Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/inKwINVj46nUl3jjoTJxWhiJQ3o.roa
File: inKwINVj46nUl3jjoTJxWhiJQ3o.roa (raw, json)
Hash identifier: q+Nay9m6+G1qfhUzik6+Yvl9CvOyD+v/ABcNInQrbM0=
Subject key identifier: 8A:72:B0:20:D5:63:E3:A9:D4:97:78:E3:A1:32:71:5A:18:89:43:7A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824EE734B30621DD56E15A79AD6C593
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/inKwINVj46nUl3jjoTJxWhiJQ3o.roa
Signing time: Thu 02 Jan 2025 17:51:36 +0000
ROA not before: Thu 02 Jan 2025 17:51:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48207
IP address blocks: 193.124.45.0/24 maxlen: 24
194.135.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:ee:73:4b:30:62:1d:d5:6e:15:a7:9a:d6:c5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a72b020d563e3a9d49778e3a132715a1889437a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:ef:e2:dd:ee:0c:06:8a:a6:fb:e7:cf:a7:
75:25:cc:c2:69:ed:2f:6e:3a:ab:3c:b0:0a:14:8f:
bb:80:f2:4c:28:f3:22:f5:06:1b:a7:cc:51:1b:9c:
71:5f:93:f3:f9:f1:93:31:e2:ac:cd:44:1c:da:82:
d4:22:32:14:31:18:20:f2:a6:b9:1b:f4:8e:ab:df:
9d:af:31:18:a0:98:f4:de:b5:9e:1c:29:eb:49:88:
b1:32:10:5d:00:60:09:12:b8:e6:b8:09:de:01:b9:
7c:a1:8e:8a:84:3c:82:aa:fb:6c:82:85:3d:a6:66:
28:ee:7b:e8:ad:4f:e1:e0:2c:c4:26:a5:db:28:25:
8f:5b:da:1d:28:bf:17:5e:0d:f5:ab:53:3d:ff:f9:
a1:25:6c:bd:6a:76:2c:5b:1b:d3:b7:cf:0a:6b:fd:
e4:53:4d:38:2c:e1:25:fb:52:67:26:11:20:8d:5f:
a1:0a:12:6a:d1:5c:79:11:3a:38:82:d4:4d:79:1c:
33:fd:48:48:6d:3d:89:2a:2b:de:7b:95:94:1f:c5:
51:cc:d1:e9:c7:92:6c:c7:00:bc:42:79:ff:6a:79:
88:e7:35:87:9f:22:34:cd:19:48:e3:ca:26:a9:c0:
c7:0e:da:e4:8c:2c:b8:48:0f:26:db:a9:0b:91:46:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:72:B0:20:D5:63:E3:A9:D4:97:78:E3:A1:32:71:5A:18:89:43:7A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/inKwINVj46nUl3jjoTJxWhiJQ3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.45.0/24
194.135.34.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ed:47:8f:59:ea:f0:fc:92:8f:90:eb:9f:3c:b2:92:ef:f2:
b9:45:cb:73:4a:d3:87:05:1d:40:71:5a:51:60:59:18:18:f3:
ec:04:02:f3:e3:f2:5a:24:a2:e9:ee:88:38:93:0b:75:04:00:
0b:49:ef:39:13:74:99:09:b9:51:02:41:58:6c:b6:73:a8:99:
a3:a4:94:21:45:df:a6:62:9a:66:0a:79:55:78:09:aa:77:27:
3d:82:39:1e:24:b5:c8:8b:30:cb:c1:94:63:db:de:00:2b:96:
9d:20:2e:10:b0:4e:67:54:c8:4f:2d:d5:95:c8:0c:c5:16:23:
cf:77:c9:df:34:28:3b:c8:4e:64:9e:86:ae:f4:b0:d5:ed:56:
70:a1:b4:e7:75:0e:eb:2a:58:7e:b9:7f:41:a9:43:d8:84:d2:
36:79:d3:6f:f3:c1:2b:58:ac:f9:d4:cb:b7:9f:ba:98:21:af:
1c:de:e4:9e:97:5a:96:6a:f6:b9:51:96:58:f1:25:04:22:8a:
d8:b4:0d:06:70:39:89:ff:48:8d:5c:7d:5c:9a:ff:6e:9d:be:
30:d2:f1:e6:51:b6:3e:f3:ce:90:e9:55:b9:a1:ce:70:27:14:
be:09:ab:29:14:8a:ad:f7:38:1e:e0:a0:34:69:e2:8c:32:6a:
d7:46:ff:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:14 2025 by rpki-client