Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1Qa1324DfnRLP9CiljfSSZR-4qo.roa
File: 1Qa1324DfnRLP9CiljfSSZR-4qo.roa (raw, json)
Hash identifier: 3fCi5Tz1UETO8NoSNt/2CgJH90e+u/3Dq38NPjgYNWM=
Subject key identifier: D5:06:B5:DF:6E:03:7E:74:4B:3F:D0:A2:96:37:D2:49:94:7E:E2:AA
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01942068397638C5F266B5B9CF79D3F30545
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1Qa1324DfnRLP9CiljfSSZR-4qo.roa
Signing time: Wed 01 Jan 2025 05:48:08 +0000
ROA not before: Wed 01 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8325
IP address blocks: 193.233.50.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:39:76:38:c5:f2:66:b5:b9:cf:79:d3:f3:05:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d506b5df6e037e744b3fd0a29637d249947ee2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:2b:ae:d6:3d:c2:37:a3:37:6e:82:1a:e8:
41:8d:57:96:50:b3:40:58:30:f3:fe:30:4c:e9:ce:
10:fa:5c:d6:ba:98:1b:76:3c:d2:e2:7b:9b:19:3b:
a6:89:1d:5e:68:87:72:7a:21:c9:c6:e0:97:54:0f:
0d:16:bf:c1:3e:af:1c:0e:79:bd:bc:e1:ea:3c:26:
f9:2b:f7:27:fc:44:27:ab:b4:83:72:48:10:71:9d:
5f:55:08:37:37:33:6d:da:3f:02:59:fa:0a:24:9d:
9e:8a:9f:c3:e7:8f:83:e7:83:cb:7d:90:2f:7a:14:
ff:f6:cc:e3:cd:e3:66:51:dc:34:4c:bc:8e:50:b5:
f8:40:b8:a1:73:27:2d:c5:bb:26:9e:28:c3:f4:87:
a0:85:10:2c:9e:9b:85:08:fd:85:dc:c8:25:9c:90:
2c:7a:90:f0:4b:e4:ac:50:26:15:6e:84:0e:4e:41:
4f:48:a4:50:4b:3d:9c:61:5e:4f:f7:55:29:b0:02:
5b:d7:8a:41:0d:85:ef:bc:ac:32:a2:23:6a:62:3b:
30:eb:ee:ff:e7:35:ed:c0:26:94:b2:cb:75:e3:01:
0d:47:e3:4b:23:6d:49:bc:7e:2e:89:56:cc:df:97:
f2:45:73:b5:ae:af:86:0c:36:67:16:ff:e2:7c:50:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:06:B5:DF:6E:03:7E:74:4B:3F:D0:A2:96:37:D2:49:94:7E:E2:AA
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1Qa1324DfnRLP9CiljfSSZR-4qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.50.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:03:ad:2b:78:90:8a:2e:8a:8b:ab:86:99:3a:9a:19:5c:aa:
9f:f8:58:1d:a0:1e:38:b8:03:e1:d6:49:03:dc:65:2c:ab:a6:
01:b6:93:a1:7c:32:16:2b:87:df:4e:df:34:c1:63:5a:97:19:
a5:24:42:5e:ae:b9:36:1c:4e:22:62:c2:a1:4c:64:66:5e:25:
82:04:cd:0e:8d:6a:7b:e5:5d:6a:e3:fb:f6:eb:bb:3d:d8:47:
48:fd:51:99:ef:25:82:b3:46:58:71:9e:25:3c:cc:54:6e:d6:
6c:1a:fb:c2:9c:a5:d8:25:39:40:49:7e:89:81:e0:81:1b:0c:
dc:c3:36:60:30:4e:60:8d:5e:ea:61:7c:ec:65:c6:92:9a:fb:
e8:7a:2f:47:47:4b:c8:1b:10:ed:50:09:af:18:aa:96:73:1e:
28:98:67:82:66:cf:9c:4a:12:b9:d7:16:0f:de:92:6f:da:97:
00:36:40:49:2c:19:2d:08:59:81:b1:5e:28:88:75:f8:03:38:
6e:ad:fa:17:5b:5e:81:7a:bf:0e:53:59:1c:b8:55:4e:72:37:
7c:a4:23:03:61:80:e5:f9:ad:b7:ed:b2:49:4f:92:0c:85:7f:
b8:64:34:21:a4:20:c8:4a:56:88:9e:5c:f1:d7:47:fd:38:71:
6d:8e:cb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:08 2025 by rpki-client