Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/dbWbArxAw26iNluKXUrcW4Vg-TI.roa
File: dbWbArxAw26iNluKXUrcW4Vg-TI.roa (raw, json)
Hash identifier: btYEfLq8/9yx4IhA4v1IAzOkYKFAL79qzcrLbl8TnGs=
Subject key identifier: 75:B5:9B:02:BC:40:C3:6E:A2:36:5B:8A:5D:4A:DC:5B:85:60:F9:32
Certificate issuer: /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial: 01948DB0DFAFF523E768F4A1FDB44AD48627
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/dbWbArxAw26iNluKXUrcW4Vg-TI.roa
Signing time: Wed 22 Jan 2025 11:06:06 +0000
ROA not before: Wed 22 Jan 2025 11:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201178
IP address blocks: 195.142.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:b0:df:af:f5:23:e7:68:f4:a1:fd:b4:4a:d4:86:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
Validity
Not Before: Jan 22 11:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75b59b02bc40c36ea2365b8a5d4adc5b8560f932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:61:82:99:78:12:78:b7:7e:24:1d:04:2c:
40:98:ec:bd:1d:b2:fc:ce:e1:1a:fe:fa:b5:ca:12:
4a:81:65:cc:4f:be:af:13:75:d2:c3:23:28:81:3c:
40:3f:07:fe:6d:fd:f4:66:7b:d3:9c:bf:ea:22:b4:
29:74:16:f0:cb:59:84:a8:af:40:10:d0:dc:db:b3:
67:2f:11:08:f5:b9:4a:f3:ea:de:dc:fc:2e:36:0e:
8d:8d:2b:72:48:fa:f8:3b:a1:42:da:cb:63:a7:5e:
31:b0:64:f7:18:d5:f9:ab:eb:99:5e:6c:8b:23:f2:
d6:a6:b2:fb:cd:77:ae:30:6a:16:a9:76:fd:3d:25:
5d:5a:40:fe:f3:1a:4c:ad:e8:8a:46:cd:cb:79:59:
66:35:bb:6b:a7:ea:80:2b:22:a5:e9:e9:0b:d3:d5:
11:f8:3d:86:d7:6e:4f:3c:c0:19:74:4e:80:1a:cb:
75:03:72:6d:8e:70:8a:ca:90:07:dc:cb:39:e6:a2:
1f:3c:13:99:2e:ed:b6:f5:80:18:53:e2:93:87:85:
aa:6b:7a:da:93:af:4b:b0:01:d0:8c:6a:5f:bf:b9:
49:9e:81:b6:e8:f7:bd:89:f7:86:ee:f3:52:27:08:
4f:df:85:a4:35:d9:23:ce:4c:5b:21:0e:1f:85:f0:
c9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B5:9B:02:BC:40:C3:6E:A2:36:5B:8A:5D:4A:DC:5B:85:60:F9:32
X509v3 Authority Key Identifier:
keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/dbWbArxAw26iNluKXUrcW4Vg-TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.142.192.0/24
Signature Algorithm: sha256WithRSAEncryption
59:9d:1f:e5:d8:72:31:2a:9a:4c:18:b0:c2:9c:d3:e6:cd:8f:
98:89:3c:94:54:c8:e8:ab:7b:0d:bd:b4:d0:a0:cf:a7:7c:35:
94:e5:8b:2e:6d:23:63:ef:90:df:cc:43:16:84:84:48:ef:fa:
5a:9b:e1:3f:c9:8f:3e:e6:9f:98:da:a9:33:a1:ce:60:e1:47:
61:94:56:13:81:26:d4:f9:41:68:12:6e:01:22:e8:3e:ea:7a:
2a:1c:c5:22:94:b2:71:9f:5b:d4:a5:fa:4f:3f:cb:ab:2c:71:
86:be:61:8f:65:05:60:f8:2e:88:ad:e3:dc:96:67:a5:a4:9f:
29:37:12:14:56:48:e0:86:c8:32:5b:3c:79:b7:e0:9b:ff:da:
78:25:22:bd:63:88:e9:7c:cb:28:47:0a:31:ba:29:45:65:b8:
4f:4d:82:45:ab:87:c3:66:0b:01:23:d2:b8:d4:d1:f0:74:6e:
1d:c4:e2:9c:c7:3e:3c:e9:08:94:5e:19:17:5b:68:7d:2a:24:
44:44:b2:41:03:17:4c:03:23:53:d7:c4:d2:37:f4:7d:32:c1:
4d:b5:09:f6:35:e7:78:f3:58:b5:53:1e:0e:f4:fd:c4:ef:29:
2a:ce:ed:31:1a:3c:97:5c:bd:c8:e1:7e:94:bd:4a:9f:46:97:
f1:2c:94:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:18:27 2025 by rpki-client