Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/B_NETcy_T6dlbO_OoTxAbYkFoSo.roa
File: B_NETcy_T6dlbO_OoTxAbYkFoSo.roa (raw, json)
Hash identifier: UezyKG2b7Nsm2tN2D3IwraS2OCJUWZddeNZTLktdpho=
Subject key identifier: 07:F3:44:4D:CC:BF:4F:A7:65:6C:EF:CE:A1:3C:40:6D:89:05:A1:2A
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420684DE2969925DF13330A2DCAA1DDDE
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/B_NETcy_T6dlbO_OoTxAbYkFoSo.roa
Signing time: Wed 01 Jan 2025 05:48:14 +0000
ROA not before: Wed 01 Jan 2025 05:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202973
IP address blocks: 193.233.134.0/24 maxlen: 24
193.233.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4d:e2:96:99:25:df:13:33:0a:2d:ca:a1:dd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07f3444dccbf4fa7656cefcea13c406d8905a12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:44:10:72:7c:c0:a6:8a:d3:09:b7:ea:15:
bf:68:c5:0f:25:05:23:32:2d:fb:4e:c7:e1:69:85:
24:f7:15:ab:5e:3a:2c:39:69:2a:27:e6:a9:77:b7:
9b:36:d2:79:c1:a5:43:86:9f:f8:29:43:b4:04:4c:
66:ba:fd:be:aa:6b:12:2a:cb:5f:ab:21:fb:24:51:
23:45:f9:bf:44:33:8a:5c:6e:99:cd:7e:1e:77:3c:
0a:9c:5a:38:32:72:6d:0d:46:6b:d6:e0:b0:5f:36:
ac:25:6d:67:32:ca:ef:3a:01:86:6d:65:2f:fa:e9:
6e:ea:ab:6c:de:35:9a:a2:23:c4:cb:88:16:29:d2:
67:e0:c2:75:49:5f:fe:2d:e3:e0:ab:03:69:a1:7d:
51:e0:e5:0d:10:99:00:fd:d9:6a:42:61:c1:2e:a3:
2a:0a:a2:ce:61:87:ac:ee:5f:37:0a:0b:22:ae:54:
82:28:ef:fa:2c:6d:43:84:a1:24:4c:80:7a:46:2b:
65:20:18:62:e1:be:6d:30:33:ef:f9:dc:8b:b8:02:
30:ea:81:8e:6f:d5:72:8c:15:4d:35:66:5a:97:f2:
ef:75:8f:4b:79:03:bf:6e:d2:b3:3f:c5:23:17:38:
3d:9b:a4:9c:44:e4:98:42:cc:fd:a3:6f:19:1b:9a:
e2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F3:44:4D:CC:BF:4F:A7:65:6C:EF:CE:A1:3C:40:6D:89:05:A1:2A
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/B_NETcy_T6dlbO_OoTxAbYkFoSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.134.0/24
193.233.254.0/24
Signature Algorithm: sha256WithRSAEncryption
92:0d:bb:f1:3b:7c:5e:68:96:60:63:9a:c4:74:d1:a1:2a:8f:
e1:75:3c:b1:72:c6:b2:d8:43:ef:d1:12:6d:32:73:27:53:f2:
b6:f1:91:cb:04:f2:11:7b:90:d2:f9:e5:18:c8:b5:0b:7e:2c:
18:37:14:7c:e4:1e:5f:7e:03:e4:b0:27:d1:05:a9:8b:e8:d3:
f8:f5:76:b2:c8:d4:21:1d:83:14:41:10:ae:8a:d6:55:12:10:
f8:ef:5c:85:6e:6d:b0:4d:24:84:99:1f:f8:e8:86:df:84:85:
0d:cd:79:aa:01:78:c3:fd:54:49:c6:64:46:5c:c7:84:03:be:
a9:93:b6:72:71:60:62:21:e1:f7:62:25:87:35:54:c4:e3:d9:
38:45:25:01:fd:57:4c:f3:f6:89:44:35:01:bf:5e:1d:8f:cf:
9a:76:f4:76:3a:e1:62:20:6e:b8:15:14:93:6c:2d:3b:6b:b5:
10:0e:b6:68:4c:1b:bf:15:66:a2:09:8a:71:7f:89:12:db:02:
87:3a:22:83:d9:b1:90:d5:54:9a:30:06:5a:71:bd:f9:18:38:
d5:e9:82:7d:2c:9a:1c:48:42:37:1d:98:91:c8:3c:e9:79:e7:
75:db:62:36:cd:c7:1c:78:f1:fc:e6:99:32:12:e7:cd:19:91:
d2:29:06:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:21:35 2025 by rpki-client