Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/AbT3htyDEl5yF3u5Q8YiHkq-VPo.roa
File: AbT3htyDEl5yF3u5Q8YiHkq-VPo.roa (raw, json)
Hash identifier: I+WRaSD6/q0A0IB1xrlT+ST9KI1uezSwJcEv8edCWJ8=
Subject key identifier: 01:B4:F7:86:DC:83:12:5E:72:17:7B:B9:43:C6:22:1E:4A:BE:54:FA
Certificate issuer: /CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Certificate serial: 01942068613A6576BBAD4E5EE819D41D5589
Authority key identifier: F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/AbT3htyDEl5yF3u5Q8YiHkq-VPo.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203201
IP address blocks: 212.78.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:61:3a:65:76:bb:ad:4e:5e:e8:19:d4:1d:55:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01b4f786dc83125e72177bb943c6221e4abe54fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e2:a3:7f:2c:33:d1:57:9a:c0:d9:a5:8a:21:
05:ed:5f:44:5b:f3:66:b6:01:e9:02:63:cd:78:5d:
af:68:7c:60:48:69:ef:15:43:df:de:00:f6:a0:d7:
40:df:01:7e:e6:e0:2d:c2:53:b6:5c:36:de:62:83:
76:31:aa:8c:a4:b2:24:de:20:06:0f:41:9c:1d:d2:
ed:be:2f:a3:b3:17:a0:e4:95:05:fc:4f:11:86:54:
a4:8f:15:d4:ec:63:75:60:26:af:6c:2c:e1:ab:e2:
57:bd:a8:61:88:36:58:b9:4f:d7:1f:6d:86:80:26:
d8:92:7a:c9:05:61:f5:da:95:63:1a:64:05:2a:b8:
5a:97:59:15:2b:5d:54:de:d8:af:ab:f5:39:00:0c:
a6:02:64:f5:03:28:d5:ef:d5:9f:3b:27:27:ca:c7:
5e:98:3b:7c:ed:ae:eb:d3:40:33:d7:fc:4c:d8:93:
33:6a:0e:e4:8d:1c:5b:9b:0f:c6:b7:37:4d:25:e3:
7e:7c:f0:76:38:5e:ec:e9:72:53:df:bd:d5:22:53:
2c:3e:ef:31:c1:8e:9b:ca:97:0c:8d:7d:ce:d0:de:
ae:44:36:df:7f:e9:b6:4b:d7:c1:92:97:9f:85:f0:
c6:62:81:1f:ea:0f:4e:3c:42:28:84:d6:1d:cb:3a:
68:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B4:F7:86:DC:83:12:5E:72:17:7B:B9:43:C6:22:1E:4A:BE:54:FA
X509v3 Authority Key Identifier:
keyid:F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/AbT3htyDEl5yF3u5Q8YiHkq-VPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.78.1.0/24
Signature Algorithm: sha256WithRSAEncryption
01:15:77:23:4d:1c:01:70:da:36:a3:15:e1:0d:2a:50:11:86:
72:d6:63:23:87:c1:10:20:35:7b:e9:29:a6:87:5e:64:fa:26:
1a:c8:5b:09:bb:dc:f0:ce:a2:08:03:b1:51:6a:1d:8e:7d:08:
2a:55:94:8f:67:0d:42:f4:61:2d:6d:e7:d7:b3:80:f5:ad:1b:
ab:1b:d9:37:d3:52:15:96:b4:a1:1a:6d:b7:e9:f8:b0:47:93:
74:b5:37:fe:6e:2c:7c:06:cd:ac:99:8e:47:b9:4e:a9:87:85:
ce:eb:93:0f:5f:96:df:6a:c6:a9:20:fd:63:05:8d:fd:42:d6:
10:e8:05:bb:a0:89:51:2b:e0:49:fd:f2:42:79:a8:d7:45:7c:
b2:d0:23:4f:e5:de:32:62:32:35:f4:84:a7:74:f1:a8:0d:85:
0a:1f:54:78:95:ab:3a:ef:5a:52:e9:23:d6:19:bc:7c:0e:8d:
c6:6c:4c:c3:50:e7:37:92:05:d0:fd:2d:3a:b4:e9:38:ec:b9:
2e:16:10:4a:ca:aa:91:e6:6e:3b:b5:c0:c2:4c:4f:f4:0a:7c:
f9:95:3a:b5:26:72:e6:46:c4:94:6d:17:ab:a7:c1:e2:b4:d6:
da:66:dd:c7:4a:f1:5c:98:fb:1e:6c:6a:c2:95:fb:a0:32:a2:
19:48:d1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:05:29 2025 by rpki-client