Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/AffVDnLnSLh0V7EinGng8G5nPjQ.roa
File: AffVDnLnSLh0V7EinGng8G5nPjQ.roa (raw, json)
Hash identifier: hYx/BpJDcyTVNDkPP1YvXND6zbbHVisFIC82719FbiA=
Subject key identifier: 01:F7:D5:0E:72:E7:48:B8:74:57:B1:22:9C:69:E0:F0:6E:67:3E:34
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 019422FB335586652DE893A521398D6BF386
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/AffVDnLnSLh0V7EinGng8G5nPjQ.roa
Signing time: Wed 01 Jan 2025 17:47:55 +0000
ROA not before: Wed 01 Jan 2025 17:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8866
IP address blocks: 94.26.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:33:55:86:65:2d:e8:93:a5:21:39:8d:6b:f3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jan 1 17:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01f7d50e72e748b87457b1229c69e0f06e673e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:7e:dd:01:9c:d9:a5:d3:3f:6e:21:55:b9:
42:e8:7a:fb:46:e9:31:ed:80:af:65:aa:43:11:39:
08:2c:15:47:99:57:14:2a:94:a3:0b:27:d0:ce:9a:
91:6b:d1:65:7d:2d:37:6e:a8:54:f6:b3:f5:4e:0a:
72:f9:b8:29:d3:a5:78:2a:de:40:32:4f:4c:1a:38:
a4:af:b6:a4:81:37:d1:e2:6c:6a:4f:ed:d9:20:5a:
7c:83:f0:1c:57:da:59:15:32:de:0d:fc:5d:a9:b6:
27:f7:a3:3a:63:15:7c:ca:5c:b0:f3:1c:54:cb:8d:
ad:e2:2b:ca:b2:2b:9d:0d:1d:ca:73:23:83:5f:e5:
ed:e7:73:3d:7a:34:62:32:1c:e9:01:d1:6a:ff:08:
c6:24:54:b9:c5:66:ec:2e:61:03:46:04:48:0e:b0:
65:f8:e2:a1:c8:e5:7c:a8:75:17:1b:2d:8f:51:b8:
47:67:76:54:35:73:0f:fc:d5:85:5d:4c:3e:63:0a:
32:23:ed:1f:8b:b6:77:b6:63:23:ca:f4:b2:42:cc:
d8:ed:20:1e:0b:e7:83:07:be:bc:a5:99:a0:fd:e5:
86:ea:a2:64:55:4a:d2:d5:05:3d:7e:39:52:ca:2c:
01:a5:3a:18:91:b0:a4:16:51:5c:49:e9:04:0b:bf:
e4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F7:D5:0E:72:E7:48:B8:74:57:B1:22:9C:69:E0:F0:6E:67:3E:34
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/AffVDnLnSLh0V7EinGng8G5nPjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.40.0/24
Signature Algorithm: sha256WithRSAEncryption
50:36:16:cc:e2:bb:81:32:3c:8b:e0:76:44:9d:17:eb:ed:1b:
af:e6:ce:6d:74:3e:cb:9e:f1:28:a4:a4:67:11:61:ef:ea:85:
b5:ef:c0:33:7b:60:82:98:7b:2b:58:c8:10:79:9f:a8:bc:01:
9e:18:05:37:be:39:d0:2a:9b:4c:00:e2:92:07:f0:60:e3:e6:
86:31:c3:4a:5c:3a:c2:02:e4:fb:37:e7:bb:e9:84:50:47:f0:
33:d6:72:9e:59:06:d3:76:f5:7a:cc:f6:d7:ad:e5:e5:bb:8a:
81:ea:d5:10:37:2b:40:74:67:24:2d:80:9d:ac:f0:15:fc:fb:
05:3c:66:72:1c:d9:48:e0:22:31:5a:08:25:d4:42:3c:59:1a:
8c:88:1b:9d:5f:ba:ca:d2:20:e2:37:30:3f:95:e2:26:21:5b:
df:05:56:c3:7e:5e:a9:ef:b2:73:0b:e6:ab:2c:d6:25:c9:d5:
a1:58:e7:00:e7:fa:6c:d2:de:a5:2e:89:71:54:6c:f9:e8:3d:
9d:91:de:3b:b4:27:1c:d9:f1:09:f9:5b:d4:48:dc:c4:8f:c7:
07:6a:9c:5c:c2:a9:4d:94:fa:3f:3a:15:17:5a:fd:8a:4a:a1:
e3:21:d1:9c:a0:35:21:65:2d:3a:57:e3:fd:c8:56:ef:de:70:
37:42:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:21:39 2025 by rpki-client