Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/x58nBW842pZhjhJLCJx9GkCSrU4.roa
File: x58nBW842pZhjhJLCJx9GkCSrU4.roa (raw, json)
Hash identifier: yI29HuKDYhaUmkGPwd2s/nIFspAoGLTPT9OHHAMuvaY=
Subject key identifier: C7:9F:27:05:6F:38:DA:96:61:8E:12:4B:08:9C:7D:1A:40:92:AD:4E
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0194228E473F5FEAF8D684B3A4C09F32B80D
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/x58nBW842pZhjhJLCJx9GkCSrU4.roa
Signing time: Wed 01 Jan 2025 15:48:57 +0000
ROA not before: Wed 01 Jan 2025 15:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205733
IP address blocks: 213.145.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:47:3f:5f:ea:f8:d6:84:b3:a4:c0:9f:32:b8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jan 1 15:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c79f27056f38da96618e124b089c7d1a4092ad4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b4:30:ea:8d:2c:ee:d5:a0:ce:a4:24:ba:6d:
87:f3:b4:b5:00:e9:13:b7:2b:da:d0:84:57:de:c4:
50:df:a3:15:29:79:2c:18:04:00:e6:6f:3c:69:03:
bc:77:b3:ac:25:ab:a2:ad:9b:e9:cc:20:39:40:ce:
ca:46:83:e4:28:a2:ad:b0:3c:9e:ac:5d:d7:e9:5b:
eb:1b:c0:72:a1:c4:ae:ff:c7:24:6f:04:39:83:fc:
17:25:4c:b7:1f:11:ac:b7:2d:08:62:97:64:47:c2:
2a:b0:d0:f4:a0:f1:20:8c:3d:a5:95:6a:87:b9:0a:
8b:39:6c:31:5b:a7:42:5a:12:06:7a:26:55:35:78:
c5:e7:ce:72:cc:5d:e8:a0:85:be:0c:36:d7:f4:16:
cf:3e:6e:9d:b9:12:41:96:10:cb:f2:7c:23:2e:2a:
19:f0:0b:d1:3e:f3:d0:6f:9c:b3:7b:84:c5:fd:a8:
fe:87:f6:34:e0:4b:24:5d:6a:72:b9:63:61:28:4f:
1a:fa:e3:12:b4:9c:80:a2:a6:aa:a4:8b:e8:b4:da:
e1:a6:ec:09:95:16:f6:ef:7c:a1:eb:fd:45:a5:28:
a9:3c:c6:5e:88:24:9b:8e:e7:09:bf:8f:3c:ab:41:
44:d8:9e:71:42:4c:8d:fc:b5:61:9c:7c:40:6a:b4:
93:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9F:27:05:6F:38:DA:96:61:8E:12:4B:08:9C:7D:1A:40:92:AD:4E
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/x58nBW842pZhjhJLCJx9GkCSrU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.84.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:4b:66:2e:cd:dd:1f:d7:aa:be:8a:60:79:ee:a3:d6:4f:f2:
a1:63:e2:3e:a2:87:fb:2c:60:01:f0:8e:99:e7:7b:63:ce:5b:
66:34:9f:ba:ef:5b:8d:35:67:97:3b:c5:0f:3b:59:e2:4f:3a:
9c:89:a2:f0:0c:b2:95:43:c1:13:64:a4:80:c7:7d:0d:1d:2f:
ec:68:84:53:35:18:79:ef:6b:96:2a:76:26:7c:06:f0:cb:5e:
fc:bd:c4:c9:8f:2b:0f:cb:f5:b9:07:01:15:5e:cc:57:fe:0b:
3d:9f:c4:28:e2:c0:8b:99:de:f3:c2:74:13:a2:27:46:42:12:
98:45:ba:b4:bf:1a:7c:ca:4a:67:81:c3:35:f4:11:eb:3d:a1:
d5:86:c3:cc:07:b6:28:73:3f:e6:04:b8:77:49:59:19:30:09:
da:02:8c:5b:2c:3f:3e:fa:53:15:7b:41:04:f4:49:f7:16:69:
00:c7:5d:93:44:de:34:70:b7:d7:dc:00:2a:5e:5b:2d:7e:a8:
e3:77:ac:70:80:2e:4b:b3:75:aa:3b:12:72:3e:fd:a7:1b:f8:
ab:bf:ce:c5:29:1c:f7:2f:a9:24:2c:3e:e4:b1:a9:8c:0b:4a:
6c:37:66:61:ef:9a:79:2d:43:1c:14:fd:9b:d4:73:cf:5e:62:
b5:13:58:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:02:15 2025 by rpki-client