Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/a0RRgx7_17MRQY0QEGYvnSPepZU.roa
File: a0RRgx7_17MRQY0QEGYvnSPepZU.roa (raw, json)
Hash identifier: YVzxS9jFVMbMgJf+c2GFQwY/wSVZdg9tW30Q3WHGzsg=
Subject key identifier: 6B:44:51:83:1E:FF:D7:B3:11:41:8D:10:10:66:2F:9D:23:DE:A5:95
Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial: 0194228DB89BFE38944C5FBB87DA7942A59F
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/a0RRgx7_17MRQY0QEGYvnSPepZU.roa
Signing time: Wed 01 Jan 2025 15:48:20 +0000
ROA not before: Wed 01 Jan 2025 15:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3223
IP address blocks: 195.234.0.0/24 maxlen: 24
195.234.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b8:9b:fe:38:94:4c:5f:bb:87:da:79:42:a5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Validity
Not Before: Jan 1 15:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b4451831effd7b311418d1010662f9d23dea595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c2:ad:e5:a3:2c:1c:ad:2b:f3:c4:c2:36:9c:
53:ea:11:ee:71:67:a2:74:ea:19:71:6c:4f:91:b2:
fc:30:5a:cc:0d:5b:16:e6:4c:b1:98:4a:c9:a1:a3:
38:43:c4:99:79:b9:ca:de:97:80:78:47:f4:c9:6a:
38:52:95:4e:0a:74:cd:c5:2d:53:21:44:70:f5:2e:
5e:a6:70:c9:10:26:ca:01:f8:5f:cf:7b:ae:18:4e:
41:da:81:c7:fa:c6:e2:d4:51:02:90:1c:e1:4c:d8:
6f:8d:2d:51:cf:d5:df:14:a5:68:8e:7d:7e:d1:cf:
eb:03:3f:47:0c:d5:06:01:7b:e4:ef:6c:9d:78:4e:
43:dd:0e:97:f8:b5:0d:ea:db:8c:a9:5a:e9:5a:9d:
76:7e:d6:bd:ea:f0:37:f7:9b:c7:be:5d:0a:5d:2d:
d4:9a:e0:aa:ca:32:90:6d:70:9e:ec:31:34:53:f5:
8c:ed:a7:23:48:da:4d:db:de:f1:2f:e6:96:c8:89:
e9:92:ce:10:59:c8:6b:6c:91:2d:12:24:78:70:15:
5c:97:ad:d0:66:0a:18:0f:54:49:2a:f6:7d:28:13:
45:b9:82:0a:1a:72:c3:55:05:18:d1:2f:b6:b1:fa:
01:a3:0d:3e:a1:df:58:0b:c1:23:4a:24:42:d0:9d:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:44:51:83:1E:FF:D7:B3:11:41:8D:10:10:66:2F:9D:23:DE:A5:95
X509v3 Authority Key Identifier:
keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/a0RRgx7_17MRQY0QEGYvnSPepZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.0.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:ec:c4:fe:4e:ff:5d:c4:e3:74:5b:43:49:b6:f8:91:93:38:
56:87:4b:4f:03:db:e5:60:fe:c2:1b:30:ee:b2:a9:8e:35:7c:
38:df:77:3c:5c:02:d6:d3:54:f4:8c:70:ee:ab:c1:f9:68:df:
2b:9b:d1:a2:ba:b0:a1:2f:a7:be:61:99:f2:19:33:62:d6:20:
84:47:96:2d:00:5c:30:37:42:96:57:ce:e0:7b:d9:54:f0:ec:
12:3e:7d:0a:25:63:4d:4e:ac:a6:8d:a3:f1:49:80:15:a0:0a:
3a:6b:8e:5d:cd:11:db:5a:69:bb:a3:86:dc:be:72:89:3d:e5:
e0:5e:e7:f5:5e:6f:83:7a:fb:2b:23:41:60:1c:a4:c6:59:ab:
8e:ad:ec:93:35:6b:ce:51:06:c1:41:d5:b0:ce:12:33:72:64:
3c:52:2d:98:77:1f:18:08:12:ce:ce:41:33:5f:6e:d6:67:f1:
a7:bc:2a:4f:f4:cb:64:f3:c3:18:c6:f3:63:c1:2a:92:56:ac:
f9:61:ee:a0:fc:b2:02:06:f6:a0:a8:ed:5f:b6:70:e8:dd:5c:
01:64:44:16:1a:03:42:1d:b6:67:8c:7a:b5:65:a3:ae:3f:20:
f7:21:b4:7b:c5:b1:b1:14:c9:95:f7:c1:ac:6f:24:35:c6:18:
57:6b:64:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:24:37 2025 by rpki-client