Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/12AV02WzatVTC7uOxlQeaKEJtqA.roa
File: 12AV02WzatVTC7uOxlQeaKEJtqA.roa (raw, json)
Hash identifier: 7hl8YaRyf0cdSgyKBQo2CnhX6la19soTodVA7PjTEdQ=
Subject key identifier: D7:60:15:D3:65:B3:6A:D5:53:0B:BB:8E:C6:54:1E:68:A1:09:B6:A0
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 01941FFAB754463C84BB3E8E218A91FF120E
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/12AV02WzatVTC7uOxlQeaKEJtqA.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24631
IP address blocks: 109.95.64.0/24 maxlen: 24
109.95.66.0/24 maxlen: 24
109.95.67.0/24 maxlen: 24
109.95.69.0/24 maxlen: 24
109.95.70.0/24 maxlen: 24
109.95.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b7:54:46:3c:84:bb:3e:8e:21:8a:91:ff:12:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d76015d365b36ad5530bbb8ec6541e68a109b6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:7a:fc:da:83:d8:71:aa:38:50:9e:d6:29:
f7:d2:4b:df:e5:ef:66:97:3b:af:78:f1:6b:67:d6:
52:14:4d:ea:ee:53:96:67:98:ad:c6:47:ea:a2:a0:
a3:9e:51:ec:98:b3:12:c7:4a:5a:96:ea:5e:6a:01:
ec:ab:d0:7a:78:ae:c2:91:4e:1d:f3:5c:a0:be:bb:
12:bb:d9:b0:9c:ca:c5:e1:c6:8f:06:0b:66:6d:fe:
57:86:32:78:bd:6f:c8:26:d8:8f:fc:ec:8b:60:c7:
6a:27:6c:d2:21:b3:b3:70:10:7c:72:6c:0e:d9:3f:
42:bd:39:b3:a0:92:4f:5e:dd:43:db:aa:f6:08:3d:
c4:e7:c8:fc:87:f9:fb:bc:f5:22:d9:e5:f1:b3:a8:
3a:c6:d6:c3:aa:cd:16:d2:49:d2:4c:bf:1d:40:dd:
93:4e:f9:b8:5c:84:80:83:d1:e3:0b:67:f3:5e:c1:
d3:05:60:5f:ec:a1:2f:21:ba:08:a3:4b:85:02:1f:
df:b6:f2:8a:20:50:bf:b5:eb:64:cf:0e:22:e9:81:
9a:02:de:9d:07:41:3a:3f:48:71:52:1a:c1:51:6e:
b0:8f:46:1d:7e:a0:9d:86:e8:c6:81:8c:5b:05:99:
ab:9e:de:79:3f:3e:f5:d3:1c:cd:9a:fb:c8:fc:6a:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:60:15:D3:65:B3:6A:D5:53:0B:BB:8E:C6:54:1E:68:A1:09:B6:A0
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/12AV02WzatVTC7uOxlQeaKEJtqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.64.0/24
109.95.66.0/23
109.95.69.0-109.95.71.255
Signature Algorithm: sha256WithRSAEncryption
28:15:2d:e3:ad:77:2e:df:90:01:6f:57:16:44:67:27:16:df:
97:42:de:ce:aa:5a:bc:c8:a1:1e:55:f0:b8:9b:ad:6e:f5:f5:
1a:4c:a2:ac:43:09:fc:7e:fb:81:84:6a:a2:71:ce:33:b4:43:
48:16:3e:6e:75:99:ea:0a:37:b3:e8:5a:da:39:cf:e8:56:7e:
85:f3:d6:6d:ec:71:be:45:bd:33:f2:87:bd:5d:c3:e4:9c:2c:
e9:65:4c:47:33:d9:3b:0e:dc:4a:67:47:f3:da:72:8b:8d:60:
f7:65:94:0d:db:c9:af:88:e4:71:8f:cb:8a:63:21:b0:c5:47:
82:3a:00:cd:2d:0c:fe:82:a6:d8:b3:c7:8f:4d:f0:87:14:90:
82:a0:bf:a7:7b:ad:5a:15:25:26:cd:47:3c:c7:18:09:5e:d4:
81:96:3b:66:72:0a:a3:c0:dc:53:9f:3c:79:d5:d3:45:70:8d:
aa:bf:b1:f1:b9:91:32:f4:84:54:6e:a1:8c:8a:3a:32:f9:70:
56:ee:c5:24:a1:aa:7b:e4:1b:a8:47:c1:ab:be:76:47:a0:d7:
ba:c2:b7:01:47:ed:bd:f5:55:d4:50:76:8d:cb:e0:fc:01:8e:
3d:7e:99:3d:5e:89:02:64:ec:9f:11:2d:8b:42:cd:7a:ce:d8:
82:42:5f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:47:51 2025 by rpki-client