Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1-WfEdPyWVUocCR9UTR4Zbj7P7Oc.roa
File: 1-WfEdPyWVUocCR9UTR4Zbj7P7Oc.roa (raw, json)
Hash identifier: CH2FU6z+GEc8HtvIaf7B+I0OFI1CGjk8f53ju01Zw1U=
Subject key identifier: F9:67:C4:74:FC:96:55:4A:1C:09:1F:54:4D:1E:19:6E:3E:CF:EC:E7
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01962FDB8DD151FC25B492252A440F173E12
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1-WfEdPyWVUocCR9UTR4Zbj7P7Oc.roa
Signing time: Sun 13 Apr 2025 15:53:59 +0000
ROA not before: Sun 13 Apr 2025 15:53:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142270
IP address blocks: 202.71.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:db:8d:d1:51:fc:25:b4:92:25:2a:44:0f:17:3e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Apr 13 15:53:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f967c474fc96554a1c091f544d1e196e3ecfece7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:f9:4f:4f:a5:32:dc:a3:b6:ed:fb:20:01:
74:f9:b1:c0:47:01:17:92:fa:3a:0a:d5:7e:68:a9:
33:8b:d5:50:96:93:3d:32:9a:31:09:d7:f8:5c:b5:
54:aa:0d:fe:25:f7:59:31:3e:39:1f:5b:86:18:05:
53:66:c1:ef:3a:59:87:79:9e:90:a3:e6:4d:b7:dd:
00:e9:da:ff:ac:40:d6:5c:f9:34:f8:7d:9f:b2:61:
db:cf:5b:f4:0b:91:35:46:28:0d:0e:87:21:4d:22:
75:de:73:30:86:cf:e5:3b:2a:42:bf:08:b0:0c:3a:
18:5d:69:c5:6f:74:8a:32:a1:2f:8f:e4:1c:9c:86:
d5:5b:0d:55:be:21:50:3a:17:f2:b0:f8:55:a0:24:
4f:29:41:ad:be:fe:bb:db:f8:aa:4e:12:50:26:7f:
6f:a6:8f:aa:9d:1f:db:f2:a0:48:4a:86:90:c9:ad:
38:53:e1:58:5d:95:bd:a2:da:87:45:21:93:b6:6a:
55:61:85:b6:c6:ab:ec:ee:09:eb:d5:d8:3c:5a:5c:
bc:58:e3:ba:28:d6:78:42:4d:3b:8a:bd:fc:a0:eb:
e7:30:d8:65:4e:f2:4c:60:70:a9:4f:9e:22:f1:90:
84:69:71:ac:63:6a:1a:0b:6b:b7:47:54:d9:93:21:
6e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:67:C4:74:FC:96:55:4A:1C:09:1F:54:4D:1E:19:6E:3E:CF:EC:E7
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1-WfEdPyWVUocCR9UTR4Zbj7P7Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.71.9.0/24
Signature Algorithm: sha256WithRSAEncryption
10:90:cc:fe:7f:e8:31:cd:e7:d8:e7:1c:8c:c4:84:29:79:e1:
7b:64:db:52:5f:6b:64:6f:67:d3:cd:41:fe:4a:25:70:bb:b2:
03:c2:1c:b1:97:1c:af:37:92:a5:10:2e:22:0f:e2:91:8d:98:
c0:25:45:df:ed:18:38:cb:94:6c:dc:09:ef:db:a5:59:b3:a0:
22:8e:6c:74:43:46:c6:9a:d3:3c:12:14:d6:4c:b9:a5:be:80:
c5:19:99:d1:81:5c:6b:65:8e:7c:24:bf:f3:76:ad:85:d3:8a:
40:8b:2a:5b:e8:34:3f:87:ee:e4:f7:1e:1a:ca:65:eb:a0:2b:
a6:95:f8:3b:7e:02:dc:d3:3e:1d:71:b7:c8:43:e8:00:79:3e:
29:c3:ee:4e:32:33:61:15:9c:0c:9a:19:71:cb:9b:1d:0c:1f:
9f:9d:df:31:27:44:f5:9c:8c:7d:d7:4a:5b:b9:7f:08:f6:f2:
3f:f0:7a:f0:d9:54:21:7d:8a:ba:bc:ed:80:31:ab:aa:61:6c:
f3:ad:a8:9b:9b:f0:e0:6a:93:2a:14:a0:a2:f0:1f:51:8b:cd:
77:de:c5:91:9b:78:92:f7:c0:19:b2:2a:14:2b:81:48:96:5e:
63:06:cd:20:f9:73:85:7b:33:51:19:2e:a6:fd:52:f4:29:5b:
7a:3f:65:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:39 2025 by rpki-client