Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/c3cfCpPele1fDi8UyS3_TO9IOZU.roa
File: c3cfCpPele1fDi8UyS3_TO9IOZU.roa (raw, json)
Hash identifier: x4G7KBYVMCONibc2Rol9WiF29BGQsdbC/SUMmPlKdpc=
Subject key identifier: 73:77:1F:0A:93:DE:95:ED:5F:0E:2F:14:C9:2D:FF:4C:EF:48:39:95
Certificate issuer: /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial: 019427476555373BC0122FC5A21740EAAB5B
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/c3cfCpPele1fDi8UyS3_TO9IOZU.roa
Signing time: Thu 02 Jan 2025 13:49:37 +0000
ROA not before: Thu 02 Jan 2025 13:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8758
IP address blocks: 193.247.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:65:55:37:3b:c0:12:2f:c5:a2:17:40:ea:ab:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Validity
Not Before: Jan 2 13:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73771f0a93de95ed5f0e2f14c92dff4cef483995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:28:a1:54:8e:94:a3:10:5f:69:cd:38:e4:
73:86:29:d8:2d:db:d3:86:99:08:4f:a4:a0:8f:0d:
d6:fe:31:6e:60:c3:44:36:7b:2a:ba:e5:90:da:25:
d8:82:04:f3:b9:5c:10:a1:a8:7f:1d:03:4f:61:05:
ae:ab:3b:0a:bd:a3:22:da:4f:8d:b5:5f:8f:43:b2:
b3:87:2f:c6:85:e6:d8:fd:5c:3a:01:4c:0e:be:4f:
e9:e8:f2:fd:c6:13:13:c3:f0:1e:c8:f6:ba:99:b3:
c6:ee:23:9b:62:82:60:62:ea:d5:73:c3:b4:1b:fd:
71:7e:2d:c2:a2:fa:ff:e8:8c:05:11:14:00:3a:b8:
36:a7:87:41:a8:fa:9e:82:0e:03:bc:2b:35:b4:59:
38:7d:b7:16:31:ad:2d:9b:76:f7:99:c1:a0:12:d0:
d8:41:24:6c:1d:a7:78:e8:64:6e:3f:a1:76:87:b5:
46:55:4c:a9:40:6e:0e:7e:28:1d:fd:3e:2b:50:d0:
4b:ff:8f:f0:0b:6f:eb:b6:88:0d:a3:88:4f:c8:38:
ee:0e:3f:68:31:72:dc:7a:79:9a:35:7e:4e:95:b6:
bd:22:cf:16:49:43:8a:dc:63:11:a8:c9:0c:6b:0b:
34:0e:a0:b5:31:d1:29:9f:43:ba:bb:29:39:5e:49:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:77:1F:0A:93:DE:95:ED:5F:0E:2F:14:C9:2D:FF:4C:EF:48:39:95
X509v3 Authority Key Identifier:
keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/c3cfCpPele1fDi8UyS3_TO9IOZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.148.0/23
Signature Algorithm: sha256WithRSAEncryption
63:ed:e3:a2:78:51:37:94:57:6a:eb:63:23:95:25:ee:c6:7d:
5b:01:ed:10:ea:42:2f:cc:45:25:c0:e3:3f:39:f2:8f:c1:2d:
35:57:d5:34:70:f3:cf:33:4e:a1:2a:21:dc:b5:f0:43:36:cb:
cd:31:69:e3:9d:9f:97:0d:bc:05:a8:72:17:ef:fc:32:bb:50:
fd:68:7b:af:37:8e:62:6c:ba:71:49:0b:66:92:54:81:8c:0a:
fb:d1:b6:41:68:6b:dd:4d:73:60:a5:5f:00:36:e6:78:4d:1a:
1d:c6:7a:43:3d:16:05:13:8c:90:02:e9:53:2c:20:74:8b:53:
10:d8:9f:bd:04:cf:d6:88:ed:3c:97:76:06:fa:89:00:7b:f0:
45:db:a1:fd:9d:96:6c:f4:63:40:d9:e4:a7:63:29:6a:35:84:
06:b1:65:5c:e9:cc:d4:a3:cd:9f:12:8f:45:91:5b:6d:7a:03:
d2:8d:50:90:98:52:00:30:c8:c4:40:98:03:0f:fc:b9:b1:dc:
8c:72:a3:9e:11:47:07:e7:3a:ca:c8:44:99:ab:b1:b8:6c:c5:
31:6a:35:6c:5b:95:a6:e8:25:b4:e0:c3:84:03:0a:79:76:5d:
7f:32:4d:45:4b:15:98:25:72:d7:13:6a:8b:43:d4:e7:a0:be:
41:0f:bb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:13:39 2025 by rpki-client