Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/ShiiryAcjD3F8ggUPDXzBzE0UB0.roa
File: ShiiryAcjD3F8ggUPDXzBzE0UB0.roa (raw, json)
Hash identifier: DaTZCgy4f8wa4YkJRs70W6ngBWHSz7ZCBqDO4OgIbKc=
Subject key identifier: 4A:18:A2:AF:20:1C:8C:3D:C5:F2:08:14:3C:35:F3:07:31:34:50:1D
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 019428278A5638B091C01E97DAF8605315BA
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/ShiiryAcjD3F8ggUPDXzBzE0UB0.roa
Signing time: Thu 02 Jan 2025 17:54:27 +0000
ROA not before: Thu 02 Jan 2025 17:54:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12761
IP address blocks: 193.118.162.0/24 maxlen: 24
193.118.164.0/24 maxlen: 24
217.111.164.0/24 maxlen: 24
217.111.165.0/24 maxlen: 24
217.111.166.0/24 maxlen: 24
217.111.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:8a:56:38:b0:91:c0:1e:97:da:f8:60:53:15:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 17:54:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a18a2af201c8c3dc5f208143c35f3073134501d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:48:29:c4:41:93:c9:ff:8b:1e:c1:a4:18:
f5:90:a0:20:59:8f:38:bd:3a:85:b0:5b:60:12:af:
1e:7a:d6:c4:b5:b1:b8:63:42:46:c2:b7:b9:8f:36:
fe:36:1c:ea:6b:76:d9:2c:a2:ec:32:7c:3c:9e:4c:
75:e5:1a:94:a2:d8:ba:ca:de:17:06:c3:fb:4d:01:
6a:36:ea:aa:14:aa:2a:0f:23:6c:f4:10:ea:32:54:
9b:3d:59:1f:d2:81:e0:f7:52:7c:14:03:6f:07:a1:
cc:80:41:3b:c6:9c:0c:f2:e8:36:a0:3b:d9:05:fa:
b8:6b:c2:b3:d9:16:4f:b4:0b:4f:03:70:37:65:13:
dc:8d:fb:e6:42:83:cc:0a:09:fc:32:dd:8a:38:e5:
19:52:dc:93:7c:96:de:b8:84:2c:c3:cf:b4:58:f5:
1a:a7:d1:7c:8c:eb:94:a5:d4:ab:9b:2b:40:db:0d:
63:b7:f4:7a:35:ae:fe:3f:49:df:9f:16:54:83:51:
71:63:13:b4:fe:d8:e9:92:e1:0d:49:74:97:97:5e:
99:72:e3:5e:0f:0b:71:20:ec:1f:6a:fb:db:4f:aa:
60:ae:27:e1:0a:d7:11:a0:8f:20:9a:24:de:af:54:
bc:25:4e:aa:29:02:cb:51:cb:38:64:52:4f:e1:d0:
8d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:18:A2:AF:20:1C:8C:3D:C5:F2:08:14:3C:35:F3:07:31:34:50:1D
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/ShiiryAcjD3F8ggUPDXzBzE0UB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.118.162.0/24
193.118.164.0/24
217.111.164.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:ec:86:63:39:76:f1:11:3f:07:ad:e1:d6:43:98:46:a8:87:
5d:7e:92:8a:4d:1a:14:6c:58:45:26:53:95:68:b1:fb:9f:8a:
ea:5d:8f:49:06:b2:30:20:e5:d9:7e:10:2e:66:97:46:a6:8f:
8b:98:c8:5f:58:1e:16:46:2a:0a:1b:7c:0d:e4:8b:e0:00:c3:
f6:5c:47:8e:2a:31:8c:7b:e5:95:46:5d:3c:8f:b0:9d:4a:17:
76:1f:89:38:d6:9c:e4:61:44:8e:74:e5:0c:6e:1c:96:b7:29:
ec:c1:21:2e:6e:05:9c:54:83:f2:f5:9e:e4:6b:18:3d:fb:a5:
69:80:77:0d:7e:5f:d5:03:ae:98:05:0f:b6:fe:2d:af:04:5f:
a3:c1:78:a6:da:98:f9:95:37:ab:50:fb:30:d3:f3:dd:18:28:
54:51:04:fb:8c:56:81:0a:ba:1e:2a:6f:35:22:b5:4d:bd:bc:
49:c6:bd:84:da:20:17:86:0d:73:ad:51:85:3f:a4:03:c3:61:
a6:8f:df:89:7f:90:a2:61:97:52:c3:ad:c9:0e:0d:9e:38:8a:
83:cf:77:26:4f:a5:44:e3:23:38:71:21:be:50:e6:aa:e1:f7:
b6:d6:7b:f3:d2:c9:ec:9f:e3:39:09:75:53:fb:96:0e:25:74:
b5:89:d9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:59 2025 by rpki-client