Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1XjTQm_pSzSVRvoF2hK8UjSzQdI.roa
File: 1XjTQm_pSzSVRvoF2hK8UjSzQdI.roa (raw, json)
Hash identifier: FSvLvNZh/7zwrMu5zbEh6W9+FYJFYemZ45f0iSD98OU=
Subject key identifier: D5:78:D3:42:6F:E9:4B:34:95:46:FA:05:DA:12:BC:52:34:B3:41:D2
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01942068403F242812322A4FB39221BB990E
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1XjTQm_pSzSVRvoF2hK8UjSzQdI.roa
Signing time: Wed 01 Jan 2025 05:48:10 +0000
ROA not before: Wed 01 Jan 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48430
IP address blocks: 193.233.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:40:3f:24:28:12:32:2a:4f:b3:92:21:bb:99:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d578d3426fe94b349546fa05da12bc5234b341d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b6:cc:d7:39:f0:2d:65:c4:35:f7:e7:44:35:
d0:d5:ed:dc:83:fb:e0:f8:1a:6b:71:71:64:a9:00:
ca:cb:b1:86:29:61:25:84:e2:40:0c:69:6d:8d:33:
81:a6:a1:15:25:26:03:40:7a:ab:6e:99:0c:d8:8a:
4c:02:55:47:29:87:34:e7:11:8e:a9:9d:1d:93:3f:
a7:7e:a0:79:45:6a:b1:a8:71:e7:4e:f0:5f:01:25:
56:af:aa:1f:1b:ad:66:10:b5:f2:07:7f:7a:92:0e:
5e:e4:aa:f9:3e:96:f7:a6:6d:20:2b:07:1d:8d:41:
5e:05:bb:33:40:5e:56:5d:aa:d1:eb:c7:d7:76:31:
05:01:0e:cd:a5:76:07:0b:0d:86:4e:e2:38:92:e8:
02:aa:08:00:c9:42:de:f4:8e:b0:63:8a:2a:e8:99:
6e:1f:74:6f:aa:af:3b:03:d7:3a:21:20:94:a5:b7:
18:1f:26:81:b8:a8:2f:48:d5:61:61:47:e1:e8:a4:
09:26:bd:09:44:f7:72:30:95:1f:6f:a3:54:0e:5b:
0e:4a:66:92:f9:63:e2:d4:c7:1d:08:9c:4c:fa:62:
eb:21:52:f1:9b:00:b2:df:e4:99:95:6e:d4:79:02:
b3:59:90:0e:72:b4:b6:cb:53:8b:90:2f:38:72:a5:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:78:D3:42:6F:E9:4B:34:95:46:FA:05:DA:12:BC:52:34:B3:41:D2
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1XjTQm_pSzSVRvoF2hK8UjSzQdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.47.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:3f:08:16:17:93:cc:5b:ad:b5:38:aa:e5:60:04:6c:10:2a:
59:ab:b9:62:4f:9d:ae:a3:4b:d1:bb:cc:94:22:a8:27:2d:2e:
8a:0b:53:b1:78:f1:91:f4:dc:93:08:3b:5c:a9:2b:d5:b4:c4:
81:03:db:f9:44:55:0e:bb:35:8d:58:43:53:7d:01:0b:c7:ab:
79:77:e3:27:f9:99:d6:e6:33:18:27:f1:fa:be:c6:27:7b:be:
33:bd:8a:18:3b:fe:4a:4d:42:d1:53:3b:1b:67:7c:c4:69:c9:
4e:70:55:74:26:93:33:76:b0:fa:a3:db:03:4a:c1:63:e4:b6:
30:6d:33:cb:a3:3e:6f:2a:75:51:07:0d:15:76:bf:48:71:34:
8b:cc:4c:21:72:74:1c:ff:e2:ef:45:d1:19:e8:e9:16:88:d6:
2a:c8:54:1a:14:4a:9e:17:3b:65:81:e5:12:40:aa:07:6b:25:
86:05:8b:10:b9:fd:8d:b5:12:15:bd:58:6a:c2:86:36:94:35:
d5:20:5b:44:73:f3:17:e5:0e:10:ac:ef:91:f6:04:b4:db:1c:
7f:d5:78:a7:28:df:d8:d3:86:53:d2:b1:f8:ae:b3:4f:3e:69:
92:a7:34:9b:14:5f:5b:a7:e3:92:ea:5b:cc:49:41:78:12:3f:
1d:ab:c0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:37 2025 by rpki-client