Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/1-a6iBHASMUxMW7asjxbfE0QEd5w.roa
File: 1-a6iBHASMUxMW7asjxbfE0QEd5w.roa (raw, json)
Hash identifier: m3RXlatEBF9cA7N2EEjPPwV4+LMKEGb0hrpMsfXqqsk=
Subject key identifier: F9:AE:A2:04:70:12:31:4C:4C:5B:B6:AC:8F:16:DF:13:44:04:77:9C
Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial: 019422FBF25EB7E8614DB6AA16944AFEE6A6
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/1-a6iBHASMUxMW7asjxbfE0QEd5w.roa
Signing time: Wed 01 Jan 2025 17:48:44 +0000
ROA not before: Wed 01 Jan 2025 17:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50629
IP address blocks: 193.105.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f2:5e:b7:e8:61:4d:b6:aa:16:94:4a:fe:e6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Validity
Not Before: Jan 1 17:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9aea2047012314c4c5bb6ac8f16df134404779c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:e3:5f:f9:52:50:48:34:cb:b1:ae:77:c0:
96:c2:fd:7f:8d:f2:dd:ed:b3:8c:ab:d7:6d:86:07:
c6:82:f0:39:4c:b7:be:89:c8:99:8a:ce:9f:6e:46:
36:8c:82:43:74:d1:76:3f:4e:95:9a:c2:25:69:66:
f5:9a:65:74:ea:35:e3:0f:51:93:36:94:0b:a4:2b:
90:73:36:e7:b6:6e:7c:2f:40:0e:15:a2:cf:dc:2d:
7d:5e:41:f6:b8:db:89:3c:10:dc:42:83:6b:c7:ee:
92:aa:ef:df:2e:bd:af:dc:51:fc:f9:eb:73:8b:8b:
98:04:fb:eb:51:34:83:3f:ae:f3:f1:8d:68:fd:0c:
93:f7:c3:67:c2:93:35:cb:f9:c9:0d:5c:da:af:a1:
51:b2:c3:2d:f8:27:c1:5f:f5:de:75:05:d6:9e:e6:
16:b2:db:87:2d:19:7b:86:65:a3:97:de:ff:2a:ca:
26:17:61:11:8d:8c:1c:6b:13:3b:04:94:31:3e:b8:
9a:7b:8f:16:f6:1a:c6:80:9f:07:ee:67:9d:26:19:
71:55:92:16:e5:1e:b5:5e:8f:93:01:7c:5b:f2:8a:
bf:75:83:23:af:b7:7b:09:fc:67:1d:f1:8c:f7:f4:
a4:70:b0:22:6f:7c:4c:78:62:ed:bd:78:dd:e7:fc:
d2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AE:A2:04:70:12:31:4C:4C:5B:B6:AC:8F:16:DF:13:44:04:77:9C
X509v3 Authority Key Identifier:
keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/1-a6iBHASMUxMW7asjxbfE0QEd5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.14.0/24
Signature Algorithm: sha256WithRSAEncryption
02:e9:89:f1:fa:21:2f:68:7d:2f:ec:2b:34:ed:b6:74:10:b8:
1e:5a:df:01:17:f6:4c:31:53:6f:52:69:86:af:af:01:48:f2:
a1:4c:53:1b:aa:db:4a:71:10:fb:73:2f:a1:d3:09:ea:2b:3d:
e7:0f:5b:46:b9:42:77:4a:c4:c7:fa:76:88:7f:e0:48:b9:07:
ff:d6:78:62:52:ef:5d:e6:d2:bd:46:ab:3b:d6:ba:2f:82:d5:
9f:5a:e5:ef:92:1b:92:22:d4:11:91:c1:cd:81:b2:ac:c8:e9:
10:49:c8:be:9b:fc:24:75:64:a1:d6:6a:35:d5:cf:a3:66:bf:
47:ed:d0:1a:ac:99:ee:58:ce:94:9b:40:33:39:0d:36:18:0f:
9e:16:0d:b0:af:5c:fd:9e:81:be:f7:38:81:be:6a:a2:45:6e:
a6:54:71:c4:7c:c6:e8:db:ea:9b:2c:bd:5c:5d:82:df:57:f8:
88:78:4f:e8:08:6f:e1:dd:9b:d3:c0:30:26:0c:04:bc:92:95:
cd:1c:30:bb:72:e0:4f:74:ce:06:e4:2f:b5:c4:70:3f:b3:70:
8d:05:c2:11:82:4d:a0:85:a0:cd:5d:db:48:c3:a8:c7:0b:f9:
fd:e5:8b:7d:48:67:b2:c2:cf:e7:3a:17:24:9d:be:68:bc:87:
55:4f:0a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:05 2025 by rpki-client