Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/E_afK43AeAua7XN5CBN7rET3F2Y.roa
File: E_afK43AeAua7XN5CBN7rET3F2Y.roa (raw, json)
Hash identifier: AKTUGzn0Vyh/QLw6dL8JomnhQp7UOvKcTdOyZ5n5c5M=
Subject key identifier: 13:F6:9F:2B:8D:C0:78:0B:9A:ED:73:79:08:13:7B:AC:44:F7:17:66
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0194214413D3585312077CDB7A93FF1B4A22
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/E_afK43AeAua7XN5CBN7rET3F2Y.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203004
IP address blocks: 195.80.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:13:d3:58:53:12:07:7c:db:7a:93:ff:1b:4a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13f69f2b8dc0780b9aed737908137bac44f71766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0b:87:15:d7:dd:11:1d:35:bc:b3:7b:ec:89:
50:04:5b:ee:b6:9a:d5:84:c7:95:73:6e:9e:c5:90:
42:e2:9e:d9:90:d5:94:13:81:61:d1:19:a4:3b:d0:
cf:12:9f:33:eb:92:65:c4:5e:b0:7d:4e:7b:ea:9f:
42:23:21:23:3c:ee:67:7e:6d:c5:b9:11:96:76:f1:
e6:e6:a9:1e:61:1c:1f:d3:81:b3:78:1c:6b:ae:f4:
3e:43:92:1f:90:d6:d7:f0:b5:ed:83:fe:0a:3e:d9:
ee:42:97:b6:92:a9:6f:55:64:80:d0:8c:34:5a:d5:
bd:31:c8:7a:bb:10:74:f4:7b:b2:32:2a:da:60:eb:
d7:94:93:8b:8f:1e:c5:8f:1e:91:5b:ee:3d:ce:01:
64:32:a5:8b:5b:85:b5:75:15:8a:44:6a:8c:9f:15:
c1:25:47:e0:e7:4f:6a:9e:ef:ef:c5:0b:3d:68:36:
9d:c7:d8:25:f2:5d:b2:02:a8:1d:02:6c:d3:b7:a7:
08:4c:fa:e9:6f:8c:5a:96:43:f2:42:21:94:9e:27:
84:9d:80:3e:ef:b0:44:45:3f:7b:3b:b4:6a:a3:59:
c0:2b:bc:ea:9e:48:0b:d1:c0:b5:ad:84:99:31:80:
00:0d:56:43:f5:7b:98:32:28:65:01:5f:a4:0e:84:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F6:9F:2B:8D:C0:78:0B:9A:ED:73:79:08:13:7B:AC:44:F7:17:66
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/E_afK43AeAua7XN5CBN7rET3F2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.80.238.0/24
Signature Algorithm: sha256WithRSAEncryption
76:be:e4:2e:aa:ec:54:f3:ed:f8:9b:a0:f2:fc:4d:66:1a:31:
da:8f:fc:7f:e4:8f:c0:d2:c6:b5:b2:81:e6:37:52:64:9e:c8:
9d:15:dc:de:4f:74:fc:89:2c:c4:cd:fa:8c:8c:17:e5:6d:79:
b2:2f:8b:7c:4e:cd:6f:15:23:11:bc:4d:64:3d:75:11:70:eb:
01:5b:ea:8e:53:e3:15:10:ed:3b:e6:fa:0a:0c:ac:58:48:37:
66:de:3f:a6:64:ba:78:07:a7:c4:35:1e:77:e8:29:1e:37:80:
7e:33:6a:83:df:03:7a:c7:ef:1a:b2:9b:06:43:bf:6c:1a:4e:
ac:f8:c7:41:17:b8:98:1e:62:74:06:5a:58:76:de:23:f0:35:
61:d3:4b:b4:de:c4:44:46:10:59:61:fb:cf:89:e2:86:52:66:
36:ae:27:12:c3:9d:d5:68:6d:a8:c1:53:c2:b6:f4:53:d6:9f:
ce:b9:a9:f5:c1:58:38:2d:3b:77:58:d5:01:88:ff:fa:ae:29:
6b:12:87:72:ad:d9:7d:9e:90:7d:73:40:3b:d1:a5:eb:e9:41:
c3:47:db:ce:d3:0e:19:9e:07:0e:33:97:08:45:5e:ef:2d:67:
d9:38:49:c3:e5:56:9b:d7:2f:5a:0d:b8:94:47:6c:2c:d9:f1:
40:1d:ca:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:06:31 2025 by rpki-client