Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B6uT7SV7wEyIixfJrqZPotnKH3g.roa
File: B6uT7SV7wEyIixfJrqZPotnKH3g.roa (raw, json)
Hash identifier: SKMrOi0g2v7TGQj61PGufI6FhFmHF2Yydrcf3JAx16s=
Subject key identifier: 07:AB:93:ED:25:7B:C0:4C:88:8B:17:C9:AE:A6:4F:A2:D9:CA:1F:78
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824F31AB9A59D923AD3A502546848B7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B6uT7SV7wEyIixfJrqZPotnKH3g.roa
Signing time: Thu 02 Jan 2025 17:51:37 +0000
ROA not before: Thu 02 Jan 2025 17:51:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 194.87.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:f3:1a:b9:a5:9d:92:3a:d3:a5:02:54:68:48:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07ab93ed257bc04c888b17c9aea64fa2d9ca1f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:02:1c:5b:37:5e:64:fe:85:d9:4f:a1:eb:
a5:a7:ee:b4:28:de:fa:e1:e5:8d:71:e6:ce:13:f7:
eb:c5:1e:83:51:11:04:e5:73:f1:bf:d7:a4:30:0c:
10:c4:ad:2f:4a:a4:06:cc:0a:83:92:fb:c0:90:24:
67:3a:eb:93:f0:98:a4:e7:03:ee:eb:e7:0a:c1:1f:
b2:33:ec:c2:f4:a2:9a:a8:82:fe:91:c2:c8:cc:62:
5e:1b:46:37:5b:85:a7:0c:f4:03:f5:15:df:8e:cc:
75:43:f3:a4:bf:47:16:e3:b0:57:b9:eb:69:f1:8e:
76:a0:16:df:6c:1b:af:c1:7f:31:85:5d:82:cf:b2:
21:7b:2b:a9:7f:87:68:99:5b:f3:5d:64:3f:22:53:
9a:2d:19:23:f6:55:e1:34:3b:a3:68:28:13:1e:0d:
5f:9b:d6:b0:09:f2:e7:3e:c5:3e:be:dc:75:0f:c9:
7b:04:0a:0e:71:15:78:54:36:db:a3:11:39:82:87:
2f:cf:4a:f1:89:0a:1b:75:a8:6e:0f:c6:d7:5b:61:
9e:4b:4d:1a:f3:bd:37:7e:a5:99:bb:ef:2f:02:d3:
da:9f:f2:ec:55:73:4f:2e:7d:aa:14:65:2a:ce:e7:
03:51:23:0b:4b:11:70:b1:60:5c:7b:03:ec:54:9c:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AB:93:ED:25:7B:C0:4C:88:8B:17:C9:AE:A6:4F:A2:D9:CA:1F:78
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B6uT7SV7wEyIixfJrqZPotnKH3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.148.0/24
Signature Algorithm: sha256WithRSAEncryption
40:a5:af:ce:af:2a:6b:3e:f2:ee:e8:12:6b:33:87:ba:65:d8:
97:6a:51:a2:af:99:b1:bf:b1:79:3e:7e:e8:27:8e:bb:6e:e1:
42:d7:fb:22:3a:82:04:c6:1a:62:87:cb:b3:f1:7b:58:c3:aa:
1d:60:98:c9:c7:b8:17:e5:93:1c:2c:5b:16:cb:c3:10:83:d4:
ab:e6:a5:7a:69:43:b3:4c:27:09:60:4c:39:fa:fc:f2:3f:96:
57:e5:6d:2a:c7:26:06:ac:3c:ba:1b:91:b5:17:01:c3:30:f1:
d1:d3:6d:2e:ed:93:e9:d0:ca:44:20:ed:63:bf:41:fe:54:0c:
06:0e:88:fa:c4:b1:84:e9:39:0f:e5:fc:5b:4c:66:8c:1c:d2:
ef:d1:47:9f:3f:ca:0a:40:fd:3e:4c:61:94:89:07:31:55:58:
6e:3b:73:6c:9b:4e:92:a3:ea:98:27:94:4b:c2:fc:08:a7:49:
4d:68:b9:7a:d7:d5:4f:67:0e:7c:0b:ce:08:ab:cf:43:fe:cb:
ad:6b:aa:a3:27:3f:3b:cd:af:7b:dd:f2:65:cd:c1:6c:d2:79:
08:a1:be:69:e5:9c:a6:2c:15:e5:5d:36:f9:eb:52:8f:4f:48:
6a:c8:7e:09:d4:de:7c:ef:60:3a:a8:f3:40:4d:77:9b:4f:08:
6b:17:b5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:59:39 2025 by rpki-client