Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/Rl4DyVo-dxDb_n40cHhpD-Gbhew.roa
File: Rl4DyVo-dxDb_n40cHhpD-Gbhew.roa (raw, json)
Hash identifier: Po08T18Bp9CxsHnf5hIBOm50bD50mTub5HC9lWw3eeM=
Subject key identifier: 46:5E:03:C9:5A:3E:77:10:DB:FE:7E:34:70:78:69:0F:E1:9B:85:EC
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 01941F8C626184E2DEE66F8D21D13D1E3F94
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/Rl4DyVo-dxDb_n40cHhpD-Gbhew.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 193.228.168.0/24 maxlen: 24
193.228.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:62:61:84:e2:de:e6:6f:8d:21:d1:3d:1e:3f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=465e03c95a3e7710dbfe7e347078690fe19b85ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:50:99:e6:a1:25:4e:52:88:42:a0:76:d2:
25:76:3f:53:82:60:5b:3a:6a:0b:8a:83:67:8a:48:
08:40:aa:47:7e:62:ba:bd:69:cc:1a:53:f5:04:b9:
f6:83:c2:97:8d:85:5f:37:8f:a7:b6:bf:d8:c3:c1:
97:84:6c:d4:20:d5:8a:13:49:46:52:b7:79:2e:f8:
02:a1:5b:27:c7:e9:81:10:df:c4:e6:33:d3:bb:bd:
07:16:95:5b:9b:dc:3d:14:d4:18:dc:33:39:47:df:
90:81:5b:4f:dc:88:7b:78:f1:b2:94:b6:c1:7d:28:
52:c9:bd:84:24:51:c0:1e:19:ed:83:f5:03:26:86:
fe:3a:13:67:78:c9:09:cf:bd:5f:d8:c1:e7:11:06:
b5:2f:ba:69:02:4b:5b:01:cc:84:7a:83:06:43:00:
f7:67:88:9d:94:ea:02:2a:37:25:dd:db:c2:27:79:
55:5e:39:1b:c1:95:48:57:9d:cd:4c:84:d4:81:30:
c4:2d:0b:b5:06:57:56:11:16:91:72:df:70:69:61:
69:bc:b6:ba:cc:50:ee:f4:8a:09:53:5c:59:1c:10:
bf:c5:bb:d4:a0:b6:e3:37:18:1d:9e:77:e8:f8:b8:
bb:ad:d8:a2:7c:cd:5a:83:17:68:22:da:ee:15:d4:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5E:03:C9:5A:3E:77:10:DB:FE:7E:34:70:78:69:0F:E1:9B:85:EC
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/Rl4DyVo-dxDb_n40cHhpD-Gbhew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.168.0/23
Signature Algorithm: sha256WithRSAEncryption
74:b1:88:c3:37:d0:c4:3b:50:b6:19:f1:7b:6c:13:09:0e:67:
fd:e4:bc:c3:d5:9b:a3:9d:29:a9:26:e8:01:c9:c3:50:16:6a:
4a:d0:1b:23:1b:92:4c:c1:6e:40:43:88:6c:cc:9d:57:a1:9c:
62:5d:29:67:0a:e1:91:e7:0e:f6:9d:de:ac:18:ce:3d:f4:6c:
13:52:1e:c3:fb:13:a7:69:01:be:fe:cf:63:57:c2:67:60:af:
d9:2d:cb:c8:06:2e:2f:bc:f5:30:8a:1a:75:15:4b:51:dc:37:
52:74:32:bd:ed:b9:4e:88:ba:64:ef:56:11:1d:f7:5a:27:1e:
0f:08:22:6a:8a:f1:e4:a5:94:48:31:aa:db:44:39:c6:8c:7c:
e8:ff:5f:51:84:5c:2c:eb:68:a6:31:fc:3c:6f:50:ba:2b:15:
0e:0a:02:cc:9d:81:cb:a1:99:a6:82:01:99:d3:52:77:77:6f:
97:e9:6e:0b:f9:02:d0:b8:ac:38:fb:c6:a5:01:f3:af:ef:82:
f8:e8:9c:d8:a3:f7:d2:97:cc:1c:e7:b9:ab:a2:47:3c:f0:19:
fe:54:00:40:d1:91:09:a3:d1:9c:ea:5e:2f:40:7a:b6:1e:43:
45:da:c4:ca:b6:ab:27:cd:fd:7c:8e:18:97:39:a5:7b:09:a7:
10:52:d8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:48:01 2025 by rpki-client