Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/RN4snQmQ10sMC0pt3uecgVuseDw.roa
File: RN4snQmQ10sMC0pt3uecgVuseDw.roa (raw, json)
Hash identifier: Sf04OwdvE8nAZA8tEzv2sgqcn/Ip+2j+x7sXM2qpNDA=
Subject key identifier: 44:DE:2C:9D:09:90:D7:4B:0C:0B:4A:6D:DE:E7:9C:81:5B:AC:78:3C
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 019423D7924ACEA74DFBA9C36F36057C78D4
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/RN4snQmQ10sMC0pt3uecgVuseDw.roa
Signing time: Wed 01 Jan 2025 21:48:37 +0000
ROA not before: Wed 01 Jan 2025 21:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39788
IP address blocks: 193.23.244.0/24 maxlen: 24
2001:678:558::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:92:4a:ce:a7:4d:fb:a9:c3:6f:36:05:7c:78:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Jan 1 21:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44de2c9d0990d74b0c0b4a6ddee79c815bac783c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:60:74:88:0b:d5:b6:c7:81:08:5d:d2:6d:
4b:eb:06:fe:40:88:87:f0:86:0d:61:e5:5d:72:20:
ea:58:69:30:d2:62:e5:31:a0:ac:4d:60:c7:f8:db:
f3:36:f9:08:c3:07:60:ca:73:6b:8d:80:ba:c7:0b:
b2:1e:22:20:9a:8c:51:0c:1a:77:68:da:65:6a:93:
1b:e5:95:5e:a7:ce:3f:64:c9:4b:01:8b:1d:c5:18:
e3:bb:6f:89:da:b3:82:66:0f:af:33:57:e6:80:1a:
6c:f1:64:f7:63:36:7a:0c:47:c7:08:39:d2:de:97:
b3:ac:79:00:6b:8c:c5:54:17:6e:b6:81:45:cf:5a:
4f:39:c1:43:67:52:00:17:06:a7:3f:56:54:ce:e8:
8d:c2:4e:07:18:64:98:ba:05:46:ae:e8:fc:d5:5f:
03:e4:cf:c2:0a:3d:3d:07:78:d8:7f:36:b8:83:71:
1b:c6:99:29:f6:ff:54:14:c1:d7:2c:b8:76:6d:ae:
32:d8:c7:61:34:73:b9:6e:52:12:73:70:70:9c:49:
ef:56:13:14:21:cc:18:5d:b0:7b:67:5a:0c:e3:ee:
a4:bb:3c:79:4b:fa:c7:02:72:1b:93:81:6b:8f:1e:
68:5e:b3:ba:2a:e2:d3:e2:e0:58:a7:8c:9c:be:9a:
6c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DE:2C:9D:09:90:D7:4B:0C:0B:4A:6D:DE:E7:9C:81:5B:AC:78:3C
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/RN4snQmQ10sMC0pt3uecgVuseDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.244.0/24
IPv6:
2001:678:558::/48
Signature Algorithm: sha256WithRSAEncryption
83:c1:da:35:58:ef:43:e2:6c:7f:29:1d:4e:63:6b:4a:e8:d7:
83:62:1a:e9:87:9b:9f:ba:b2:e5:3e:5b:0d:f6:22:29:d3:09:
87:79:26:0f:51:63:52:a8:ef:cc:8c:39:05:dd:0c:43:01:09:
8b:38:89:8c:6f:17:01:8d:d0:de:7c:ee:22:ec:01:2a:b2:1b:
3e:5c:9e:ae:a6:66:fe:f3:df:af:cc:0c:d5:53:33:66:83:61:
6b:03:fd:fe:6a:86:1f:70:63:9c:d5:80:84:07:19:33:64:ce:
20:2b:e8:99:ee:90:0c:b3:40:05:06:0e:d9:e2:c7:3d:fc:d5:
f4:4d:4e:2d:ca:92:85:ce:92:34:b1:96:6c:86:1d:e8:5f:3f:
42:ed:23:0d:d5:f7:70:ce:a3:2b:e2:8b:97:88:c9:cf:21:da:
9f:77:87:5b:28:e8:3e:63:13:8b:0f:c4:f8:68:a6:98:ee:d0:
9d:1f:7c:65:d0:35:4b:51:bf:c8:13:05:c3:b3:4c:38:03:47:
6c:0c:bf:8d:35:02:9a:7b:28:ab:e6:34:19:b1:a4:0d:a6:7c:
95:5d:15:a1:35:c0:ef:be:8e:7b:da:52:00:35:76:6e:f8:25:
63:ee:c5:bb:7e:ed:99:ce:40:a8:87:bd:43:bf:1c:69:02:f7:
f0:e4:17:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:32:03 2025 by rpki-client