Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/x05kuSTQillWAvYC1VSvIsPJiaU.roa
File: x05kuSTQillWAvYC1VSvIsPJiaU.roa (raw, json)
Hash identifier: YaAmDXOkb7npVO3SgdzcRdFaOrP01AvggeHWb2jbRUk=
Subject key identifier: C7:4E:64:B9:24:D0:8A:59:56:02:F6:02:D5:54:AF:22:C3:C9:89:A5
Certificate issuer: /CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Certificate serial: 019424B391D27366DFBC0879B417DE73B3C1
Authority key identifier: 4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/x05kuSTQillWAvYC1VSvIsPJiaU.roa
Signing time: Thu 02 Jan 2025 01:48:55 +0000
ROA not before: Thu 02 Jan 2025 01:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 193.16.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:91:d2:73:66:df:bc:08:79:b4:17:de:73:b3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Validity
Not Before: Jan 2 01:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c74e64b924d08a595602f602d554af22c3c989a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:44:92:7e:57:50:61:e1:fe:85:02:bc:6a:
d1:59:36:d9:e2:45:22:7e:6e:f4:7f:d3:d7:af:1f:
c0:f0:92:50:95:2a:18:d7:39:51:13:0b:12:c4:41:
86:9e:2d:3f:24:fb:45:2b:09:b0:d3:64:9d:8b:98:
d7:e3:f0:8f:42:83:a3:d5:4c:f9:d7:72:16:8d:46:
13:61:69:b5:1b:3a:4e:14:05:12:a9:8c:48:4b:0f:
fc:a4:ad:c7:6d:ab:90:23:5c:cd:af:86:e7:fc:9c:
f2:ff:d9:ae:60:06:a9:6a:41:72:e4:bc:84:b6:77:
f6:a4:78:c0:1b:4c:47:44:3a:bd:07:c2:1f:91:2c:
84:34:cb:76:0f:77:17:d4:6b:74:84:da:9a:96:b8:
b3:90:2c:74:3f:15:fb:db:9a:08:33:d2:3b:66:db:
39:e8:47:28:ec:f3:34:03:47:52:3b:24:2c:6d:08:
95:1b:1c:74:96:96:dc:a6:71:34:9c:11:f1:74:c2:
e6:09:97:1c:f8:df:af:89:4a:47:c9:a3:93:a5:3d:
d5:78:8f:de:45:f8:a2:02:21:47:9e:fc:22:7e:7d:
9a:c3:d1:f3:94:1c:5d:85:89:8a:e5:3a:59:78:56:
7e:5f:eb:d6:d8:89:c9:57:34:9c:d3:5c:b6:f4:67:
f9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4E:64:B9:24:D0:8A:59:56:02:F6:02:D5:54:AF:22:C3:C9:89:A5
X509v3 Authority Key Identifier:
keyid:4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/x05kuSTQillWAvYC1VSvIsPJiaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.241.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b7:7e:40:cc:31:39:58:9e:a1:72:6b:6f:f8:fe:46:b9:c1:
36:b1:7b:2d:1f:f9:9f:0a:10:ec:f1:6f:df:4b:23:ae:99:84:
71:f9:67:8d:4a:62:29:cf:69:91:02:00:5c:e2:7b:88:73:25:
c7:90:16:d5:31:59:87:ea:16:1a:f9:d9:c2:7e:64:4e:54:b1:
03:01:c1:f7:79:17:d8:63:5e:36:dd:60:e7:d5:cf:b9:96:a6:
4c:fa:d2:78:96:98:20:45:43:f5:3f:6c:aa:59:a8:cd:21:54:
86:55:fa:25:53:01:42:ca:3e:13:91:d3:9a:88:a0:31:23:71:
6b:fd:d4:60:e0:86:93:7d:b9:bc:75:25:00:74:a0:8d:f8:d0:
f5:bf:90:1c:1e:d1:72:43:48:41:de:89:c7:9d:62:47:8d:cf:
f3:2a:2d:f4:af:4c:96:a8:4e:0f:10:da:fb:48:a8:b0:96:5c:
6a:5b:1a:a3:fc:da:9c:09:4e:36:32:c7:8e:8b:16:a5:5c:f8:
13:39:48:c5:53:ef:c1:ec:63:82:19:1d:ee:96:46:d4:70:34:
c4:55:5d:7d:b5:fc:c2:89:d7:d7:9c:9d:fa:3e:04:98:9b:2a:
7b:28:6e:db:4c:c0:83:5c:ea:fc:41:4a:65:36:55:f9:1c:e6:
10:15:56:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:18:42 2025 by rpki-client