Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/i4fVJ23Gnd_yPkuF6n29x3RRNtE.roa
File: i4fVJ23Gnd_yPkuF6n29x3RRNtE.roa (raw, json)
Hash identifier: b9PLNQP5kOz4vbwmAcKMWxEW3G7VlFSo/at2gpQ0dIE=
Subject key identifier: 8B:87:D5:27:6D:C6:9D:DF:F2:3E:4B:85:EA:7D:BD:C7:74:51:36:D1
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 019427B563926BBD83B26BFC1C38F3994436
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/i4fVJ23Gnd_yPkuF6n29x3RRNtE.roa
Signing time: Thu 02 Jan 2025 15:49:46 +0000
ROA not before: Thu 02 Jan 2025 15:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205953
IP address blocks: 212.64.219.0/24 maxlen: 24
212.64.221.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:63:92:6b:bd:83:b2:6b:fc:1c:38:f3:99:44:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: Jan 2 15:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b87d5276dc69ddff23e4b85ea7dbdc7745136d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:76:c3:f2:f2:d9:31:a4:f7:64:62:59:11:fe:
44:37:f7:2d:71:76:26:7d:fd:36:c1:50:74:7c:ba:
0d:3e:61:7c:04:ef:21:3a:e1:06:de:11:c1:3a:8b:
fb:c5:fb:b6:1f:15:7e:4f:c4:51:f3:01:f5:40:db:
e5:64:99:30:42:67:70:d9:58:dc:49:f0:a7:2f:5e:
de:fb:d8:0c:d6:08:fd:ab:68:49:3f:6c:96:ab:ad:
46:51:68:d6:18:d3:70:a8:13:b1:57:1b:46:d7:8e:
50:68:a4:e5:27:fa:2b:8d:03:e4:46:ae:c1:39:d4:
35:93:bb:fb:b1:10:66:05:f7:ad:8f:78:7b:55:c2:
37:44:53:aa:1a:81:de:2b:c6:97:44:52:76:07:67:
16:18:6e:9c:ef:4b:22:f4:1a:32:d6:70:d5:c3:60:
94:51:80:71:2b:73:e8:82:49:11:64:d5:5c:33:84:
1e:45:ad:21:4e:9a:04:3a:48:38:d7:3e:f2:61:6a:
c4:17:2f:1e:91:28:94:99:cb:0c:50:2e:10:9a:0a:
b9:93:57:f9:d5:c2:82:c2:96:b4:e8:51:63:0a:5f:
4b:e2:85:39:7c:4d:31:22:ff:9f:88:44:96:b7:c4:
23:d0:1d:34:13:99:56:bf:da:c6:90:a4:a7:d8:c0:
7e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:87:D5:27:6D:C6:9D:DF:F2:3E:4B:85:EA:7D:BD:C7:74:51:36:D1
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/i4fVJ23Gnd_yPkuF6n29x3RRNtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.64.219.0/24
212.64.221.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8d:43:0b:45:e2:e8:46:08:5d:85:1f:f6:cd:cf:9a:2a:2f:
8d:5f:b8:cd:89:fb:e7:85:db:e5:43:91:bc:6e:6e:42:0c:9b:
b0:c1:a2:0c:0f:fb:be:a9:fa:9f:1f:45:8a:ef:c9:85:43:36:
33:0e:b0:90:2a:b1:d6:5a:c2:d9:06:77:53:a1:fa:26:50:4c:
bd:85:62:0e:ec:5f:f4:a3:ab:0a:04:ce:b4:4c:1e:c9:78:63:
ea:54:ff:54:3b:14:bc:63:ed:c8:6a:f6:3e:a0:0e:ac:06:6b:
1f:9b:38:2b:dc:83:0b:22:a5:4b:2d:1f:0d:7e:f4:58:d3:f2:
56:c3:e4:16:fe:8d:f1:7b:7e:92:5e:4b:59:a3:48:c1:4a:40:
30:2e:68:d2:47:4b:0b:9c:ec:f8:96:3e:b2:db:56:85:16:4a:
45:48:d8:5e:b7:10:4e:7c:73:a3:0a:30:c6:bd:80:b3:aa:de:
4f:33:a6:27:b5:61:4a:b5:5c:99:2e:38:c7:25:a6:02:84:31:
c1:69:ef:10:57:79:f8:a6:fa:05:23:19:ca:c2:d5:60:a8:03:
c1:bf:e7:14:e4:ea:6e:02:22:9b:ae:b5:6c:b5:34:be:30:a8:
d3:db:aa:c4:99:4e:be:8a:43:25:8a:8a:4f:ca:39:b0:12:f1:
21:53:89:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:54:35 2025 by rpki-client