Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rtQ7-hoKq7HTapcerU6jLko_c2g.roa
File: rtQ7-hoKq7HTapcerU6jLko_c2g.roa (raw, json)
Hash identifier: dO0yspVO//tZpMLKKCQG0X+Nc8iW/y37+CFOPLhiNLw=
Subject key identifier: AE:D4:3B:FA:1A:0A:AB:B1:D3:6A:97:1E:AD:4E:A3:2E:4A:3F:73:68
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01942068486EF31B6D677C071688EC4E0E3C
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rtQ7-hoKq7HTapcerU6jLko_c2g.roa
Signing time: Wed 01 Jan 2025 05:48:12 +0000
ROA not before: Wed 01 Jan 2025 05:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57844
IP address blocks: 193.233.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:48:6e:f3:1b:6d:67:7c:07:16:88:ec:4e:0e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aed43bfa1a0aabb1d36a971ead4ea32e4a3f7368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:72:a2:81:b6:61:8f:20:b0:cf:ac:c2:db:
0b:5d:f1:c3:cd:05:60:89:54:46:c0:86:2b:04:78:
96:0d:77:fe:1e:00:1e:46:ba:49:d6:7e:5f:5a:f2:
44:b1:5a:54:9a:4a:0b:d7:79:6e:06:63:5c:7e:3c:
83:99:78:70:61:14:2b:ef:b4:47:32:e9:d5:e6:c5:
cf:fa:6c:2e:1e:ea:53:82:34:09:91:2f:1f:cb:0a:
60:a2:20:44:c7:4e:14:8f:ca:70:c6:3b:94:20:ac:
41:23:de:2f:f2:82:ea:cf:9b:4e:18:06:5a:7c:d1:
00:e0:a8:97:aa:fb:a0:a0:70:e1:ee:77:d4:2a:01:
43:9e:28:f5:0c:70:28:49:9b:36:72:e4:14:51:1c:
c0:6c:0c:15:38:90:e1:14:50:77:1f:23:81:8c:f7:
ba:f5:5e:c1:e8:3a:2d:ae:53:eb:9b:c8:4f:42:5b:
4a:e2:78:90:83:ce:a5:a2:b6:a1:6e:89:56:87:dd:
50:11:75:94:5d:11:0e:19:f0:52:9d:64:ae:53:54:
a2:7a:07:62:8e:23:c6:8d:ab:5b:dd:d9:cf:13:6f:
ab:1c:6b:66:74:6f:b7:a0:8d:f2:4f:eb:c8:36:94:
4b:12:1e:9a:a4:c1:cc:c2:3f:ca:68:18:18:a7:01:
05:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D4:3B:FA:1A:0A:AB:B1:D3:6A:97:1E:AD:4E:A3:2E:4A:3F:73:68
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rtQ7-hoKq7HTapcerU6jLko_c2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.244.0/22
Signature Algorithm: sha256WithRSAEncryption
95:8b:29:85:85:28:dc:22:ce:55:a4:b4:e3:1e:09:bb:79:13:
cd:d7:ad:6f:1b:a0:10:df:4e:2b:68:de:87:4e:a1:7a:66:8d:
b8:24:1d:d5:cc:f4:21:0b:d1:5b:b2:c3:85:86:fd:c4:bc:ce:
25:0f:7f:07:fa:ff:8e:72:38:f1:5b:39:71:22:1b:bc:2c:26:
7b:cd:23:c9:d9:60:cb:50:6d:5b:40:cf:dd:a3:fa:45:7e:01:
15:ad:41:79:b6:ed:db:d6:91:29:c1:7f:7a:b3:12:bf:7b:21:
5a:59:db:a0:48:08:7a:07:92:3a:ba:10:7e:9e:1d:cf:a6:2a:
e9:db:48:42:ab:f0:12:76:5a:45:eb:08:d6:34:15:9a:7e:3e:
e3:11:b6:82:46:08:eb:a8:ff:01:50:8c:ff:b1:ea:af:5f:aa:
39:d0:8f:01:89:69:d1:92:d6:f8:ad:4a:f2:0f:a9:77:d6:bf:
f1:3d:2c:cc:82:f2:29:2d:3d:39:af:ad:df:ef:49:17:60:8c:
a8:3b:ea:2d:0c:8e:0e:32:77:d1:ae:b4:ce:3d:52:e0:9a:83:
a8:f0:85:81:64:13:37:58:7a:fc:cd:30:5c:a5:2b:b0:ea:83:
48:20:74:9b:ed:62:6b:26:f0:55:82:45:af:22:a0:a2:b0:19:
5b:af:06:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:13 2025 by rpki-client