Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/pKIlg5YmNEiNHDYBMKXqIV0XhFU.roa
File: pKIlg5YmNEiNHDYBMKXqIV0XhFU.roa (raw, json)
Hash identifier: 516yZ2viMH4DtygFn77E9hucmTi9jK0KgNTpnz+3JZI=
Subject key identifier: A4:A2:25:83:96:26:34:48:8D:1C:36:01:30:A5:EA:21:5D:17:84:55
Certificate issuer: /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Certificate serial: 01942220238053BEDE7DBAE5CCB60E421607
Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/pKIlg5YmNEiNHDYBMKXqIV0XhFU.roa
Signing time: Wed 01 Jan 2025 13:48:38 +0000
ROA not before: Wed 01 Jan 2025 13:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16101
IP address blocks: 193.41.194.0/24 maxlen: 24
2001:67c:2b38::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:23:80:53:be:de:7d:ba:e5:cc:b6:0e:42:16:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4a22583962634488d1c360130a5ea215d178455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:23:93:4c:2c:b8:42:5d:78:26:62:35:38:
5a:46:b9:9d:94:fe:97:c6:b3:e4:bd:d2:48:68:1e:
fa:53:3d:c8:f1:e0:47:f8:6c:88:97:b3:79:50:a0:
4b:30:c4:cc:79:ab:13:43:eb:42:40:b2:48:a2:15:
00:af:64:fa:55:8e:22:91:ce:b0:bb:b7:9d:16:a4:
df:e5:68:99:31:46:e8:21:94:dc:7a:33:91:66:bd:
56:99:06:c4:1f:37:b0:63:58:bb:38:c0:be:93:7d:
85:96:45:94:2c:1b:f1:8a:04:50:64:45:97:c3:40:
50:58:3f:e8:ec:71:86:07:e6:12:4c:30:b2:68:b0:
f3:fa:29:bf:a3:a9:3d:a1:da:d8:bd:c7:02:c8:26:
07:ea:d6:3d:ad:fc:37:10:f6:fd:d9:61:08:d4:f3:
26:2c:b1:b0:93:db:6b:e2:b1:80:80:e2:f9:6d:e3:
71:2e:98:6a:1a:7f:2f:93:e2:8f:c8:42:ce:96:f0:
6a:e1:c7:c1:65:6f:35:4d:7f:15:ef:c5:78:6a:d1:
e9:ac:67:89:5b:11:3d:b6:64:ac:cc:48:8c:50:20:
f7:43:fb:23:8d:30:63:ab:ee:77:ce:ac:91:3c:3e:
2d:ae:6a:b7:4b:64:a2:c6:ea:bc:7b:96:4d:a6:75:
b7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A2:25:83:96:26:34:48:8D:1C:36:01:30:A5:EA:21:5D:17:84:55
X509v3 Authority Key Identifier:
keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/pKIlg5YmNEiNHDYBMKXqIV0XhFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.194.0/24
IPv6:
2001:67c:2b38::/48
Signature Algorithm: sha256WithRSAEncryption
2b:03:cd:cb:af:13:20:c7:e5:fe:5d:fc:41:e1:c1:e1:48:e9:
34:2b:4e:41:62:dd:0b:a3:04:cf:d2:ae:43:31:9b:0b:22:58:
0a:38:ec:d3:d6:d5:4e:f6:4a:22:e1:64:f8:1c:ce:c6:f7:a2:
81:78:90:67:d1:34:09:84:21:39:4c:83:09:f9:ae:cf:75:d5:
43:72:3b:65:a0:66:8c:14:d9:3e:87:b9:58:17:fe:83:f6:81:
c1:96:54:4e:33:5c:e9:bc:b6:dc:3e:97:82:36:8c:10:e4:82:
46:94:9d:36:eb:6f:99:0d:82:2c:2c:cd:04:63:77:7f:71:c3:
86:14:19:0a:3e:fb:b1:40:30:e6:36:e8:68:62:b1:89:7c:a3:
c9:4a:74:6f:52:b9:85:9e:2b:8f:78:ff:6d:20:c4:b7:5c:4e:
84:58:70:6c:d3:32:40:e1:e5:25:02:fb:24:2b:41:11:d7:b0:
2e:79:92:14:d7:06:49:2d:eb:2c:71:02:8e:0b:42:5c:f1:1a:
74:08:78:49:eb:e6:0c:62:1b:96:0c:a2:ee:df:29:fb:67:48:
61:90:9d:2c:9a:3f:78:92:c8:3e:8f:be:fa:45:4b:6b:3e:0a:
c7:d1:14:5d:e2:2d:9e:09:cb:b0:2f:31:f4:36:33:9a:1d:b3:
d1:db:dd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:51:18 2025 by rpki-client