Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/1StjY6ciJznhPyYxQBCtbtGwaQQ.roa
File: 1StjY6ciJznhPyYxQBCtbtGwaQQ.roa (raw, json)
Hash identifier: KYR87feBQd9Q/2I+eempgJ/F1tZKbS1g203PDf9yV98=
Subject key identifier: D5:2B:63:63:A7:22:27:39:E1:3F:26:31:40:10:AD:6E:D1:B0:69:04
Certificate issuer: /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial: 01942826F33D499491C3F52A66265D7E6F40
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/1StjY6ciJznhPyYxQBCtbtGwaQQ.roa
Signing time: Thu 02 Jan 2025 17:53:48 +0000
ROA not before: Thu 02 Jan 2025 17:53:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209593
IP address blocks: 141.98.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:f3:3d:49:94:91:c3:f5:2a:66:26:5d:7e:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
Validity
Not Before: Jan 2 17:53:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d52b6363a7222739e13f26314010ad6ed1b06904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:38:cd:ab:fd:44:c8:1f:26:8f:bc:ed:1d:
c1:83:d8:0d:da:eb:f9:46:c8:32:80:83:a7:91:f8:
87:95:9d:d9:3e:d4:44:30:cf:8a:ee:64:c1:46:99:
78:2d:9f:9c:c6:ae:cb:ab:02:42:e3:9a:91:a4:2e:
17:22:63:c5:c4:87:17:f1:f2:2e:7b:98:4c:ee:84:
a7:57:5d:9c:1d:c4:ca:1a:59:42:c3:88:b8:4e:69:
d9:d8:51:79:77:c3:be:1c:3b:a3:26:40:b6:f7:7b:
4f:62:c9:f5:3b:46:45:58:34:0a:dc:3d:53:8d:b8:
8d:34:68:ca:a3:e6:29:82:e7:39:35:ab:fd:92:39:
2a:58:a6:9f:46:4b:51:ed:08:74:80:7f:db:cd:49:
2a:e2:5d:0b:66:7b:25:0b:35:d8:5e:44:a7:8e:22:
fc:cd:17:14:01:ef:9f:de:f3:a8:50:6a:88:b0:d1:
ed:ac:58:34:1b:83:73:80:1f:f7:e8:fe:3f:71:c0:
d9:a8:00:2f:ee:bc:09:71:0f:16:e7:a4:53:a4:e9:
dc:53:03:75:d2:55:7d:99:f8:ba:74:77:65:9b:c7:
9b:92:44:48:d3:85:b2:31:f0:f1:86:9e:b6:35:91:
1f:68:5f:0d:b0:84:80:0a:a5:bb:ee:40:19:b9:db:
55:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2B:63:63:A7:22:27:39:E1:3F:26:31:40:10:AD:6E:D1:B0:69:04
X509v3 Authority Key Identifier:
keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/1StjY6ciJznhPyYxQBCtbtGwaQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.108.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:dc:da:d6:58:99:6e:62:4a:e4:7a:36:42:93:f9:35:46:07:
bf:d4:7c:d4:24:6d:ee:f3:af:b4:ef:a5:5c:87:be:bd:83:2c:
2e:26:19:8b:44:72:c7:98:1c:ab:f7:db:fb:b3:98:5b:29:87:
26:7b:f7:e7:8c:26:a5:f4:1e:96:0e:e0:ff:f2:72:39:13:5b:
5a:9b:dc:80:13:e0:8f:12:80:8c:70:5a:f1:24:41:a6:21:e6:
11:fc:6c:dd:77:56:91:cb:d6:0b:b4:66:0f:8f:8b:d0:1f:63:
19:4c:30:75:f2:6e:0e:30:a8:05:ab:33:cf:a3:a3:e9:bd:4d:
9d:b9:5f:29:45:ee:ed:b5:20:e0:b5:b4:84:1b:9b:94:63:8b:
b6:c8:44:8e:b0:27:1a:b1:d6:d5:49:82:bf:76:20:c3:4c:b4:
f6:cf:17:f2:d1:1e:20:d4:03:63:59:dd:c4:3f:68:99:d2:ec:
4c:01:9e:54:80:ba:d0:4f:93:39:31:35:98:68:42:d1:71:8f:
de:fd:ef:16:9c:d9:0b:0c:23:b9:17:43:64:81:dc:bb:c2:56:
41:56:de:a8:00:da:70:6a:1a:60:16:cd:1c:64:80:d9:6b:ff:
0c:f7:ab:93:b6:eb:77:9f:dd:c0:2f:e2:5b:42:93:8c:b8:f8:
91:c2:09:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:24:26 2025 by rpki-client