc:22:2d:
b4:e7:af:4f:f4:99:5f:e1:ce:34:f1:93:f4:eb:c2:3d:12:7a:
8a:31:83:e3:25:7c:ef:04:47:86:88:fd:45:70:bc:44:57:19:
78:b2:98:f0:d0:7e:6b:0f:b2:cd:26:1b:03:56:b2:9e:44:67:
d1:97:b0:55:df:08:30:31:81:53:0e:3b:bb:d0:80:79:37:bc:
1a:4e:a9:1f:63:1b:61:93:3f:fd:66:10:a5:aa:5a:09:98:04:
2c:91:c9:78:9a:58:d2:0d:87:f0:ef:8b:5d:b3:99:0d:5e:d3:
cc:7b:a5:a8:bd:b1:c0:bc:fa:b2:a2:5b:e6:42:5f:ef:8b:99:
af:02:db:85:43:44:4c:14:17:0c:78:9a:3c:b5:07:29:50:15:
d2:14:db:7c:29:d7:67:2d:bd:e8:f8:b6:f8:90:dd:3e:21:c9:
28:db:f1:18:e8:fd:c8:96:2b:db:cc:d6:d5:33:0d:de:d5:4d:
0a:06:a6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:00:19 2025 by rpki-client