Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/748a2LHN88wONpwbpFWq4xMldnY.roa
File: 748a2LHN88wONpwbpFWq4xMldnY.roa (raw, json)
Hash identifier: eDoYazA4tm3EizecQjyxeeqDwWD+d/nhbBUj2RIPHuc=
Subject key identifier: EF:8F:1A:D8:B1:CD:F3:CC:0E:36:9C:1B:A4:55:AA:E3:13:25:76:76
Certificate issuer: /CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Certificate serial: 019428254438AD43839EBD3151DE430E9D06
Authority key identifier: CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/748a2LHN88wONpwbpFWq4xMldnY.roa
Signing time: Thu 02 Jan 2025 17:51:58 +0000
ROA not before: Thu 02 Jan 2025 17:51:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12637
IP address blocks: 91.206.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:44:38:ad:43:83:9e:bd:31:51:de:43:0e:9d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Validity
Not Before: Jan 2 17:51:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef8f1ad8b1cdf3cc0e369c1ba455aae313257676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:7a:14:4f:10:19:17:d6:2e:0f:bc:d7:44:
0f:cb:6e:7f:a1:2d:9f:54:40:40:7d:02:50:ed:d9:
75:46:10:27:75:f3:76:6e:14:0f:3f:e5:6e:a2:d1:
18:ca:16:0d:a0:b7:56:04:56:c6:23:80:0a:df:d0:
55:19:e7:92:b9:21:06:19:2f:3e:d0:cb:3f:de:08:
58:d2:91:14:36:ed:d2:85:c1:3d:6b:d3:0a:20:27:
5d:55:b8:d7:6f:9f:38:9f:6a:47:48:40:3b:a1:2a:
d6:14:15:c3:b2:bf:8f:21:91:d5:53:5f:69:1e:38:
d5:2e:9c:d3:7d:e9:34:05:d1:88:6a:52:85:7a:5c:
86:33:de:99:75:b9:d0:4f:97:73:9e:9f:97:19:3b:
13:bc:43:cd:d7:fe:55:87:f5:ca:93:3b:49:5f:c0:
d1:6c:1a:9d:cd:cb:09:7e:41:c3:d3:e0:cb:ba:96:
4c:d6:28:90:3d:c1:62:8a:25:5d:cf:ad:cc:e6:1f:
f3:0a:5f:54:ec:94:38:71:89:68:ae:b5:c5:e7:ed:
f4:60:e6:0b:8c:df:f3:e6:e3:c9:57:a9:0e:fe:5b:
b3:e0:cd:e9:83:80:b3:ca:c7:66:6b:a1:c4:2f:a1:
c6:0e:d7:1d:a5:55:b3:1d:72:7a:06:a2:df:88:c9:
38:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8F:1A:D8:B1:CD:F3:CC:0E:36:9C:1B:A4:55:AA:E3:13:25:76:76
X509v3 Authority Key Identifier:
keyid:CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/748a2LHN88wONpwbpFWq4xMldnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.74.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:ac:75:7d:67:21:27:4a:76:ca:c0:a8:c7:b1:9d:ed:6b:55:
1f:47:f4:a4:92:6f:dd:fa:ee:34:e9:31:46:2d:3f:8f:0d:eb:
52:f0:8e:38:b5:44:d9:f9:84:7d:5c:15:aa:04:fc:95:c7:82:
b3:78:56:4f:aa:7d:4e:46:19:72:8b:03:15:d4:e8:c1:1f:e8:
68:db:42:3c:de:24:47:a5:79:db:26:11:6b:ab:17:c9:cc:db:
cb:fd:f4:fd:ff:60:68:a8:8b:97:89:fe:62:9b:27:51:a1:ee:
1c:63:c7:e3:68:bf:e7:26:25:27:e1:c4:bb:05:4d:35:3c:62:
5c:f6:eb:b4:0d:60:19:33:a7:0c:cb:e9:2e:13:45:b9:83:04:
16:74:20:5f:e0:16:08:39:1f:cb:83:9d:12:d6:c4:f9:31:e0:
9a:42:9c:4e:e4:5b:10:b7:3a:c4:18:fe:cd:21:15:cd:8b:0c:
e5:20:5d:cd:21:da:50:ee:84:96:55:a6:84:56:5f:33:1b:9f:
b6:04:db:93:82:2e:89:c8:41:9f:18:f0:13:31:60:c2:e8:3d:
21:f1:21:cd:2a:33:7c:b0:53:1a:65:ec:e6:b6:62:46:4a:57:
66:ca:8f:ba:07:41:6b:cb:d0:01:90:fb:19:55:60:6d:88:00:
cb:8c:8c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:03:28 2025 by rpki-client