Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/1Z36oEX0lkx8ndMTGV0SwL3pu6s.roa
File: 1Z36oEX0lkx8ndMTGV0SwL3pu6s.roa (raw, json)
Hash identifier: oLjRdDjCa874D2Ohi+4lYwxZSVZ663VZAUA47G0Sbic=
Subject key identifier: D5:9D:FA:A0:45:F4:96:4C:7C:9D:D3:13:19:5D:12:C0:BD:E9:BB:AB
Certificate issuer: /CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Certificate serial: 019423D7405A278761E04779A039A62738DC
Authority key identifier: AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/1Z36oEX0lkx8ndMTGV0SwL3pu6s.roa
Signing time: Wed 01 Jan 2025 21:48:16 +0000
ROA not before: Wed 01 Jan 2025 21:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16184
IP address blocks: 193.109.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:40:5a:27:87:61:e0:47:79:a0:39:a6:27:38:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Validity
Not Before: Jan 1 21:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d59dfaa045f4964c7c9dd313195d12c0bde9bbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:04:c3:04:1d:46:b6:09:dc:36:65:b8:4e:
12:fd:60:7d:89:7b:dd:a7:a5:4d:ec:8d:65:e1:55:
9b:2a:0b:19:ae:18:dd:fb:48:31:12:64:a5:48:75:
40:65:63:b4:f3:54:58:a7:42:5c:c1:a4:71:14:40:
8c:f4:56:fb:62:59:92:72:0a:82:6f:7e:03:bf:05:
df:bd:17:ca:5d:c4:cb:3e:6b:76:76:20:f4:a1:4f:
1d:77:ac:7c:1e:e2:c3:11:e6:d8:ac:44:09:af:09:
b9:8b:03:24:30:79:73:41:40:16:a8:fe:a2:17:a1:
02:28:20:85:ef:bf:ae:89:59:79:a2:2c:e1:d0:40:
5b:4c:f7:4e:f3:c1:c8:26:1d:bf:76:70:55:38:c5:
12:af:f4:b8:8f:f5:fb:88:23:91:5c:af:da:ec:57:
59:43:0a:3d:1b:fb:2c:4d:0b:9d:23:01:a9:be:35:
64:a3:3b:ef:7f:4c:db:3a:ff:c2:9f:3a:da:b9:2c:
1b:2e:1e:98:9f:63:b3:c7:4f:26:f6:7d:7b:25:ff:
55:b2:5b:9d:37:3a:cb:eb:b9:4b:e0:2b:db:ec:27:
84:a3:97:29:f1:e3:f8:60:92:c1:e4:0d:c2:d4:57:
24:ad:2e:3c:bc:a3:29:a4:86:4c:dc:45:f2:24:66:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9D:FA:A0:45:F4:96:4C:7C:9D:D3:13:19:5D:12:C0:BD:E9:BB:AB
X509v3 Authority Key Identifier:
keyid:AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/1Z36oEX0lkx8ndMTGV0SwL3pu6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.124.0/24
Signature Algorithm: sha256WithRSAEncryption
67:5b:28:07:c1:d4:c7:07:8e:b2:f5:5a:05:a8:c7:3b:c5:5d:
2f:17:98:dd:41:9c:2a:51:3b:03:06:5c:23:bd:d2:2d:79:28:
9d:aa:93:ff:b5:18:fc:cb:8d:b3:8a:ea:2f:6a:90:c4:31:02:
16:25:2e:f8:49:4d:33:1d:31:ce:97:87:1b:d0:f9:3a:8f:30:
9d:84:c4:d4:90:38:b2:d7:8d:2d:15:ee:07:df:28:ea:6f:8a:
5d:bc:c0:ed:51:f1:32:7a:92:a5:c2:4c:ca:fe:96:a4:07:2e:
58:66:34:88:51:ca:14:e1:25:53:06:e8:13:81:46:61:d7:8e:
a8:b5:47:03:dd:b8:c6:70:67:49:ea:21:0b:58:c9:98:6e:53:
4d:b8:cd:f0:7e:e5:1c:79:04:8b:1c:79:41:fa:4e:ee:15:21:
17:e0:85:48:3a:21:1f:29:67:a9:55:e3:2e:9e:0d:ad:bd:1c:
0e:b0:7f:b9:e9:53:19:c9:23:a4:aa:46:06:6c:cb:9d:a8:d9:
7a:b6:57:0b:32:2e:90:05:7b:ad:e3:d3:b1:06:a6:4f:e1:5b:
54:ef:04:6f:28:be:0a:93:36:7c:1a:ad:30:70:e0:8b:35:f8:
0f:c3:03:7d:52:67:a1:02:02:df:a7:a7:89:7b:e9:99:ee:73:
23:0f:e7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:27 2025 by rpki-client