Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1yprYF3TZ1qhBsqceY-mpsSRpwU.roa
File: 1yprYF3TZ1qhBsqceY-mpsSRpwU.roa (raw, json)
Hash identifier: Gf77y45F8CEbqqUuQjbiLqy/3ktbVWNC+Gq5q0s4Fuk=
Subject key identifier: D7:2A:6B:60:5D:D3:67:5A:A1:06:CA:9C:79:8F:A6:A6:C4:91:A7:05
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA5530919A7D168F2F6F4D349D92E5
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1yprYF3TZ1qhBsqceY-mpsSRpwU.roa
Signing time: Wed 01 Jan 2025 03:48:07 +0000
ROA not before: Wed 01 Jan 2025 03:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60976
IP address blocks: 81.12.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:55:30:91:9a:7d:16:8f:2f:6f:4d:34:9d:92:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d72a6b605dd3675aa106ca9c798fa6a6c491a705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:d7:ea:a1:36:91:8c:ed:b4:db:af:6b:a2:
86:bf:68:1c:a9:f6:6a:5f:d5:6c:7f:8e:23:4e:24:
6c:db:20:a1:f1:98:4c:38:5c:7e:0f:93:4b:a1:c9:
17:c9:32:b4:71:5c:3c:a1:af:dc:45:d8:2d:11:5b:
f3:43:73:b8:5e:51:31:57:38:d2:ae:ae:1b:53:57:
b3:60:74:6d:94:46:c0:cc:8d:11:a1:7b:f3:d5:f4:
62:27:43:27:ab:b0:22:07:f9:1e:ef:36:93:b4:4d:
53:9c:bb:6e:b4:41:27:c1:3e:72:69:bd:15:b9:13:
a7:dd:e8:82:de:f1:ba:1a:57:3e:b6:95:35:24:cf:
c0:b0:01:11:1d:a2:3d:92:75:4e:01:40:6a:7c:f0:
da:cf:cc:3e:84:19:a1:bb:a1:12:7d:ac:05:42:52:
4d:63:d8:0d:2e:7d:26:24:8b:06:03:3b:3d:1a:e2:
63:41:21:61:c4:24:77:0c:ac:f2:3a:9b:88:6d:bd:
de:7f:99:9d:e4:1a:f5:40:a7:6d:4d:30:64:b4:0f:
44:34:68:b0:8c:c1:69:88:88:2c:0f:64:32:69:87:
db:4b:85:58:ff:16:e9:4f:2b:ce:69:99:f5:b7:68:
13:81:30:91:0f:7a:3c:b8:9a:1a:2c:2c:a4:ef:b0:
98:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2A:6B:60:5D:D3:67:5A:A1:06:CA:9C:79:8F:A6:A6:C4:91:A7:05
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1yprYF3TZ1qhBsqceY-mpsSRpwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.25.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:9c:f7:58:92:fb:51:07:92:a1:ee:03:c6:b9:bc:75:7b:42:
02:da:37:4a:6a:63:1e:9c:fd:97:00:69:c0:77:de:bc:c8:0a:
ed:cd:80:5c:50:04:01:2f:81:29:cf:e1:11:74:4d:24:17:c9:
d6:ad:28:99:31:72:22:8b:fe:0b:75:96:3f:bd:c0:bf:0a:d7:
02:ca:97:37:2f:a3:75:09:bb:b7:cf:e0:4d:c9:93:1f:c6:50:
94:49:20:c3:1e:f4:b4:82:6a:35:c6:b7:d5:0e:68:5f:32:19:
c9:14:ba:23:17:b4:3c:38:a8:c0:75:4f:5d:d5:9d:32:df:db:
01:55:f8:98:ea:49:05:bb:09:55:69:43:f3:d3:cc:63:e3:8d:
da:5a:94:47:bb:82:41:35:a1:5e:9b:7f:f3:9e:16:c2:f3:03:
b0:b5:14:6a:7e:db:4d:77:76:9c:79:e5:ec:f4:f3:8f:5f:b2:
67:63:23:8b:8d:04:4f:f5:99:eb:79:fc:f7:11:7c:eb:6c:45:
47:76:dd:20:d2:7a:be:0d:64:82:8a:1d:cd:3d:c7:50:79:6f:
a7:d4:a6:45:81:3d:f7:cc:0e:98:b9:08:74:f8:ed:ac:b8:26:
a1:c3:0f:5b:39:fc:ae:5e:dd:ad:64:4d:cf:af:a8:1d:ce:cc:
10:e1:e4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:27 2025 by rpki-client