Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/StSv8ki3Hfy1kt0rrrfueNG7XQE.roa
File: StSv8ki3Hfy1kt0rrrfueNG7XQE.roa (raw, json)
Hash identifier: n5KuwRYffa0Ye2MfTHYi4Ou9cVdpBRC7za9HK1Mdc+U=
Subject key identifier: 4A:D4:AF:F2:48:B7:1D:FC:B5:92:DD:2B:AE:B7:EE:78:D1:BB:5D:01
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0194244563EE483C2DF2084E3A736036DD06
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/StSv8ki3Hfy1kt0rrrfueNG7XQE.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50816
IP address blocks: 195.76.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 11:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:63:ee:48:3c:2d:f2:08:4e:3a:73:60:36:dd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ad4aff248b71dfcb592dd2baeb7ee78d1bb5d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:5e:79:03:c3:7e:26:42:f8:b0:72:2d:06:
54:ff:9d:c1:ff:77:40:71:29:ce:87:16:33:c2:a7:
ed:94:de:e2:5b:2a:7e:62:1c:85:0b:4f:59:fd:92:
ea:21:2b:58:ca:7b:f8:9b:b8:2a:29:e1:c1:3f:28:
72:35:b9:fa:bb:33:58:af:92:10:7e:23:df:fe:10:
3d:90:6b:d8:b3:fa:2e:78:af:b2:49:22:cf:3e:cf:
98:09:5f:d8:aa:ad:e8:7d:c3:4e:61:b9:1e:1b:af:
cd:37:ba:20:91:c2:b5:10:b0:22:91:d8:9f:e1:e3:
5d:af:7e:35:37:14:12:29:60:01:03:98:58:4f:56:
3f:0d:6b:62:86:a6:ac:50:7c:a7:52:39:59:bc:65:
c1:51:b4:d4:6b:23:7a:83:1e:90:d9:62:64:cd:cb:
2d:61:0b:51:49:da:21:63:5a:f2:34:61:93:eb:6e:
26:32:f7:67:0e:a4:57:8e:af:f9:23:e3:4b:99:9e:
a2:86:3f:a1:54:31:21:ff:82:5e:d5:a0:1c:63:7f:
df:d8:c3:9e:8c:92:78:44:1b:6c:a6:0d:3a:12:68:
71:36:39:29:1b:43:d5:2b:8d:3d:a8:e1:13:ca:80:
99:de:04:ca:f1:69:84:dd:0c:70:17:ae:22:73:3e:
1d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D4:AF:F2:48:B7:1D:FC:B5:92:DD:2B:AE:B7:EE:78:D1:BB:5D:01
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/StSv8ki3Hfy1kt0rrrfueNG7XQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.76.31.0/24
Signature Algorithm: sha256WithRSAEncryption
97:7c:a7:c5:03:9b:8e:72:7e:46:14:b4:5b:63:11:f6:f1:23:
66:91:ad:79:6b:92:de:a7:ca:22:01:1a:66:69:03:89:0e:9d:
8c:d2:c4:1d:be:1c:6b:06:25:4a:eb:b3:3a:77:d5:b8:a0:04:
4e:9c:cc:ce:07:e7:c1:cb:aa:56:b2:0e:10:a9:b1:63:bf:3e:
13:13:a4:a4:cf:f7:06:9e:97:93:f7:34:68:97:10:06:4a:65:
22:24:d2:b1:89:b2:e5:29:51:46:31:f5:f3:e5:54:a9:4e:a4:
fa:1c:de:ee:b3:c3:08:6a:f1:0b:69:55:31:02:07:aa:cf:8c:
9b:3c:e9:59:61:4a:3d:29:36:6a:fb:92:62:98:e2:4b:35:6b:
61:2c:c9:3c:b1:06:1d:4d:15:2c:99:03:19:df:1c:79:1a:af:
c7:ed:54:a2:6e:41:a3:8b:60:27:98:3f:7a:9f:28:db:16:36:
6f:49:08:36:60:62:62:f2:44:77:17:37:cb:ab:34:41:b0:00:
a3:ed:1d:6e:69:6e:f3:82:ba:ff:5a:c1:72:f8:5b:cc:47:d4:
bd:2c:5c:5c:07:c2:3c:e0:1c:0d:87:42:f3:31:44:a3:b1:3d:
d8:90:5b:ba:33:b8:10:87:d4:1d:1e:c8:85:68:d4:8a:36:6d:
18:c2:e5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:56:19 2025 by rpki-client