Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/7nWCEa_lEJs_DilYRbnVpURmaDE.roa
File: 7nWCEa_lEJs_DilYRbnVpURmaDE.roa (raw, json)
Hash identifier: aLXm1kcgedtwLbcoZ6VUAgWtcV1HE8F1RqZwI2M99Zc=
Subject key identifier: EE:75:82:11:AF:E5:10:9B:3F:0E:29:58:45:B9:D5:A5:44:66:68:31
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420684D9B1EA7036873476F9ECFBCB8C3
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/7nWCEa_lEJs_DilYRbnVpURmaDE.roa
Signing time: Wed 01 Jan 2025 05:48:13 +0000
ROA not before: Wed 01 Jan 2025 05:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202423
IP address blocks: 193.233.31.0/24 maxlen: 24
193.233.72.0/24 maxlen: 24
193.233.149.0/24 maxlen: 24
193.233.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4d:9b:1e:a7:03:68:73:47:6f:9e:cf:bc:b8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee758211afe5109b3f0e295845b9d5a544666831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9c:96:df:d3:dc:8c:18:0d:de:72:64:16:89:
8c:b2:9b:29:32:4d:1e:51:7d:cd:6b:0c:82:f8:85:
59:81:73:ad:6f:2d:93:e9:65:72:71:12:3e:df:a8:
cd:37:70:99:c5:ea:ba:49:65:fd:f3:d5:e9:a0:82:
6e:93:e1:ab:b0:3b:ac:f1:6c:73:ef:07:d1:61:d1:
92:61:fd:8e:97:e5:d1:bc:35:29:a9:f5:91:29:e7:
61:0a:fd:7a:80:35:75:5c:00:0d:17:68:54:a3:c4:
78:96:b2:8d:b4:75:84:a1:b6:9e:7f:67:2e:6f:60:
d1:f5:7f:2d:dc:b4:7e:dd:18:f0:d2:9f:2d:aa:6a:
18:77:33:53:f2:18:fd:0f:01:4a:48:40:35:ca:70:
be:79:4d:f7:f9:0a:1c:71:23:e0:47:f8:37:8f:7a:
44:28:d9:52:79:a6:40:0e:bc:41:70:a9:7d:e0:28:
81:66:be:e9:ea:07:7e:de:71:98:79:60:7c:61:d2:
c5:cf:2a:95:e4:45:4d:8a:83:69:42:bb:15:3b:fb:
f9:f5:6f:da:cf:43:52:62:53:28:90:c0:8f:49:b6:
90:0c:98:be:53:ce:38:c5:f4:d8:33:c2:ef:93:76:
8e:58:93:76:67:da:c6:2b:94:5a:1d:31:1b:b1:2c:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:75:82:11:AF:E5:10:9B:3F:0E:29:58:45:B9:D5:A5:44:66:68:31
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/7nWCEa_lEJs_DilYRbnVpURmaDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.31.0/24
193.233.72.0/24
193.233.149.0/24
193.233.174.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f2:a7:9a:09:7b:74:72:8b:30:d0:96:e1:10:ee:7b:9e:86:
95:b9:34:d6:56:7c:52:cd:7e:a4:2f:a6:5b:1b:4a:22:7a:7f:
21:ee:7d:a9:ea:cd:87:20:8e:90:a8:d1:f1:95:9f:ba:d1:06:
8c:58:79:56:19:43:a4:b2:8f:ea:58:7b:99:0a:01:cb:79:04:
bf:51:a6:37:26:8f:bc:d5:10:6b:c5:cc:27:e9:2a:a6:85:92:
e0:61:5b:e3:0b:68:1e:1d:e2:31:61:9d:ea:6a:4c:2d:1c:b3:
3d:05:b3:21:f5:1d:2c:c5:03:da:a3:50:5e:3c:66:bf:37:d0:
5f:15:a1:2b:8c:c7:b9:7c:7b:5a:a7:93:2e:e3:f7:eb:fb:6f:
ca:ff:56:4b:6c:db:81:f3:93:0b:5f:c4:13:3e:e4:88:96:62:
9b:91:5e:b6:a2:4f:b9:9e:56:1e:dc:80:9c:33:94:2e:f4:59:
6e:71:46:ce:60:ba:a0:a9:74:53:db:bf:3a:4b:43:d1:1e:c0:
8d:5f:1e:d5:fa:a8:e6:00:90:44:91:25:45:18:4e:8f:4d:c7:
00:cb:6e:d9:50:42:34:50:74:49:f1:48:9e:c0:c7:fd:87:1f:
f7:82:b2:19:ea:d5:09:55:96:a3:fb:c3:b1:c4:9e:9d:c1:47:
45:12:b1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:58 2025 by rpki-client