Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bSAc4jaGH5pn18yikL9n4xBkH-Q.roa
File: bSAc4jaGH5pn18yikL9n4xBkH-Q.roa (raw, json)
Hash identifier: 9/722DYMEkVgPCa0eGcyTjcwmIAhbzJHhXoBRQcgbmo=
Subject key identifier: 6D:20:1C:E2:36:86:1F:9A:67:D7:CC:A2:90:BF:67:E3:10:64:1F:E4
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420683F19C9CFE17863B1E202B0B4FB40
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bSAc4jaGH5pn18yikL9n4xBkH-Q.roa
Signing time: Wed 01 Jan 2025 05:48:10 +0000
ROA not before: Wed 01 Jan 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44834
IP address blocks: 193.233.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3f:19:c9:cf:e1:78:63:b1:e2:02:b0:b4:fb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d201ce236861f9a67d7cca290bf67e310641fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d5:0f:b1:f3:51:72:f2:2f:c5:60:1a:9f:f1:
91:f6:f7:86:a3:46:77:90:57:42:f1:01:9c:0c:1b:
b7:00:25:eb:4a:44:63:c4:d2:98:9b:b1:56:55:20:
91:c1:ee:c9:24:bd:eb:44:2f:e9:82:56:d0:b9:2d:
84:ab:80:7c:51:dd:58:24:9d:e0:c1:89:12:94:8a:
c1:52:94:53:49:64:a2:81:60:be:89:0a:3f:30:71:
39:00:49:62:f0:7e:82:bb:bd:49:49:c8:44:1d:1c:
67:3f:dd:d1:d8:84:4b:00:a6:19:b6:6d:18:b6:93:
3f:49:0f:4f:29:4a:4c:76:c6:9c:68:e0:01:2e:c0:
bd:a8:39:48:b6:9e:18:5b:b4:07:a8:d4:aa:27:22:
e7:03:12:a3:e4:73:31:9f:0b:b5:8d:98:9c:b7:ff:
51:ac:ef:59:c4:bd:e8:fb:c9:73:e5:18:f7:32:bc:
ac:ec:84:d8:15:8a:62:0c:e6:9f:a6:bf:83:db:ea:
6d:4d:c1:d9:c4:de:54:cf:ed:0a:32:7b:0b:8b:35:
f5:99:b8:c0:9e:7a:cb:6c:a4:00:37:0c:f0:be:04:
f1:8c:77:e7:44:cd:ce:1c:98:e4:2a:2d:8b:5f:14:
92:ab:1a:e1:2f:85:a3:d8:84:36:aa:21:b4:88:86:
6c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:20:1C:E2:36:86:1F:9A:67:D7:CC:A2:90:BF:67:E3:10:64:1F:E4
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bSAc4jaGH5pn18yikL9n4xBkH-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.104.0/24
Signature Algorithm: sha256WithRSAEncryption
39:23:50:cb:c4:78:3a:47:13:a8:cc:d4:eb:94:7c:ef:40:7b:
97:ed:07:19:da:4a:80:f3:de:9a:af:57:74:90:4b:f8:0d:2d:
00:df:4b:25:4b:f6:1e:19:c8:84:7b:b5:04:40:00:1f:7e:6d:
8b:8b:1e:43:c0:ce:71:64:dd:9d:91:92:0e:95:2b:49:b0:10:
f2:4f:22:00:06:df:d9:b5:96:e4:7b:9e:88:37:41:1b:c4:97:
eb:57:27:56:44:61:37:d7:a1:78:90:4f:5f:db:dc:8d:68:ec:
11:9b:b1:21:da:c0:0f:6b:e2:fb:be:41:c0:1c:f7:d9:3d:2e:
f4:89:85:74:5a:c9:08:e4:43:64:a4:6d:82:c7:59:47:44:08:
25:76:ee:67:55:6b:6c:cf:13:5f:a1:9a:d0:5d:a5:d3:65:06:
bf:85:ee:cd:6e:87:7c:27:90:5c:94:56:9e:d5:74:0d:90:3c:
8c:dd:01:6b:f0:c8:73:21:5b:3d:27:8e:17:e1:6a:14:d8:15:
68:5d:f0:27:78:b4:06:2e:fb:df:81:f9:dc:90:3d:b1:90:f6:
3f:e6:35:d0:34:ef:a2:ec:a1:70:a0:b3:b7:94:a9:3a:bd:60:
26:ea:4d:e3:ee:f2:0b:87:78:12:d2:59:5d:20:09:20:af:d9:
2a:c8:4c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:03:09 2025 by rpki-client