Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/C73mb-suw38q-iFwZMx38kqAhH0.roa
File: C73mb-suw38q-iFwZMx38kqAhH0.roa (raw, json)
Hash identifier: pLbt+jgXdnxYqRPukRrg4bEAdx84442RrBJqNtyp9n8=
Subject key identifier: 0B:BD:E6:6F:EB:2E:C3:7F:2A:FA:21:70:64:CC:77:F2:4A:80:84:7D
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 0194274807843E244EC6AF8E256E687FA837
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/C73mb-suw38q-iFwZMx38kqAhH0.roa
Signing time: Thu 02 Jan 2025 13:50:19 +0000
ROA not before: Thu 02 Jan 2025 13:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213833
IP address blocks: 213.16.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:07:84:3e:24:4e:c6:af:8e:25:6e:68:7f:a8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bbde66feb2ec37f2afa217064cc77f24a80847d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bc:c2:0d:b2:66:4f:68:4f:d8:fe:d8:ce:88:
2f:11:bd:b9:28:66:29:2a:b1:dc:69:db:c9:c6:42:
44:fb:02:b3:57:52:28:d9:18:a3:c6:39:dc:f0:40:
99:7e:8f:ef:68:a6:1e:19:c2:00:0c:df:10:25:50:
a1:7a:3a:14:74:21:b9:40:2b:d2:78:35:10:da:ce:
a6:91:db:6c:d6:d7:5f:4a:05:7b:92:ab:97:d9:a5:
ff:7e:0a:f4:a0:b4:55:48:34:b4:4d:e4:16:4c:95:
a0:37:98:10:18:85:a6:7d:27:59:62:10:99:d3:de:
ef:6f:b5:e1:89:e5:96:9b:ea:bd:55:2b:a0:c0:3a:
f6:56:2f:8d:88:9c:a2:d4:9c:9b:aa:83:98:57:96:
c9:2e:ff:b9:93:54:90:70:68:dc:a3:4b:02:b8:c1:
92:02:90:51:e9:81:5c:b6:4d:bd:59:a2:bc:73:95:
b3:82:a8:25:eb:d4:64:87:36:38:b1:98:e2:b4:85:
93:0c:8d:32:5f:b2:f4:bf:71:e4:a1:b4:52:be:81:
91:02:05:c0:bf:c4:a3:6f:76:b9:6e:2f:b7:a2:cf:
59:b1:52:a0:db:88:a9:94:66:8e:ac:d0:27:1d:ae:
2a:31:eb:65:db:1e:00:3e:5a:0d:c4:2f:b3:58:60:
fc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BD:E6:6F:EB:2E:C3:7F:2A:FA:21:70:64:CC:77:F2:4A:80:84:7D
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/C73mb-suw38q-iFwZMx38kqAhH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.16.60.0/24
Signature Algorithm: sha256WithRSAEncryption
34:7e:a1:c9:3a:ad:8d:48:49:12:8e:46:f0:cf:de:5f:68:23:
14:56:b0:79:19:f2:e3:bb:56:17:fc:c9:36:49:84:fc:a0:b5:
4d:e0:f4:bc:18:64:2d:58:0d:4c:b2:7e:10:bc:66:aa:09:99:
54:0f:f7:95:b2:e4:32:c7:ea:6d:b6:7b:3e:b2:91:dc:a0:93:
be:53:dd:76:03:81:16:38:df:38:f7:7a:5b:b1:6f:85:89:59:
3b:80:0b:b6:b1:af:92:75:fb:cb:12:10:18:c1:8f:31:fd:f3:
b6:ec:44:46:93:61:01:4e:ff:9e:33:d8:e0:2a:50:4e:79:5b:
b1:65:2a:03:5c:96:de:59:fc:06:1b:7d:39:52:04:32:81:a2:
c0:e6:fe:04:9e:58:e0:a8:1c:b4:2a:f6:4a:e1:a7:4d:14:12:
12:47:bb:f4:5d:df:36:00:13:2f:47:1c:ee:7d:40:f3:25:2f:
0d:f9:6a:ad:a5:4d:2b:be:9d:cd:aa:fa:70:8e:43:fd:98:25:
2e:8c:59:a1:27:5a:d1:d0:c8:67:40:1c:39:e3:a4:eb:97:ae:
98:ed:80:1c:c0:e7:df:d2:e2:67:24:69:33:7c:95:69:8c:65:
db:29:a7:92:e3:24:c2:64:80:11:8e:f8:7a:90:a6:ba:bc:03:
fc:fd:db:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:21:26 2025 by rpki-client