Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/wqvUrg3ytAmyescNq7O97CA45e8.roa
File: wqvUrg3ytAmyescNq7O97CA45e8.roa (raw, json)
Hash identifier: e+ouxKVrzJBnu8qX3QbAYldaZ2LWrtwIg9cy15dfuBM=
Subject key identifier: C2:AB:D4:AE:0D:F2:B4:09:B2:7A:C7:0D:AB:B3:BD:EC:20:38:E5:EF
Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial: 0194236A3D09C0B3300D40E3A4C5D53C7EE9
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/wqvUrg3ytAmyescNq7O97CA45e8.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2386
IP address blocks: 193.38.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3d:09:c0:b3:30:0d:40:e3:a4:c5:d5:3c:7e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2abd4ae0df2b409b27ac70dabb3bdec2038e5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:fd:31:98:59:46:75:58:5b:ba:5a:48:a1:
a2:7a:80:21:3c:4a:5a:3e:86:2d:9a:25:7b:cb:d1:
5d:65:22:31:25:70:4e:1a:d5:15:fd:e3:e2:4a:7d:
99:fb:82:22:3d:8f:e7:0a:67:09:4c:fd:43:7d:5c:
9d:ae:a9:3a:6d:9f:7b:2b:19:30:e3:9a:43:8b:45:
e5:78:37:72:05:d4:05:b8:d7:30:7f:b2:9c:39:ae:
9b:d8:e3:6b:15:29:ec:0e:92:33:7e:03:cc:94:ac:
32:7b:d5:9a:7a:f1:46:8e:3c:f6:a7:d6:d4:c3:f7:
c9:0b:08:71:ce:7f:ae:80:58:ce:95:9f:9c:48:bd:
bd:20:e7:86:be:2c:81:96:a2:2d:6f:21:93:a5:f5:
f5:cc:a0:b4:6f:e2:65:bb:6e:16:fc:5d:ee:cd:ed:
57:8b:3b:c3:01:9a:91:78:2b:bf:65:15:ce:ef:f3:
fe:39:66:45:a6:01:24:d8:56:7b:63:1e:37:a0:20:
43:93:c7:92:81:86:10:29:df:d4:1e:e4:57:22:65:
e4:a9:d3:25:d5:80:ea:16:fd:32:2a:fe:98:6c:ff:
2d:a1:8d:78:b0:8b:d3:97:0f:70:30:fe:61:bd:f1:
41:9a:d1:80:26:77:44:48:85:6c:af:a0:d5:7a:99:
bd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AB:D4:AE:0D:F2:B4:09:B2:7A:C7:0D:AB:B3:BD:EC:20:38:E5:EF
X509v3 Authority Key Identifier:
keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/wqvUrg3ytAmyescNq7O97CA45e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.171.0/24
Signature Algorithm: sha256WithRSAEncryption
15:75:c8:45:53:b3:af:63:f0:db:ea:c8:a2:53:fe:f2:c1:91:
77:f7:eb:f3:69:43:a7:c8:41:be:b1:4c:a4:17:0c:b3:ba:a3:
2b:5e:ae:8d:85:87:39:3d:b9:e6:1f:26:dc:11:f7:40:7e:7a:
0d:40:40:54:1b:e5:6d:df:ae:23:22:d9:89:a6:57:bc:78:a2:
4c:72:fd:a7:66:75:87:0b:1c:0f:a4:35:14:5e:09:ee:bc:5c:
e4:f6:52:4a:d2:31:f6:54:ac:5d:41:ed:cb:df:c0:6a:44:8f:
5f:57:2d:5e:70:c4:0b:52:9e:65:58:84:3d:15:80:3d:fa:eb:
f1:d7:ef:c3:0d:0d:9f:9a:bc:2e:00:54:b0:6a:67:fb:f8:c2:
5c:70:c9:ef:5a:3f:bc:f3:9c:d4:cd:10:d0:e4:d2:e3:f2:79:
a7:9d:28:7d:a3:2b:5a:c5:56:0e:cc:81:98:a4:06:e6:8f:6e:
8f:e6:86:63:61:99:5c:3e:0c:13:76:08:b7:99:34:35:cc:43:
9a:8f:4e:a7:29:8d:8c:b5:ae:c5:21:a8:f0:fe:ce:9b:db:d4:
58:67:c6:80:67:9e:96:18:19:d5:48:fe:96:db:76:1b:a1:44:
5b:1e:7e:05:ee:18:fb:6d:ee:4e:e0:ef:4c:54:0d:71:46:1b:
be:b4:91:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:19:47 2025 by rpki-client