Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/amUdynPrwbVLqLABZtxpD8fQkL4.roa
File: amUdynPrwbVLqLABZtxpD8fQkL4.roa (raw, json)
Hash identifier: 2bP4V/ugZs7KM8tVdsIlmqt2hBy9Sw73hb702lVz7Io=
Subject key identifier: 6A:65:1D:CA:73:EB:C1:B5:4B:A8:B0:01:66:DC:69:0F:C7:D0:90:BE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01942220238D17B42B1B2E8E6CC3B01CAB51
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/amUdynPrwbVLqLABZtxpD8fQkL4.roa
Signing time: Wed 01 Jan 2025 13:48:38 +0000
ROA not before: Wed 01 Jan 2025 13:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43350
IP address blocks: 193.8.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:23:8d:17:b4:2b:1b:2e:8e:6c:c3:b0:1c:ab:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a651dca73ebc1b54ba8b00166dc690fc7d090be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6a:f8:2e:34:9c:68:80:ab:35:6b:d4:6d:72:
13:6b:e3:17:7e:23:3e:46:b6:dc:f5:f3:a4:9c:c4:
6e:2c:47:74:c7:d3:fd:a6:78:83:c4:be:c2:68:21:
04:0a:a3:0b:00:de:c0:3a:ea:ef:5d:f6:e3:a5:4c:
ca:a1:2f:b4:c6:0f:11:da:b3:2a:89:c3:0f:20:26:
d7:a7:c6:77:30:20:5e:21:8c:c0:53:36:b7:32:f1:
57:0f:41:e1:2b:ca:d6:3f:e1:47:15:b1:85:a7:f4:
0f:6c:d0:90:6b:37:92:69:7e:89:cd:cb:3a:63:d2:
22:57:80:07:87:47:2c:37:3b:06:0e:fb:3c:0b:8e:
96:fc:40:f7:c5:87:aa:4f:19:7d:8d:bb:a4:f8:1e:
f7:ff:9c:b6:40:c7:4b:a5:d7:9e:a2:43:1e:5e:77:
fe:fd:01:72:98:58:c1:e8:45:a8:3a:ba:5b:06:7b:
2a:da:96:71:63:80:a1:4c:7e:42:7e:55:77:ff:3f:
3a:ea:d8:04:10:8f:8a:72:07:0b:06:6b:a4:96:d9:
68:0b:0b:c1:e3:33:d3:79:58:a2:51:53:94:fd:9d:
9d:d2:e6:9b:0b:94:2d:31:5b:ed:a6:57:13:36:b6:
8f:0c:40:56:99:82:62:ac:21:20:e8:db:bf:51:38:
65:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:65:1D:CA:73:EB:C1:B5:4B:A8:B0:01:66:DC:69:0F:C7:D0:90:BE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/amUdynPrwbVLqLABZtxpD8fQkL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.115.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:58:31:5d:69:15:7b:67:94:46:bd:cb:13:5f:b7:bc:95:b8:
bd:02:fa:05:6a:13:34:a4:9f:66:43:af:d1:cd:dc:75:6d:64:
66:14:07:46:20:1c:c2:2a:f6:f3:51:30:bb:f6:59:0c:59:fa:
cb:06:43:84:f0:d0:4d:70:d2:1f:db:d2:90:e6:38:87:58:a8:
71:79:cc:6b:8a:59:8e:ff:e2:b4:7f:e3:9c:41:2b:c2:7f:c5:
50:6a:97:3b:58:b3:35:7c:d5:e1:f5:27:e0:42:06:11:ac:18:
95:14:3c:6a:7c:9e:16:a1:70:0d:6a:d2:4a:a7:de:f1:f3:40:
2f:3f:d7:c0:62:c7:be:81:6a:12:06:16:65:8d:16:af:01:7b:
5b:60:da:db:aa:d5:0d:88:89:33:ff:0b:27:0a:ad:48:ef:76:
5e:e6:bc:15:1f:bb:40:c4:11:bc:89:9d:4c:6d:d0:97:2a:41:
5b:f7:c0:a3:dc:4a:d7:ae:87:e6:c7:53:70:82:26:a0:9b:fd:
72:f5:bf:50:0b:f8:0e:6a:e2:4a:b1:48:db:11:32:9c:44:ee:
f1:cd:a0:94:05:55:36:50:f9:b7:af:b1:36:f6:c9:94:f7:c4:
df:ec:ed:db:7f:38:e4:a5:9a:48:17:97:af:89:72:8d:0b:88:
e1:09:48:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:13:30 2025 by rpki-client