Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/RA2Fj5XNpBEGqwtLV7JPBiXXhZ0.roa
File: RA2Fj5XNpBEGqwtLV7JPBiXXhZ0.roa (raw, json)
Hash identifier: BNo8QMwK2CvmHYQFxYebo4KjKZTrRv5gh0bqfDREWd8=
Subject key identifier: 44:0D:85:8F:95:CD:A4:11:06:AB:0B:4B:57:B2:4F:06:25:D7:85:9D
Certificate issuer: /CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Certificate serial: 019421B2469BFBFFBC0627AC83079461D9E0
Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/RA2Fj5XNpBEGqwtLV7JPBiXXhZ0.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41884
IP address blocks: 195.200.72.0/23 maxlen: 23
2001:67c:1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:46:9b:fb:ff:bc:06:27:ac:83:07:94:61:d9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=440d858f95cda41106ab0b4b57b24f0625d7859d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:ee:5d:0f:67:b1:8a:3d:d6:93:12:48:86:
ef:bb:73:d9:ec:c2:c8:87:9e:9c:47:4d:68:ce:31:
33:ab:73:77:02:98:c6:1b:df:9c:76:df:ac:51:be:
07:71:9e:fa:90:03:de:e2:56:dc:a6:43:cc:0a:55:
19:60:28:6d:08:4d:e5:d5:65:3f:48:09:37:e4:54:
e3:4e:4d:ed:86:52:42:b8:a8:a0:24:a1:19:c4:ba:
73:2a:79:21:d6:72:18:e9:f7:93:25:c3:11:59:94:
8a:0c:41:61:a4:9b:28:d9:66:8e:4d:2e:70:43:ef:
e2:13:82:09:28:3c:90:5d:55:cd:7b:44:cd:87:59:
6e:1b:c6:7b:18:d2:07:c8:f5:43:45:19:ec:bc:62:
34:bf:a9:33:b9:de:33:08:f0:71:62:b8:ff:86:1d:
b4:57:c8:7f:5f:aa:90:f5:2d:66:fa:c6:40:14:44:
35:17:48:1e:d3:f7:ff:c6:f8:95:44:f3:66:1e:42:
c7:f2:78:29:87:9d:1c:04:af:7b:8c:c8:49:06:31:
8c:ad:17:f1:8c:94:b3:82:8f:b5:d6:5f:d6:fe:07:
38:29:c9:50:07:1e:72:9e:c7:ec:97:07:e9:f3:c2:
12:e6:cf:23:75:af:4e:03:57:45:1c:00:1d:d1:f0:
c7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0D:85:8F:95:CD:A4:11:06:AB:0B:4B:57:B2:4F:06:25:D7:85:9D
X509v3 Authority Key Identifier:
keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/RA2Fj5XNpBEGqwtLV7JPBiXXhZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.72.0/23
IPv6:
2001:67c:1c::/48
Signature Algorithm: sha256WithRSAEncryption
ab:06:7e:f6:79:d7:64:34:91:2b:80:47:73:7c:9a:e1:90:e8:
1b:1f:c5:91:41:34:e6:a4:5b:05:55:de:35:32:89:b3:f9:3c:
66:b5:e3:27:77:00:8a:22:fa:b9:a4:ad:ae:65:d7:70:04:9a:
64:b0:64:b3:2a:ff:3e:88:77:9e:36:c6:88:e6:55:0f:7f:ff:
41:b6:75:22:8d:50:2d:34:44:96:45:d7:a8:cf:5f:df:6c:ca:
84:fc:42:29:67:e6:83:9c:3e:83:e8:39:2b:62:7c:39:3c:df:
92:bf:97:e7:7e:9c:33:37:44:45:69:8f:c1:ee:10:28:0d:19:
25:9e:3b:ac:1d:7d:f9:ed:1d:48:04:d8:00:f2:14:10:6c:e9:
c5:f9:eb:b2:0e:b6:90:f3:76:8b:ac:7d:f9:32:79:2f:aa:cd:
8d:40:3c:5c:ce:3f:ed:91:d1:f6:da:df:87:4e:66:f2:8c:32:
01:77:84:3a:64:62:db:8d:53:e0:60:7e:eb:f1:1c:01:4a:21:
7c:a1:99:1a:d4:a1:e4:dc:43:24:2e:c4:04:3c:85:1b:8d:e2:
e4:82:6c:be:cd:78:98:a4:6a:04:16:71:5d:86:04:c6:e1:2a:
cf:9e:42:81:18:2a:7f:a1:4e:fa:79:ba:36:25:9f:18:29:cf:
2b:2c:58:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:16:04 2025 by rpki-client