Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/SJp3f39U8JpmGyOGPYf4ey38gKw.roa
File: SJp3f39U8JpmGyOGPYf4ey38gKw.roa (raw, json)
Hash identifier: AzJPuHNFE77wKcqOaeYwNfNn2l81OV83K0EY7MEvPyA=
Subject key identifier: 48:9A:77:7F:7F:54:F0:9A:66:1B:23:86:3D:87:F8:7B:2D:FC:80:AC
Certificate issuer: /CN=67800aba40639bf38d1eb6c9157b994f19323b13
Certificate serial: 019426D9E734181D95D3B96F69C90011A5FF
Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/SJp3f39U8JpmGyOGPYf4ey38gKw.roa
Signing time: Thu 02 Jan 2025 11:50:02 +0000
ROA not before: Thu 02 Jan 2025 11:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51512
IP address blocks: 176.119.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e7:34:18:1d:95:d3:b9:6f:69:c9:00:11:a5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13
Validity
Not Before: Jan 2 11:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=489a777f7f54f09a661b23863d87f87b2dfc80ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:51:da:1c:e5:0f:34:56:5f:ed:2b:67:3a:
61:ba:c4:81:ad:a3:00:26:92:96:00:27:29:3f:5a:
2e:73:45:30:36:4f:3c:53:14:f4:61:69:11:35:3b:
ad:e5:f1:4f:1e:ee:c5:b1:70:0c:79:aa:94:43:20:
ca:f0:04:3d:5d:71:88:62:95:bb:c5:3d:42:49:38:
b5:69:77:c4:7d:b6:50:63:36:f7:52:f9:37:c8:4e:
a9:15:c1:78:a9:75:5d:ef:18:2f:e3:a7:98:e4:63:
65:8a:f1:e5:c4:62:e8:fa:2e:d2:1f:25:0a:11:91:
0c:88:a8:09:1f:4e:1a:86:0a:ff:6a:f5:f7:e4:d3:
4b:ac:40:a5:21:24:e7:52:c5:04:67:91:eb:24:aa:
5b:68:b1:ee:8a:71:21:bd:0e:f3:ff:92:f8:b7:0b:
1d:6e:5b:94:fa:10:a3:32:23:c3:e9:1b:ee:05:42:
c2:a8:a9:01:2d:0d:07:8a:43:b1:70:9e:6a:85:f9:
f0:34:18:2a:d7:8c:e7:12:07:b8:47:53:25:a0:47:
b7:b4:08:30:3a:2e:b2:cd:1d:79:31:14:3e:a2:ce:
69:b3:aa:51:ac:14:cd:9d:f3:96:54:7a:89:9a:5b:
06:0a:dd:d6:56:fa:c2:99:5a:64:64:54:aa:d8:8a:
cd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9A:77:7F:7F:54:F0:9A:66:1B:23:86:3D:87:F8:7B:2D:FC:80:AC
X509v3 Authority Key Identifier:
keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/SJp3f39U8JpmGyOGPYf4ey38gKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.193.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:96:89:63:d7:5e:c7:f5:1a:11:8e:b5:0a:ef:1c:69:5c:70:
5d:44:30:6b:a6:ae:25:c8:2d:19:ac:cd:47:65:a9:61:ee:c2:
8f:56:49:ae:fc:94:9c:6d:31:c3:8a:c3:c7:34:00:8c:ad:67:
84:db:50:6f:c7:86:f5:5f:f1:c1:c0:11:69:ae:c0:57:78:01:
9b:a8:36:1d:6e:83:26:fe:d6:b3:47:b0:0c:a3:45:ad:c7:f7:
3d:7f:1c:33:30:66:15:3b:59:aa:51:18:c6:e6:02:7f:42:42:
85:5c:fd:38:87:d1:26:94:18:6c:c8:0f:4c:af:b6:94:60:2d:
42:9c:65:77:16:22:dd:32:69:5f:dc:fa:46:ca:ff:8f:61:7f:
c9:32:b7:21:22:ab:fd:ed:50:ac:9a:66:c3:c7:13:61:55:8d:
2c:bc:e4:16:b3:96:d3:15:39:d7:a6:65:b3:4f:65:6e:63:5b:
30:39:09:73:3f:30:08:34:17:3a:fa:f4:79:ba:b2:d0:b2:3b:
93:a2:a7:aa:5e:52:bd:c8:e0:34:ca:6a:fe:22:c4:eb:d7:72:
02:7b:cc:3f:cb:9e:6c:ff:6d:78:b3:56:a2:75:a2:0f:2a:54:
00:79:68:0a:a7:36:d9:03:2f:8b:2f:ab:39:8d:0f:1e:55:9d:
e4:d2:ca:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:21 2025 by rpki-client