Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/1-242YNLxFtHiZKrZjOTCTUI_hX4.roa
File: 1-242YNLxFtHiZKrZjOTCTUI_hX4.roa (raw, json)
Hash identifier: Zl/0hNDNG1rQGa8HsGyytZ4/ZO9Krs9kfipHSTu8iZs=
Subject key identifier: FB:6E:36:60:D2:F1:16:D1:E2:64:AA:D9:8C:E4:C2:4D:42:3F:85:7E
Certificate issuer: /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Certificate serial: 01942444CAF23564635A21D7FD1087563813
Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/1-242YNLxFtHiZKrZjOTCTUI_hX4.roa
Signing time: Wed 01 Jan 2025 23:47:55 +0000
ROA not before: Wed 01 Jan 2025 23:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43495
IP address blocks: 91.197.88.0/22 maxlen: 22
194.4.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ca:f2:35:64:63:5a:21:d7:fd:10:87:56:38:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Validity
Not Before: Jan 1 23:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb6e3660d2f116d1e264aad98ce4c24d423f857e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:71:e9:d9:6d:9c:58:04:4b:28:28:4b:79:
d5:fc:69:74:08:e2:37:3d:df:4c:df:f0:90:d2:30:
26:e8:c2:b1:cb:ec:0d:f8:67:aa:12:6a:3c:c8:b6:
6b:25:2c:b7:1b:0c:9e:9a:b5:8a:2a:c9:12:e7:3b:
cd:cc:da:94:4d:f1:5d:94:da:66:9b:ce:01:30:e4:
f3:f9:b8:2e:85:4d:ed:f4:79:3f:28:67:7a:9c:95:
58:ab:b6:26:8f:63:c1:4c:a3:5d:7f:61:2c:d7:2e:
93:17:a4:63:d7:47:bf:dd:68:65:da:3b:61:2d:09:
42:88:d1:d2:af:47:0b:39:bd:a2:3e:3b:d2:2d:67:
77:ec:40:1d:46:a5:bb:16:d6:05:0c:be:7f:a7:95:
26:de:d9:34:18:cc:f0:b0:0e:1b:56:88:e6:de:0f:
1e:32:49:d0:27:c1:37:33:2c:f9:11:cc:32:f3:78:
e3:37:ec:19:1a:86:6b:23:fb:6c:8d:9b:c1:31:af:
f9:e9:e7:9b:96:60:5d:4b:b2:3d:df:41:db:b8:e3:
e1:07:f0:d5:5f:98:2f:c3:be:f5:01:3b:b8:70:c0:
88:ff:c5:be:2f:84:8d:a0:93:97:78:77:c1:a8:41:
40:02:fc:3c:3a:08:cc:a8:ce:57:46:8f:90:bf:dd:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6E:36:60:D2:F1:16:D1:E2:64:AA:D9:8C:E4:C2:4D:42:3F:85:7E
X509v3 Authority Key Identifier:
keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/1-242YNLxFtHiZKrZjOTCTUI_hX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.88.0/22
194.4.60.0/22
Signature Algorithm: sha256WithRSAEncryption
35:2a:1a:40:1b:a4:b7:21:be:05:ed:1c:a3:e5:d2:53:d7:97:
d4:91:01:c5:0b:24:28:46:86:5c:5c:42:fb:ff:c2:50:5a:1a:
39:1e:2b:30:36:0d:c4:5f:de:1b:98:f8:d8:da:84:5c:5a:01:
31:4a:f4:ab:de:01:66:13:f8:4a:74:cc:fa:65:af:f6:69:d7:
a6:00:8e:49:eb:be:57:b7:79:29:63:42:92:cc:95:55:f5:f8:
aa:a6:88:15:4f:ad:9d:7d:05:30:86:75:36:ab:86:44:40:7c:
66:ac:63:ea:9e:9c:df:54:3f:94:05:c7:1b:fb:10:56:39:e4:
18:be:69:74:74:25:b6:5b:23:93:29:5d:3e:00:04:fb:9b:e2:
a3:ea:6c:be:83:6b:87:0f:3a:59:de:db:5e:e1:9a:1f:24:2b:
2a:8a:5e:52:b7:3c:09:89:97:0a:56:a2:d7:9b:51:0f:7e:be:
71:8d:d2:5c:2d:c8:06:23:98:50:6b:fa:ba:65:18:fc:64:e8:
3f:65:a4:9b:39:c6:be:68:31:b1:66:96:eb:02:d3:cf:b4:69:
0e:e4:5e:50:35:5c:af:4c:a7:02:49:6f:29:86:7b:84:9b:99:
1b:f5:8a:98:7c:fe:e7:7d:35:67:12:23:86:0e:7f:82:44:b4:
5c:9d:24:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:03:55 2025 by rpki-client