Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/AXwZAnm-q-uz-TuLH82U1PfJCTQ.roa
File: AXwZAnm-q-uz-TuLH82U1PfJCTQ.roa (raw, json)
Hash identifier: i+86gZYuPIx3tcfB37bC1ZulEjPAHchweVaCUVj7IVs=
Subject key identifier: 01:7C:19:02:79:BE:AB:EB:B3:F9:3B:8B:1F:CD:94:D4:F7:C9:09:34
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64C23D24D5032B0E0F085DFFE92219
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/AXwZAnm-q-uz-TuLH82U1PfJCTQ.roa
Signing time: Thu 09 Jan 2025 09:28:24 +0000
ROA not before: Thu 09 Jan 2025 09:28:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207172
IP address blocks: 78.128.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:c2:3d:24:d5:03:2b:0e:0f:08:5d:ff:e9:22:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=017c190279beabebb3f93b8b1fcd94d4f7c90934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:89:f4:96:3b:a2:18:ca:28:67:f1:d1:77:cc:
7b:b5:9c:bb:ff:14:46:45:07:d2:2e:1a:53:52:b5:
cc:9a:4e:64:5a:5b:65:e7:96:a3:ce:7e:72:83:6e:
4d:57:f6:85:e3:4c:64:71:31:49:a9:cd:ae:e2:d8:
c7:96:2b:60:d9:25:ab:b2:d4:09:2e:a7:7b:23:14:
e8:7c:e6:fe:ef:26:21:48:43:e4:0e:69:56:c9:82:
21:35:4c:92:5e:81:f6:16:31:90:c4:d5:fc:27:08:
2d:66:49:f9:f1:57:c7:91:d9:14:ed:0b:0b:2b:1e:
0a:0e:16:8e:b2:02:ea:be:ca:6a:3f:fd:47:ee:23:
d6:df:06:47:c6:9b:35:a0:19:85:70:62:55:7a:38:
9f:63:cb:8e:18:c4:db:b4:ff:e6:af:a5:c5:0f:fe:
4f:9f:d1:6f:d1:83:54:6e:3e:a5:2e:b2:77:1d:29:
0d:97:03:b5:05:9f:e0:78:f0:d4:d9:ef:9c:09:9d:
41:23:c7:c3:ed:3e:24:d2:40:12:be:38:17:e6:6c:
06:e8:dc:a8:a2:8e:9a:14:b6:dd:e8:bd:9f:3c:22:
03:4b:cb:e5:f8:14:38:2e:e0:31:e7:13:b4:12:64:
15:19:3d:9b:1e:26:20:05:be:cb:d0:3d:47:87:48:
99:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7C:19:02:79:BE:AB:EB:B3:F9:3B:8B:1F:CD:94:D4:F7:C9:09:34
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/AXwZAnm-q-uz-TuLH82U1PfJCTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.73.0/24
Signature Algorithm: sha256WithRSAEncryption
27:7f:5c:7a:b5:58:2e:d4:fe:e5:8f:bc:51:94:d4:3b:24:cf:
c3:a1:e6:d9:9b:cc:8c:99:16:67:51:8c:52:40:0b:42:8a:18:
77:d1:be:3f:d0:25:d9:3a:e0:35:3f:0b:61:08:00:d5:b0:cd:
dd:5e:6d:3e:9c:c7:23:a7:41:d8:88:42:8a:71:ba:60:29:b5:
38:9c:72:ca:50:d4:03:c4:fc:49:a4:69:c6:8d:ad:af:4b:2f:
48:86:70:03:38:5f:ab:c5:08:e9:4e:7b:75:69:3a:7c:5d:8b:
e6:eb:3d:4d:34:75:28:94:a1:15:29:24:7a:13:9b:8f:01:35:
fb:1a:7a:ff:79:64:97:cf:4f:4e:c2:25:04:c6:fc:f4:27:f3:
59:9b:cd:64:5b:db:84:73:e0:80:b0:e4:f3:69:22:1d:51:91:
45:8d:54:cc:b4:70:86:ff:5c:e9:a8:f2:3e:4f:42:9b:35:05:
cc:fc:a2:1f:6b:5f:7f:69:40:6e:63:79:ac:2b:19:9d:81:7e:
62:27:78:61:75:bd:01:ed:47:96:ac:91:9b:3e:cf:e1:d9:e2:
d1:f4:fe:87:80:03:4c:43:ee:8c:3e:75:cc:96:24:52:2b:eb:
30:9b:f3:53:98:20:f8:da:93:2a:3e:09:fa:56:bb:23:6f:ab:
c7:2c:f8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:38 2025 by rpki-client