Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/A1my578Sd_XOq71yqpgvt_dFCOA.roa
File: A1my578Sd_XOq71yqpgvt_dFCOA.roa (raw, json)
Hash identifier: 03SGly7P4n43ZL6wTHz3F1PTmtxeZ3RvpvSa7cwl4cI=
Subject key identifier: 03:59:B2:E7:BF:12:77:F5:CE:AB:BD:72:AA:98:2F:B7:F7:45:08:E0
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0194206842105B5EE3F5F0072ECAAAF8D513
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/A1my578Sd_XOq71yqpgvt_dFCOA.roa
Signing time: Wed 01 Jan 2025 05:48:10 +0000
ROA not before: Wed 01 Jan 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49453
IP address blocks: 193.233.248.0/24 maxlen: 24
193.233.249.0/24 maxlen: 24
193.233.250.0/24 maxlen: 24
193.233.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:42:10:5b:5e:e3:f5:f0:07:2e:ca:aa:f8:d5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0359b2e7bf1277f5ceabbd72aa982fb7f74508e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:11:5a:ba:23:69:7c:27:33:82:9d:9e:46:75:
b5:15:f2:df:c2:e7:fe:8d:d5:97:8f:8b:8d:d9:33:
10:4f:b9:bd:32:39:e0:1c:f6:93:ae:66:ab:7b:57:
0d:fd:7b:9d:7f:64:0a:68:7f:4f:81:be:c7:d5:3d:
09:ab:96:d8:28:d6:9a:e5:b8:37:f0:d1:eb:1a:3f:
ff:c7:5b:6c:9d:0e:e2:8e:dd:57:9b:62:08:50:51:
48:c7:66:64:b5:67:b0:af:d4:1e:69:c0:46:61:53:
cd:78:94:b2:df:9e:8a:4c:9f:31:af:df:65:c7:28:
fd:c3:92:35:41:af:28:34:7e:fd:e9:e6:28:e4:89:
7d:09:e7:07:ff:58:80:8f:c7:57:74:21:ca:5e:fb:
16:b1:f4:5c:20:85:57:19:30:5b:45:1f:1e:9f:f3:
90:e3:b0:0a:4c:bc:8f:e7:e4:f5:0c:90:a7:5a:89:
9a:4d:99:35:e4:3b:03:2f:6d:5a:d6:21:4a:ee:e6:
68:a8:0c:c3:79:8d:e8:8e:68:e7:d0:35:fb:a7:f7:
c1:4d:c6:e8:75:9d:99:3d:06:ec:db:14:0a:e9:21:
7a:f9:13:af:66:2e:19:f5:38:a3:02:e7:52:c6:39:
03:6d:6f:c2:3e:0a:0d:14:e5:71:30:f2:f3:f4:1d:
37:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:59:B2:E7:BF:12:77:F5:CE:AB:BD:72:AA:98:2F:B7:F7:45:08:E0
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/A1my578Sd_XOq71yqpgvt_dFCOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.248.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:60:5f:6e:41:eb:a5:f9:ac:ae:55:7a:10:f0:dc:67:7e:ad:
19:b7:52:86:8e:8c:34:ae:a2:a4:ce:5d:f4:61:9f:a4:c3:5e:
f4:fa:0f:0a:e6:77:49:e8:29:8e:d9:59:69:7c:99:77:3d:1e:
5a:62:58:09:0c:0a:00:31:42:61:fd:dd:c0:97:6b:56:17:b2:
9a:0d:d9:45:a8:45:a8:1f:65:1f:65:00:20:39:80:48:51:2c:
d3:0c:e9:71:be:18:3a:07:a7:87:69:bf:8d:e7:cb:c6:c7:63:
48:69:4c:7e:a8:bf:40:e5:7d:25:8b:a3:c3:63:8a:72:89:44:
0f:01:73:2d:90:63:c4:c3:7d:07:0d:3b:5b:3a:b3:a5:f2:16:
1a:9e:36:57:58:24:ce:f4:22:8e:7a:c0:8c:ad:68:fe:49:bd:
cf:05:4e:de:83:ce:44:fa:17:6a:16:6b:b7:64:f6:9e:e5:b8:
8c:fe:01:22:ca:39:d1:5b:8a:c0:0c:dc:6f:49:6f:ad:5d:47:
1d:b0:59:fd:ed:b3:5e:cc:5b:36:d3:a2:4f:da:6f:36:2b:aa:
99:a1:5c:20:fa:b7:98:70:c5:d1:cb:af:20:92:66:54:71:c3:
96:e4:fc:bf:70:08:98:f2:15:77:fd:6e:34:7c:87:14:34:99:
34:16:45:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:34 2025 by rpki-client