Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1-W8fXv0jttdWKlzJAXVxxYtpRug.roa
File: 1-W8fXv0jttdWKlzJAXVxxYtpRug.roa (raw, json)
Hash identifier: gpIh638+Fcd1tAei50b0+8GVpPlev9wrd/g4gdASdjg=
Subject key identifier: F9:6F:1F:5E:FD:23:B6:D7:56:2A:5C:C9:01:75:71:C5:8B:69:46:E8
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01953D51731EB2F15E6B2BA50F74DA67ADAD
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1-W8fXv0jttdWKlzJAXVxxYtpRug.roa
Signing time: Tue 25 Feb 2025 13:35:02 +0000
ROA not before: Tue 25 Feb 2025 13:35:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31715
IP address blocks: 109.72.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:51:73:1e:b2:f1:5e:6b:2b:a5:0f:74:da:67:ad:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Feb 25 13:35:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f96f1f5efd23b6d7562a5cc9017571c58b6946e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:92:f4:59:3a:a4:4e:df:ab:12:93:f7:ff:
be:2d:39:76:d7:d5:43:c9:c4:3d:44:6c:ff:52:de:
28:16:af:47:f9:80:b9:30:22:a7:87:91:a0:9a:86:
1a:9b:cf:cd:b3:14:c0:6e:d8:50:28:0f:c3:34:21:
b6:45:67:04:b6:a7:df:ed:af:b1:83:73:65:d8:b6:
39:81:9e:19:04:1a:d8:a1:34:49:22:10:fc:11:8f:
82:1a:cb:da:42:ab:f8:17:7e:4a:13:85:89:11:b1:
ae:63:51:0c:bf:de:45:86:85:58:b7:0a:76:62:e4:
05:64:80:03:70:c3:5b:65:c3:4b:2c:ac:56:35:bc:
d8:ce:32:3c:d8:b5:22:01:d5:67:32:d1:39:b4:23:
69:7f:41:67:59:a4:63:10:4e:e1:06:d4:80:0e:1f:
33:f1:57:01:01:d8:5f:c3:30:3e:1f:64:a4:d3:b6:
98:c0:6c:75:57:e3:4f:5c:a9:7b:18:78:2f:00:2e:
56:30:c0:61:76:15:28:19:9c:9d:a9:97:17:46:88:
dd:81:23:87:d4:85:da:17:9b:28:53:27:71:7f:a3:
b3:42:d4:c2:40:5d:7b:8e:87:16:2a:bd:93:80:2a:
52:7f:6b:16:a6:64:f6:b2:ff:af:7a:ca:68:37:63:
0d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6F:1F:5E:FD:23:B6:D7:56:2A:5C:C9:01:75:71:C5:8B:69:46:E8
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1-W8fXv0jttdWKlzJAXVxxYtpRug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ac:be:15:75:84:2d:63:89:99:c5:33:75:4d:f8:34:16:f5:
cc:1d:fb:aa:f2:c5:c2:33:7f:53:b7:c4:1b:91:86:c1:b5:04:
03:db:42:0c:fe:67:e4:f3:6f:28:90:08:2b:98:05:b3:8a:92:
d1:4e:f4:15:cb:f4:33:74:c5:7a:de:4b:44:e0:b1:24:77:04:
cb:0a:fe:ca:ca:79:e7:d4:6c:de:2b:11:68:aa:36:ec:54:5e:
5f:e5:99:62:67:d8:1e:6e:d3:b8:c0:41:92:40:8e:74:21:73:
44:c3:53:0a:22:45:fa:2e:fa:88:6a:6d:d7:34:1c:31:84:21:
19:ca:75:dc:ba:1f:e8:6d:af:45:09:3f:c7:70:b1:3e:38:ac:
bc:3d:9f:7e:66:88:d7:2c:16:93:96:df:b3:21:00:1c:60:90:
89:b0:e7:20:c1:e5:5d:86:54:19:c9:2a:12:e5:c0:ee:c2:6c:
79:fc:48:bc:84:72:48:2f:2e:bc:27:24:41:63:ec:e4:86:4b:
33:10:a4:97:60:21:e8:67:fc:a0:f9:12:94:38:c1:c8:12:9c:
55:31:07:bc:8e:ff:93:68:a4:5e:d9:e6:db:27:1e:d3:18:c5:
62:1c:15:f3:ef:65:5f:94:f7:71:85:a1:ee:47:b9:b2:5a:ba:
fb:71:fa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:47:31 2025 by rpki-client