Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/c4TxJnX6SULpOIlEbtsYVcPO_1E.roa
File: c4TxJnX6SULpOIlEbtsYVcPO_1E.roa (raw, json)
Hash identifier: mprESb6/2u0lim3u1bjN8fuUSWrOypjztHMO2wyLys0=
Subject key identifier: 73:84:F1:26:75:FA:49:42:E9:38:89:44:6E:DB:18:55:C3:CE:FF:51
Certificate issuer: /CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Certificate serial: 01941FFA768C8F3D4189DE0BA4C3A25FCB26
Authority key identifier: AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/c4TxJnX6SULpOIlEbtsYVcPO_1E.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204016
IP address blocks: 217.18.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:76:8c:8f:3d:41:89:de:0b:a4:c3:a2:5f:cb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7384f12675fa4942e93889446edb1855c3ceff51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:7c:3a:87:58:10:0e:c5:6c:a8:68:e7:e1:
dd:5c:84:ef:93:b6:59:74:ce:72:c2:90:df:7c:87:
0c:34:13:8c:58:c4:70:17:fb:27:ce:fb:54:23:b2:
61:24:cd:6e:5c:60:8d:52:9f:66:31:ef:ee:36:9f:
a8:fe:46:1c:0f:9a:96:c4:0a:88:ef:1a:a8:22:35:
b9:98:a0:87:22:d0:be:3b:ac:74:78:0b:2a:56:f5:
cf:2c:b2:e7:b4:16:05:2f:2e:6a:42:6d:6d:89:3f:
dd:53:2f:0a:32:f3:b7:7f:5c:dc:b7:2a:91:fa:34:
4f:f7:d7:99:f9:b7:36:76:42:3d:61:56:3f:8a:82:
02:f8:01:1d:0e:54:30:66:d9:c6:4e:2c:b1:3d:cf:
8d:5a:5c:5a:29:bb:16:b1:63:81:57:80:4e:e3:b1:
d4:3b:fd:77:70:e7:a9:76:fc:f7:e5:36:eb:3a:8b:
9d:bb:54:a2:7c:b4:20:83:58:3c:19:5c:b9:b3:8e:
a3:41:66:33:f4:ef:db:03:a2:b4:14:c4:56:80:04:
e4:02:d9:90:a1:f1:10:76:2b:60:29:a5:c3:97:b7:
30:f3:8e:1f:43:0c:48:cc:8a:4e:5c:11:7b:1d:bd:
51:f6:7f:58:05:26:78:4b:96:0d:3d:54:b1:a4:ab:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:84:F1:26:75:FA:49:42:E9:38:89:44:6E:DB:18:55:C3:CE:FF:51
X509v3 Authority Key Identifier:
keyid:AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/c4TxJnX6SULpOIlEbtsYVcPO_1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.88.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:b5:fe:71:e7:e4:6d:bf:9c:42:74:6b:5e:b5:cb:eb:f7:ab:
94:90:12:77:0c:f5:7f:d2:7a:a4:ab:1d:bb:98:40:d6:d3:41:
7e:cc:95:63:3a:d3:6d:90:2a:da:6c:5c:f0:1f:4e:30:02:3e:
d1:e4:c7:bd:5b:a3:e3:be:b4:76:e0:ca:ce:72:e1:c6:1a:bc:
19:97:49:15:6f:76:58:fd:f0:96:63:d1:2a:2d:bd:16:90:8d:
30:0b:01:6a:20:46:40:8b:e8:e2:55:6b:7b:87:49:70:d1:f9:
3a:ed:f0:a0:cd:04:5f:0f:40:34:f4:5d:23:f0:a2:ae:84:02:
5c:9f:55:af:84:f5:37:ad:74:d5:76:1b:98:2b:3c:29:04:f1:
53:7b:78:2d:84:ac:e2:3d:bd:69:5b:f3:b5:07:54:c3:08:0b:
4b:e8:5c:39:ae:e4:6d:07:ee:27:2b:03:2d:e1:c1:bb:6b:b1:
aa:97:e0:f4:25:3c:1f:e5:d9:1d:83:c2:6c:cb:99:9f:49:94:
9d:86:9f:d9:6c:bf:b4:1d:8c:09:e4:28:1a:75:fe:c0:a5:65:
91:ae:ba:c0:16:e7:08:20:b7:4c:0d:f9:eb:0e:6a:22:e8:9f:
42:d6:cb:8a:4b:7d:42:72:26:ff:72:af:fb:06:f5:12:1b:87:
c4:0d:c4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:20:35 2025 by rpki-client