Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/De2u71RDPTCLEOogufA3cLr4RW8.roa
File: De2u71RDPTCLEOogufA3cLr4RW8.roa (raw, json)
Hash identifier: t6ES3/WvZqMTmQR6vr6Cy9RqBD+fR9Ee7/ZXh2ZT4rY=
Subject key identifier: 0D:ED:AE:EF:54:43:3D:30:8B:10:EA:20:B9:F0:37:70:BA:F8:45:6F
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01973B77D4C4CC3EA4BA615422A8C88F0C56
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/De2u71RDPTCLEOogufA3cLr4RW8.roa
Signing time: Wed 04 Jun 2025 15:03:18 +0000
ROA not before: Wed 04 Jun 2025 15:03:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 193.233.161.0/24 maxlen: 24
193.233.202.0/23 maxlen: 24
193.233.244.0/24 maxlen: 24
193.233.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:77:d4:c4:cc:3e:a4:ba:61:54:22:a8:c8:8f:0c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 4 15:03:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dedaeef54433d308b10ea20b9f03770baf8456f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:fd:ae:9c:ba:74:d5:23:fa:75:b6:f9:fa:
76:84:f2:b3:e4:98:26:64:5f:a1:77:22:4f:66:76:
0e:a4:8b:b3:20:eb:5d:05:83:50:ca:f6:15:6e:6c:
04:e8:d4:88:22:81:70:dd:b2:e2:79:9a:79:f8:ed:
c2:97:13:65:b7:84:7d:49:96:19:39:4c:1f:f3:1e:
16:cf:f9:b7:00:b1:ba:9b:e9:12:ae:e9:8e:5d:4d:
38:09:b5:1e:87:07:4b:ae:bc:58:7d:b4:13:29:49:
5a:c2:91:55:f7:57:b1:7f:d3:e8:21:8d:36:e8:83:
5e:c6:c6:c1:d6:d3:ad:5f:4a:9a:1f:58:97:8e:25:
dd:4d:36:65:d5:8a:b1:b0:4b:a7:a0:77:bb:21:9e:
56:0c:f3:bf:0f:05:36:52:9e:18:57:b9:72:e0:c7:
57:15:26:9e:29:60:5f:e7:1a:3b:c7:c5:6e:77:86:
60:c1:48:fb:20:cd:6c:49:52:b2:e1:24:17:42:10:
17:30:3e:22:c6:3e:94:dc:a6:77:7c:24:23:36:7a:
a8:2b:44:07:3d:9c:78:14:3f:07:f5:8f:2d:93:08:
83:ba:a6:49:b0:f5:69:da:23:bc:db:49:33:d9:f4:
d6:f9:c5:12:d6:78:77:b7:02:2c:c5:41:8e:40:3a:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:ED:AE:EF:54:43:3D:30:8B:10:EA:20:B9:F0:37:70:BA:F8:45:6F
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/De2u71RDPTCLEOogufA3cLr4RW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.161.0/24
193.233.202.0/23
193.233.244.0/23
Signature Algorithm: sha256WithRSAEncryption
89:99:49:eb:a7:f4:95:01:eb:4c:b0:65:66:2c:6c:77:9d:9f:
70:93:3e:87:d0:de:a1:78:0f:29:f5:d5:22:db:46:49:61:d7:
c4:a2:f1:e7:e5:dd:e3:ac:a8:29:14:fc:f7:f6:f7:e4:dd:a9:
af:2f:02:5c:40:4c:b3:14:32:01:8b:60:45:c9:37:d2:a6:73:
7b:15:40:79:56:f3:af:69:32:37:5a:4a:71:41:48:9c:e1:ab:
e0:94:21:38:40:78:ee:dc:d3:e2:67:42:09:8e:79:3e:be:5e:
be:a5:b5:72:0e:03:85:b6:64:93:e8:57:54:74:22:54:64:3a:
cb:31:b1:9e:9f:21:04:29:e7:d9:7a:ca:97:b6:bb:57:96:89:
1f:f0:7f:4a:58:da:db:ef:26:f4:c9:cf:11:04:b1:86:6b:78:
10:66:c0:4d:b3:73:ea:07:f8:a9:83:b6:17:ea:b4:3e:36:76:
40:3a:30:a4:50:8d:49:92:63:b4:88:5b:d0:b7:3f:94:12:35:
e1:4f:e0:17:90:e0:dd:df:eb:9a:a4:aa:8d:15:ae:a0:e7:61:
d7:16:de:4f:eb:69:4b:89:c4:fc:d5:77:51:16:00:c0:fe:27:
46:15:96:11:2b:34:f3:44:2b:3d:af:87:7c:64:ae:ae:d2:73:
39:f0:30:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:54:51 2025 by rpki-client