Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/dBRyMZmE2MJby6jWlOxwaQP0Xaw.roa
File: dBRyMZmE2MJby6jWlOxwaQP0Xaw.roa (raw, json)
Hash identifier: n5MzTBEIB9PdMNKBfe5+OAUwctGrct8tICmAF1a6F9E=
Subject key identifier: 74:14:72:31:99:84:D8:C2:5B:CB:A8:D6:94:EC:70:69:03:F4:5D:AC
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 0194258F01557931F8FE8BED960D7EEBB2C9
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/dBRyMZmE2MJby6jWlOxwaQP0Xaw.roa
Signing time: Thu 02 Jan 2025 05:48:36 +0000
ROA not before: Thu 02 Jan 2025 05:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12085
IP address blocks: 176.121.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:01:55:79:31:f8:fe:8b:ed:96:0d:7e:eb:b2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 2 05:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=741472319984d8c25bcba8d694ec706903f45dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:4b:bb:8f:71:60:ba:bc:b4:aa:51:d4:6f:
bc:44:11:70:03:e8:2c:16:9e:f8:dc:c6:d6:d2:a1:
ad:89:1d:25:98:94:80:95:4e:ec:1f:26:eb:53:f8:
5c:76:1a:3a:33:45:b7:46:cb:c3:29:b1:8f:b9:2d:
6f:a9:a8:f5:38:0f:3e:5c:49:9e:c7:43:a1:10:01:
19:0f:71:59:aa:70:1d:b4:4e:71:9d:23:af:82:12:
29:cd:d9:74:11:ae:2f:32:fc:d3:ac:9a:3d:67:4e:
8d:cc:5b:09:ac:c7:95:1a:c5:88:f3:1b:9f:b5:f2:
28:89:6a:45:90:9a:58:3a:64:8f:f6:c8:f2:e5:8f:
8f:14:36:f7:f9:66:9d:cf:f3:9b:05:76:8b:3e:da:
62:d5:8a:a4:19:64:ae:a8:62:c9:8e:72:1c:f8:0e:
64:0a:f9:03:90:82:39:5f:ec:3b:c0:02:be:9d:1f:
16:63:68:f2:68:ae:75:fc:29:9a:ac:fb:aa:a0:f2:
39:f0:d7:7d:11:d9:80:7f:6b:12:04:e8:a7:66:57:
2b:fa:3b:7d:75:9f:ae:eb:6e:cb:be:39:35:c9:fa:
4c:ad:ce:a7:e3:2c:b6:12:2a:43:f1:35:29:6d:84:
88:9b:3c:e6:51:e6:1e:11:b2:75:f4:3e:12:fc:37:
3d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:14:72:31:99:84:D8:C2:5B:CB:A8:D6:94:EC:70:69:03:F4:5D:AC
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/dBRyMZmE2MJby6jWlOxwaQP0Xaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.88.0/24
Signature Algorithm: sha256WithRSAEncryption
97:cc:7a:b3:f3:38:88:0b:b8:01:39:82:75:5c:da:d4:53:c8:
86:31:62:61:b7:6e:f9:c3:29:b5:e7:5b:5a:b2:01:d1:78:a1:
bb:bd:67:4c:62:1b:85:93:55:7b:d9:70:ba:fb:05:d9:54:cc:
6a:8c:17:88:31:d6:84:86:5c:8c:bd:5f:ee:89:36:29:7f:c0:
6c:87:a3:27:85:f3:39:03:ff:a7:72:d9:10:33:6b:db:f6:c0:
9b:ac:b6:01:a1:94:5a:6e:2b:20:85:06:38:98:e0:5e:f6:a7:
32:ba:02:d7:fd:bf:41:e0:84:5d:9b:39:08:8f:f9:63:f9:9f:
a6:ff:b2:dd:05:9d:8b:b6:9d:e3:14:9a:c8:14:54:2f:63:53:
9c:41:81:e9:65:7c:66:3f:9f:22:cb:8d:aa:eb:ee:bb:4b:da:
fc:3b:dd:26:59:e5:95:4e:82:62:ba:91:61:bf:8a:50:48:47:
d2:e5:f7:69:30:1c:8f:80:4d:1b:1d:b6:e5:8f:68:a9:5f:67:
d2:51:f0:87:54:cd:6a:e5:bf:06:79:aa:05:c1:da:f8:23:f3:
b5:8e:bd:85:fd:42:7c:6d:17:42:14:dd:3c:3c:f2:1a:3b:95:
59:c5:7c:e7:9a:aa:a5:2e:2b:04:44:c6:d0:84:9b:c0:e1:4f:
dd:e2:90:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:13 2025 by rpki-client