Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/J1daZ0b9QqDyeaqVSA6rdJN33m0.roa
File: J1daZ0b9QqDyeaqVSA6rdJN33m0.roa (raw, json)
Hash identifier: m2mGCz+ed0huZCoFC3yQqfv0T01L6xVokVoZSaSYXMo=
Subject key identifier: 27:57:5A:67:46:FD:42:A0:F2:79:AA:95:48:0E:AB:74:93:77:DE:6D
Certificate issuer: /CN=6d7a01bfd34bb13dfb7a535721dec401cd9312d9
Certificate serial: 019427B56B52B11AE365DFDCF676A3365634
Authority key identifier: 6D:7A:01:BF:D3:4B:B1:3D:FB:7A:53:57:21:DE:C4:01:CD:93:12:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXoBv9NLsT37elNXId7EAc2TEtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/J1daZ0b9QqDyeaqVSA6rdJN33m0.roa
Signing time: Thu 02 Jan 2025 15:49:48 +0000
ROA not before: Thu 02 Jan 2025 15:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34863
IP address blocks: 176.116.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXoBv9NLsT37elNXId7EAc2TEtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6b:52:b1:1a:e3:65:df:dc:f6:76:a3:36:56:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7a01bfd34bb13dfb7a535721dec401cd9312d9
Validity
Not Before: Jan 2 15:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27575a6746fd42a0f279aa95480eab749377de6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:35:26:0b:1b:d7:00:1c:02:fa:16:9b:c9:
18:a8:7b:9b:82:b8:f6:f5:5f:a2:3e:df:6c:6f:e5:
b7:71:f6:36:34:26:db:a7:99:06:80:31:90:31:66:
5d:85:f8:d0:36:f5:33:29:15:c7:a3:64:8f:3c:2b:
ee:9b:12:d2:8f:b3:19:32:ec:88:c2:8f:45:84:7d:
85:54:64:6c:dc:29:25:65:18:52:7f:5f:a1:85:79:
a7:56:ba:28:6c:74:90:23:d8:69:d4:66:44:b4:1e:
8a:69:6e:0d:15:13:0c:65:c3:0a:61:87:a6:75:52:
5a:ee:0f:0c:9b:05:1a:f5:c5:fc:32:17:da:c9:f4:
9a:a1:fc:91:b1:7c:6f:a2:e2:6f:3d:d8:64:b5:d4:
9a:89:0e:73:00:f8:9f:db:ae:35:d3:9d:39:61:ea:
34:04:21:76:12:f0:1f:95:5a:48:7e:ca:74:f3:ab:
33:99:2d:0e:86:56:c2:67:73:a5:8d:32:fe:67:5a:
2a:6a:20:34:ec:48:99:cb:37:b8:f3:34:97:70:11:
7c:1e:81:73:15:91:67:3d:91:b8:39:fa:8f:3f:cc:
c9:2b:0c:85:3b:eb:50:83:0e:69:93:9a:4b:d0:03:
36:95:fe:f3:2f:f3:ee:40:7c:a5:c2:ca:0c:63:04:
74:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:57:5A:67:46:FD:42:A0:F2:79:AA:95:48:0E:AB:74:93:77:DE:6D
X509v3 Authority Key Identifier:
keyid:6D:7A:01:BF:D3:4B:B1:3D:FB:7A:53:57:21:DE:C4:01:CD:93:12:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXoBv9NLsT37elNXId7EAc2TEtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/J1daZ0b9QqDyeaqVSA6rdJN33m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.26.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c0:cf:61:d2:20:6f:f1:9f:57:34:a4:41:e3:1e:2b:8a:4d:
72:90:f7:80:c7:ee:4f:bc:33:d1:4a:b4:dd:4e:e9:ae:44:c5:
cd:94:b3:7e:4f:96:bf:ce:64:c0:ab:9e:a3:be:e6:e9:cd:9b:
44:59:b9:d8:c4:5c:d4:74:93:6a:a2:c0:b2:b8:4f:63:27:f8:
8e:12:91:1f:22:7f:8f:14:1a:1b:b2:cb:de:2a:50:61:06:4e:
c2:65:63:7d:e4:72:96:fe:fe:6c:c3:50:e7:3b:d2:c1:2d:4c:
f7:bc:d6:a7:07:a0:fb:a0:e8:43:23:79:41:4f:5d:7b:22:05:
23:53:70:69:5c:59:9a:76:11:e3:73:30:8e:27:85:53:15:b6:
bf:0f:92:b4:d1:1b:68:30:9c:cd:9a:83:21:9b:cc:3d:58:5c:
1e:85:26:84:fe:fd:07:3d:52:41:11:da:d8:2f:cd:61:8e:77:
b7:a0:71:a9:e9:98:64:75:7b:0c:36:a3:b5:10:d6:21:e9:99:
0f:0b:51:33:c7:e4:d2:35:6c:13:2c:7c:16:48:bf:10:df:de:
02:bf:27:0b:7f:1a:b3:07:e7:2e:e2:6b:4a:1d:27:8b:6c:05:
9a:9e:69:f8:a3:22:9e:77:fc:cf:71:95:53:b1:05:47:32:ea:
5a:dc:79:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:58 2025 by rpki-client