Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/DI-iAR6VcaXkclKeNlv8zwfg4I8.roa
File: DI-iAR6VcaXkclKeNlv8zwfg4I8.roa (raw, json)
Hash identifier: 7RbSmDzflIv6kaLB8a13DBMXZQgCnrqtbJpmgK4MYoU=
Subject key identifier: 0C:8F:A2:01:1E:95:71:A5:E4:72:52:9E:36:5B:FC:CF:07:E0:E0:8F
Certificate issuer: /CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Certificate serial: 0194236A3FDB6F4AEF306892B80A616B84A7
Authority key identifier: E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/DI-iAR6VcaXkclKeNlv8zwfg4I8.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44410
IP address blocks: 78.111.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3f:db:6f:4a:ef:30:68:92:b8:0a:61:6b:84:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c8fa2011e9571a5e472529e365bfccf07e0e08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:66:28:e9:83:c2:45:c0:cd:e3:6e:b4:3a:
61:65:80:7d:bb:f4:67:b5:dd:2c:63:e7:00:05:5b:
fb:9a:cb:53:f4:23:b3:17:2d:80:a6:38:c0:61:cb:
ca:31:c9:75:81:d2:52:f4:8a:0f:a5:39:50:03:a7:
0f:ad:b3:52:41:59:ee:ae:ef:6f:f2:8e:e5:45:62:
32:29:96:1a:7b:67:b1:85:7b:61:58:83:55:bf:4d:
47:8a:96:6b:c8:87:0e:c4:52:0a:7e:5d:e9:3e:13:
bd:a0:ea:57:ae:da:6b:be:f9:78:c3:b4:5a:95:a5:
42:a0:3e:bd:2a:f1:46:97:9d:83:40:4b:e3:34:ac:
6b:91:56:4c:af:fb:60:c1:df:8d:7b:61:93:d5:11:
03:6a:12:ee:f1:3b:72:a3:b3:13:d0:15:04:a3:c0:
e0:f4:54:c4:86:76:b8:cf:ee:5e:1c:bf:66:f7:3a:
46:98:cf:49:84:98:73:b5:1b:b3:30:ba:3c:6b:00:
12:6b:95:04:1d:3b:ad:c4:b1:c3:96:22:54:5a:45:
2f:25:5f:de:a7:ac:5a:8f:9a:47:45:26:43:69:04:
7b:b6:b0:89:35:91:f4:21:31:fb:f1:20:19:c4:4e:
a2:8f:1c:3d:59:91:d5:32:8e:f2:2d:66:ee:a0:d9:
d0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8F:A2:01:1E:95:71:A5:E4:72:52:9E:36:5B:FC:CF:07:E0:E0:8F
X509v3 Authority Key Identifier:
keyid:E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/DI-iAR6VcaXkclKeNlv8zwfg4I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.7.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f6:61:01:70:7f:41:45:17:bb:22:b6:45:d3:48:a8:f2:89:
07:a0:78:51:17:8f:0f:f6:83:87:1c:df:89:39:a3:7e:89:f9:
da:12:35:4e:3c:f2:88:d3:43:e5:a7:af:93:82:81:d7:bb:c5:
71:40:3d:49:94:e9:5e:56:0c:2b:2b:f0:18:ab:4b:4b:a0:54:
c4:98:d8:f1:7a:7a:1d:09:1d:d7:c6:0e:13:f0:14:c9:35:64:
46:06:d9:22:94:42:22:e1:77:5a:fc:83:f4:bd:d1:72:cf:cd:
69:e3:b2:54:07:f4:93:82:54:5a:23:48:8c:bd:d3:f2:1e:8d:
2c:69:21:7e:fd:53:8a:39:60:04:30:d9:f3:4f:23:bd:fb:08:
97:4b:2e:a0:87:e8:c1:b6:ab:8c:c5:8a:be:9d:65:60:ff:ba:
43:e8:07:78:6a:37:a9:ad:90:4f:27:0a:ca:2a:a1:41:d9:52:
b8:54:1f:03:01:9b:da:68:5b:66:c2:5c:3b:eb:b1:63:30:0c:
f3:ae:60:dc:5f:0a:42:4d:0b:ed:0c:d8:c4:c4:49:99:0e:90:
10:f5:f1:21:50:a6:c1:ed:30:5d:7f:60:b9:b5:16:ff:82:f6:
09:a7:8e:11:95:ce:bc:4c:86:70:96:dc:74:50:c8:ef:08:9a:
d8:84:77:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 15:47:51 2025 by rpki-client