Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa
File: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (raw, json)
Hash identifier: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=
Subject key identifier: 8B:D4:97:DE:75:A8:E0:DC:EF:70:A8:05:77:2F:C5:6F:D5:34:D0:95
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 01942444908003F174A4D47FF4949B9B1001
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa
Signing time: Wed 01 Jan 2025 23:47:40 +0000
ROA not before: Wed 01 Jan 2025 23:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200253
IP address blocks: 94.240.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:90:80:03:f1:74:a4:d4:7f:f4:94:9b:9b:10:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bd497de75a8e0dcef70a805772fc56fd534d095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:b0:93:31:b2:4b:1e:97:10:b1:9c:67:84:
5e:41:e9:5c:16:89:f4:8b:61:62:40:56:76:55:cc:
38:2d:d6:c0:0a:3a:39:a6:da:46:5a:64:a0:d6:34:
a2:60:b3:ed:b8:f9:0f:64:52:74:83:18:ba:0a:e8:
18:3f:ea:f4:e2:39:18:d3:13:9d:3f:72:75:f5:a7:
0a:a4:a0:c4:a0:f6:2d:0b:98:04:f3:ce:5c:66:23:
39:b6:d2:6b:29:9a:69:fb:9e:2e:6a:86:3c:9d:60:
ab:9d:35:d0:2a:12:4d:59:58:24:f3:2e:2c:b9:5c:
95:b3:ce:74:39:e6:d4:98:7f:cd:2a:2b:bb:95:df:
f7:c0:b1:7f:4e:b6:18:62:93:d6:d2:08:25:9c:8f:
80:3b:eb:29:70:d9:0d:cd:d7:1a:52:a6:d4:d2:e7:
a1:c7:d2:a1:8a:24:33:5d:fa:4a:9b:f5:47:a6:70:
f7:81:52:01:fd:8c:bb:a5:df:4a:56:18:bd:3a:0a:
91:3e:eb:61:f8:24:a3:5a:46:cc:f5:ba:20:f2:5e:
cf:fd:eb:02:79:b3:69:70:b5:cd:a9:7e:45:7e:67:
62:9d:e2:dc:f1:22:18:2d:a5:c6:78:f8:91:b9:57:
49:4c:ea:5e:cd:1a:76:5a:84:0c:09:d1:7c:84:dd:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D4:97:DE:75:A8:E0:DC:EF:70:A8:05:77:2F:C5:6F:D5:34:D0:95
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.26.0/24
Signature Algorithm: sha256WithRSAEncryption
46:98:b8:8f:4c:0b:23:8f:7b:5f:31:3e:8b:79:25:2e:59:54:
85:e9:44:32:a6:ec:a8:5a:2d:f1:3b:a9:28:16:0c:ec:72:76:
87:9c:a6:49:f5:79:67:41:7f:8b:7c:d9:56:b0:53:11:b3:19:
b8:c6:49:eb:01:6b:ee:45:91:d6:74:5d:df:48:09:ab:0a:b0:
4d:1c:59:51:36:47:b4:d2:2c:00:36:d7:4d:ed:29:91:1d:7e:
c3:45:a4:e5:d7:ba:c4:c7:e4:b9:ad:ce:12:c5:56:d8:73:5d:
d9:6e:22:de:5d:34:d0:a5:70:3a:59:11:fc:ae:b6:14:c9:5a:
7d:8c:75:38:2c:02:a0:0e:74:96:da:d6:c7:64:f2:7c:7a:c4:
db:87:e8:4b:6c:cb:e2:c2:41:58:c9:bc:83:5d:d4:99:3a:c9:
4b:7d:ab:80:ef:b6:ea:dd:72:a6:79:07:5e:9a:86:2e:1e:4f:
c0:48:b6:74:f5:cb:7a:c2:ec:ee:ee:49:8a:09:93:85:54:8e:
20:9b:22:9a:c5:26:ab:1c:c9:9a:a2:35:8b:6d:6e:20:03:13:
6f:3b:97:c6:10:8b:14:98:ba:34:69:fb:3b:b4:39:5f:ca:7b:
27:2c:ca:30:ba:1e:e8:ec:8d:29:c9:10:8f:77:04:a3:d1:75:
88:3b:67:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:11 2025 by rpki-client