Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1CyaAa-2HWEr4ibYcKA9dmsF9LY.roa
File: 1CyaAa-2HWEr4ibYcKA9dmsF9LY.roa (raw, json)
Hash identifier: 7GKF35vTSd8kaViSAmAr5nkqTNb5hYHV6d8RBHrkhc8=
Subject key identifier: D4:2C:9A:01:AF:B6:1D:61:2B:E2:26:D8:70:A0:3D:76:6B:05:F4:B6
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747FB1068A9A1E35150A422690A50F1
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1CyaAa-2HWEr4ibYcKA9dmsF9LY.roa
Signing time: Thu 02 Jan 2025 13:50:16 +0000
ROA not before: Thu 02 Jan 2025 13:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199512
IP address blocks: 213.91.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fb:10:68:a9:a1:e3:51:50:a4:22:69:0a:50:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d42c9a01afb61d612be226d870a03d766b05f4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:63:cb:cc:31:72:23:bc:0b:1a:07:84:c7:
7e:ed:ad:1c:e6:89:06:8a:b1:8a:ce:34:88:3e:4d:
a0:45:41:ef:2e:bb:cd:f7:99:99:29:0b:d8:32:8a:
34:51:89:1b:cc:96:08:25:fc:34:a5:4b:a9:43:4e:
07:ea:94:5c:20:82:fa:13:10:85:f1:c1:21:dd:49:
62:ef:e0:bd:63:84:bb:00:73:62:5f:2e:98:98:de:
3c:ac:59:0f:36:66:79:31:97:b4:22:bb:f3:29:5a:
3a:e3:6c:9f:70:2c:b1:a1:0a:94:3b:8f:15:64:92:
22:7d:5b:d0:b3:38:9f:3e:2e:15:cc:42:bf:62:12:
11:0e:0c:ca:82:f9:d0:24:3e:10:26:e9:69:f1:62:
af:7e:d7:5c:20:33:37:1a:ce:62:c2:b5:5d:24:85:
55:e6:49:4a:4e:80:d5:60:7e:ac:35:66:02:a7:f1:
26:63:35:fe:a0:c1:45:65:62:0f:4f:8d:a3:64:08:
e9:c5:04:6a:10:87:96:b5:d7:6a:11:b8:55:f1:d2:
94:6e:ed:d5:7d:85:2f:32:39:9e:20:92:c4:7c:05:
3c:85:65:66:2e:06:4d:cc:c7:a9:86:58:c2:05:3d:
31:8a:4e:bd:32:e6:73:2f:cc:57:d3:b4:7e:14:55:
81:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2C:9A:01:AF:B6:1D:61:2B:E2:26:D8:70:A0:3D:76:6B:05:F4:B6
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1CyaAa-2HWEr4ibYcKA9dmsF9LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.91.157.0/24
Signature Algorithm: sha256WithRSAEncryption
85:51:6d:9b:91:4b:4a:3b:4f:43:22:b1:5e:69:74:1a:0c:b2:
b6:83:54:dd:25:58:40:2b:c2:d0:e0:dd:cf:f4:01:d9:1a:ee:
76:91:f3:9f:28:0c:18:4e:34:20:4c:cc:75:2d:6b:64:f0:99:
60:7a:37:3e:39:fa:24:4c:b8:4d:80:b5:b4:96:46:fa:8f:8d:
e9:fc:ca:e3:b6:27:d8:11:29:94:42:c9:14:bd:02:1d:7b:89:
23:ce:26:e8:29:9a:12:01:90:9b:28:e7:6c:50:5f:ec:e0:e7:
01:a0:17:fe:e1:43:c3:ef:51:38:1a:a2:27:aa:29:ed:e4:2d:
e9:72:87:f9:c3:c4:67:bf:a4:30:0e:f7:49:52:d6:a5:db:61:
85:ac:a3:01:09:09:3d:1c:6a:c6:37:83:6c:e9:2c:c2:9a:a3:
5e:6d:f3:c7:92:fe:f8:bb:49:f4:a6:d1:ab:ba:d0:41:5d:35:
1d:67:c7:b1:d8:96:37:10:9d:f0:d3:f1:6b:a1:1a:5d:43:dd:
47:09:9b:59:37:7f:c4:21:99:86:82:b4:85:1c:4b:b9:57:80:
3c:b5:37:34:d7:8e:50:78:65:07:4d:a2:68:ab:03:ec:66:5f:
08:b4:97:16:30:51:d0:1f:ee:d2:19:18:b4:28:82:72:9c:d3:
1c:5d:2f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:41 2025 by rpki-client