Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/1L7Y6OLDRX8ATBT4-mV96SZ6FOU.roa
File: 1L7Y6OLDRX8ATBT4-mV96SZ6FOU.roa (raw, json)
Hash identifier: m8wwCwecp0KG21zfw+PHnUnhiPotAg/Kcldtw5QJnwI=
Subject key identifier: D4:BE:D8:E8:E2:C3:45:7F:00:4C:14:F8:FA:65:7D:E9:26:7A:14:E5
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01942746F490B9F9C1BEF499B33C21DE7B58
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/1L7Y6OLDRX8ATBT4-mV96SZ6FOU.roa
Signing time: Thu 02 Jan 2025 13:49:09 +0000
ROA not before: Thu 02 Jan 2025 13:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 194.233.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:f4:90:b9:f9:c1:be:f4:99:b3:3c:21:de:7b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 13:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4bed8e8e2c3457f004c14f8fa657de9267a14e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:12:cb:ed:2e:75:d2:72:3c:da:5c:f5:91:
72:b9:05:e5:72:7c:63:30:d2:57:a1:75:29:58:c6:
a8:51:11:39:e4:e9:ac:6e:81:39:96:3f:e0:51:a5:
44:9e:18:06:10:db:e6:60:cd:cb:2d:c8:5b:3a:4e:
f3:08:8c:ef:50:45:fa:14:c9:49:60:38:1a:58:20:
dd:4c:77:85:7b:3f:24:e6:58:d2:d4:a3:d1:ba:a8:
d9:2b:94:32:17:9c:fd:b5:56:66:0d:95:c0:76:3d:
02:f1:cb:b6:3d:ca:26:b7:70:e3:12:b8:54:d0:2c:
d7:a6:e2:2e:05:61:f0:73:64:75:4f:e9:d2:35:04:
c1:22:7f:33:ae:3f:5c:61:de:fd:4c:e0:42:f5:d7:
e2:64:5e:43:5d:fe:00:f9:13:c0:10:7c:4e:e5:e1:
6c:6e:4e:50:2b:07:f0:75:dd:de:eb:5d:29:df:ef:
fd:bb:b6:60:a2:f6:34:7a:a0:e9:f8:07:ff:af:4d:
74:db:24:37:fc:36:fd:c6:84:74:7e:58:3d:ef:98:
10:9a:b7:66:88:b2:cb:ad:74:d3:40:48:be:72:2d:
b3:c2:d1:9f:c3:a6:fd:7a:e6:d0:9b:a3:b8:84:71:
26:d1:51:cb:8e:18:3e:3c:cd:41:28:d8:36:40:4a:
7c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BE:D8:E8:E2:C3:45:7F:00:4C:14:F8:FA:65:7D:E9:26:7A:14:E5
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/1L7Y6OLDRX8ATBT4-mV96SZ6FOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.150.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:90:20:c2:bb:01:84:90:8d:48:28:7d:79:ef:83:4f:89:c5:
e0:d7:5c:e2:b7:ea:f5:5f:cd:d9:fe:04:de:e4:ed:f9:20:31:
3b:b2:e3:34:75:8f:40:b6:69:5a:fe:78:95:4e:7b:e8:dc:b2:
6e:00:06:6f:65:62:06:dc:d5:50:ca:8b:3f:cf:6a:af:4b:99:
ba:23:48:7c:6b:5b:0b:db:4a:4b:ee:f2:46:31:f3:bf:72:1b:
b1:4a:6d:ed:fb:e4:33:22:ef:87:f0:2b:ee:1b:83:45:b3:23:
b3:7c:e8:d8:b2:e6:31:ec:af:83:58:b2:f6:be:71:c5:24:4f:
0f:94:75:ef:a0:ba:b2:cb:94:a8:d9:1f:a4:4a:d1:f0:da:5c:
57:39:80:6c:ea:4f:de:56:54:ed:b9:32:c0:e2:30:d9:06:c1:
35:10:03:98:cc:6e:fa:4d:11:1b:f4:ab:eb:ba:c2:16:d2:eb:
a6:ba:59:06:43:c5:2a:90:40:ea:98:6e:2d:b3:bf:d3:2c:03:
67:2c:ce:16:f7:49:1d:49:48:45:4b:c2:33:1a:54:63:14:05:
11:f3:d0:c2:2e:48:d1:21:a3:d5:e4:3a:ce:fa:2f:7e:bc:10:
fb:e8:35:a2:80:a0:ed:d8:d5:97:cd:35:1e:9c:29:8b:b7:16:
0d:50:ae:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:06 2025 by rpki-client