Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/aFRiQRnDB9TXgWRRIMtNARzxVn8.roa
File: aFRiQRnDB9TXgWRRIMtNARzxVn8.roa (raw, json)
Hash identifier: hWE8vTVKPZar03SzLtgbIuwLQ05FffNM309Sx4njq4c=
Subject key identifier: 68:54:62:41:19:C3:07:D4:D7:81:64:51:20:CB:4D:01:1C:F1:56:7F
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01942827F164A029A4F463632761B137F014
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/aFRiQRnDB9TXgWRRIMtNARzxVn8.roa
Signing time: Thu 02 Jan 2025 17:54:53 +0000
ROA not before: Thu 02 Jan 2025 17:54:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 37.44.212.0/24 maxlen: 24
171.22.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:f1:64:a0:29:a4:f4:63:63:27:61:b1:37:f0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 17:54:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6854624119c307d4d781645120cb4d011cf1567f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:4c:f4:ce:08:26:13:a6:e8:51:60:c8:c5:
50:65:b8:b0:23:8b:f1:ba:da:e7:26:48:0d:ed:9b:
63:26:51:7a:ff:9e:a9:30:77:08:4c:f8:d9:66:ec:
47:ba:7f:85:18:55:04:20:54:6e:d5:df:8a:69:28:
bc:13:bd:80:c6:1b:bb:7f:1c:c8:b7:9d:f6:17:cf:
b6:8d:e8:dd:4f:da:0a:e8:c8:4c:ee:08:7d:77:ea:
82:e3:e5:3d:dc:dd:71:2f:04:d2:0f:ed:b1:85:9b:
ff:a3:a8:6d:cb:0d:b9:60:5b:3c:6c:62:db:d2:5a:
98:7c:2d:04:47:a9:94:61:9a:e1:6e:35:80:f5:30:
87:2a:b6:ec:ca:f4:92:fb:89:b1:b1:08:c7:4c:35:
55:6e:53:64:a0:40:c6:cc:72:2f:83:f1:2f:b1:d1:
de:50:f5:75:8a:59:c5:68:57:de:80:17:5f:7e:f7:
e2:21:51:2d:5a:0f:88:fa:f5:31:58:82:23:63:f3:
ad:98:5d:36:e1:23:fb:be:6a:d2:88:ef:30:18:ca:
cb:f4:f1:6c:76:75:87:34:25:8f:b4:10:31:cf:5c:
c3:9b:1a:0f:85:2c:5b:a2:36:bc:e7:fa:98:8f:1d:
ba:42:cc:09:c8:b5:4e:64:69:8a:9b:f2:3a:84:db:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:54:62:41:19:C3:07:D4:D7:81:64:51:20:CB:4D:01:1C:F1:56:7F
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/aFRiQRnDB9TXgWRRIMtNARzxVn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.212.0/24
171.22.220.0/22
Signature Algorithm: sha256WithRSAEncryption
11:ec:a8:08:1d:52:9b:38:95:eb:81:89:db:67:63:a8:29:46:
4a:73:68:4d:2b:da:59:d4:da:62:5d:b3:f9:08:6a:ef:02:a0:
4d:26:8b:f1:ce:76:3b:3d:ac:db:64:a6:44:79:66:d3:ed:f2:
88:df:ff:02:bf:be:5f:7b:70:08:8c:d9:6b:cd:f7:26:fa:5e:
b4:4c:0f:bf:01:95:6c:2a:ee:c0:d6:d7:63:4c:43:a9:ba:90:
f5:a1:d8:b5:a4:d5:17:23:9a:45:f6:37:01:48:ad:17:2b:fe:
65:b8:55:0c:b0:4c:8f:50:18:61:b6:54:15:8f:98:ff:a4:f9:
c7:2a:ca:56:86:42:3a:2c:4d:53:0d:35:4f:b8:af:ef:92:75:
4c:43:0e:72:11:4c:97:80:a6:31:2a:6e:26:0b:4c:7e:78:ac:
cf:dd:f7:0b:d7:a1:65:ae:f6:44:6f:54:26:bb:49:7c:50:d2:
17:f4:8a:b3:93:5c:12:14:85:6d:66:78:86:85:28:97:00:e6:
17:b1:69:36:0c:d0:ae:f6:d6:73:12:76:5e:70:a6:b8:48:e8:
8f:36:b3:bc:fb:ce:d4:41:08:e4:69:c9:17:c8:00:d4:6f:3d:
31:b1:fa:8c:2c:54:f4:fe:ac:f1:10:8f:9b:75:fc:7a:3d:15:
f5:1c:a1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:33:59 2025 by rpki-client