Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/x6qBPAYYkfaf7DSPbFH-pGxnFp0.roa
File: x6qBPAYYkfaf7DSPbFH-pGxnFp0.roa (raw, json)
Hash identifier: E2BXuJB6M/883mL2LF+woF4zVIsSXvo4L6HofVg5TPk=
Subject key identifier: C7:AA:81:3C:06:18:91:F6:9F:EC:34:8F:6C:51:FE:A4:6C:67:16:9D
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D618F6FB77818A4F298FD4DFA00B63
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/x6qBPAYYkfaf7DSPbFH-pGxnFp0.roa
Signing time: Wed 01 Jan 2025 07:48:09 +0000
ROA not before: Wed 01 Jan 2025 07:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51799
IP address blocks: 193.23.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:18:f6:fb:77:81:8a:4f:29:8f:d4:df:a0:0b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7aa813c061891f69fec348f6c51fea46c67169d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:4a:98:55:3e:7d:f1:09:c8:90:36:ff:49:
35:0d:9e:1b:ae:72:52:52:e3:9d:eb:37:77:b2:d6:
ba:dc:e4:39:e8:e6:c7:ea:f6:6d:a8:fa:a0:e0:9b:
3b:53:d8:99:1a:5e:06:dd:b1:9d:47:16:23:09:80:
8c:14:2e:01:d5:1b:b0:2d:ec:e9:20:67:c1:2d:0c:
ad:d7:87:b9:6c:82:22:3e:44:77:87:ce:8b:54:28:
42:e3:5b:54:2d:fc:17:b6:89:40:a0:96:d6:f5:1e:
b5:62:97:62:b7:10:9d:f5:c3:2e:4c:94:cb:08:83:
46:d4:fc:7c:dd:07:97:d5:83:d3:ad:36:ed:0f:80:
1f:e6:f6:7d:66:10:ab:7d:39:ea:b5:c8:6f:d2:05:
e7:a8:b4:e3:4c:f8:d4:92:c1:fc:fc:8b:d6:cf:a9:
35:e4:7e:c6:5a:e3:a1:7a:a8:97:d0:32:d9:58:3f:
80:7c:79:b1:ba:6f:f3:db:64:85:5d:a4:9f:06:23:
2c:10:15:5d:bf:5a:05:5e:8a:20:8d:e4:f4:63:44:
70:db:5b:15:c4:48:2e:c4:3b:d3:58:8f:e9:36:ff:
6b:36:59:e1:7a:46:b9:5f:16:06:de:66:95:8d:82:
b2:a4:6b:32:0b:10:43:7a:b7:2b:7e:ce:c7:8b:59:
6d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AA:81:3C:06:18:91:F6:9F:EC:34:8F:6C:51:FE:A4:6C:67:16:9D
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/x6qBPAYYkfaf7DSPbFH-pGxnFp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.4.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:b1:31:b8:d0:1a:dd:8f:27:c2:58:d6:7a:90:91:3e:46:eb:
04:57:a9:c7:5e:4a:9b:3c:75:3f:f3:6f:d3:62:e5:54:81:27:
1e:8d:7a:5f:0e:5d:60:bb:d8:27:e0:d1:cc:33:82:b3:d6:62:
77:1f:c1:a6:96:7a:03:a5:0a:98:ca:4c:9f:8f:e4:6d:bd:eb:
57:56:cf:69:2e:51:8b:78:9e:3f:b0:4c:a9:5a:29:c2:e6:30:
f3:e8:60:68:49:27:40:7b:a9:29:6b:12:c9:cd:04:2a:3e:4d:
d1:ce:00:1e:6d:6e:a1:88:46:af:9d:2b:64:c2:d3:c5:2b:dd:
e9:16:a9:2b:0a:15:66:0b:81:32:af:13:e6:9c:9a:7d:4c:e1:
85:46:c4:55:78:cb:e7:c4:3f:22:1f:b0:69:27:38:ab:0e:7e:
75:a7:47:c6:52:1d:e1:60:3b:68:ea:13:36:5f:37:5b:1d:bc:
43:2d:5f:67:96:63:09:21:f6:0c:f9:95:9e:83:06:2c:f5:06:
57:19:50:bd:72:ed:bd:ef:a5:95:7d:78:d6:fd:39:74:7f:53:
90:0e:f1:f5:9b:e3:88:b7:3e:9e:9e:07:3f:71:3b:a1:4c:80:
54:88:2d:50:82:d8:3c:a4:a6:70:e8:d5:45:f5:49:40:ba:af:
3e:9f:d5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:40 2025 by rpki-client