Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/AWRVDrJmsEsB9Z159jyFngqyGLE.roa
File: AWRVDrJmsEsB9Z159jyFngqyGLE.roa (raw, json)
Hash identifier: DirE8id/agwWNhmtyshobBEdAnWhXbNRd3+Zdg4CPc0=
Subject key identifier: 01:64:55:0E:B2:66:B0:4B:01:F5:9D:79:F6:3C:85:9E:0A:B2:18:B1
Certificate issuer: /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Certificate serial: 0194222023CE0C1A6C711F4989BD3CFA5A7B
Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/AWRVDrJmsEsB9Z159jyFngqyGLE.roa
Signing time: Wed 01 Jan 2025 13:48:39 +0000
ROA not before: Wed 01 Jan 2025 13:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34428
IP address blocks: 193.41.57.0/24 maxlen: 24
2a06:7d40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:23:ce:0c:1a:6c:71:1f:49:89:bd:3c:fa:5a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Validity
Not Before: Jan 1 13:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0164550eb266b04b01f59d79f63c859e0ab218b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:0d:03:ad:18:14:fb:86:b3:11:99:52:1f:
b6:33:4b:3a:d1:a7:01:34:d0:4d:d0:55:f1:02:51:
55:d6:6d:97:0b:45:98:67:91:e2:16:4b:62:c8:94:
7d:df:b1:49:6c:5f:e2:98:69:4a:94:ae:90:bc:4e:
0e:62:ae:b3:ff:05:24:1c:e6:43:20:18:98:f9:da:
a5:46:1f:54:1a:86:e1:ee:6d:b7:9e:f6:30:fa:4b:
f2:7b:72:09:45:dd:e3:ff:92:be:8f:32:c2:b7:2e:
f6:d6:05:f9:1b:da:13:88:92:a5:73:86:bd:f7:db:
f8:ca:5f:a6:3e:84:01:87:a5:88:1c:5d:1e:42:28:
a5:25:e3:dd:c1:27:52:5c:54:eb:ad:5d:18:22:20:
55:4a:ab:bb:1a:7f:b8:68:b7:fc:54:df:5d:e7:0d:
75:35:79:75:f3:85:f1:d1:4e:f1:e2:09:4e:94:1c:
7e:4c:65:45:74:5c:d3:ba:df:4d:36:ff:0b:6e:94:
9f:85:6c:0f:6b:a0:8b:5c:51:8a:81:79:7d:55:0b:
0b:2e:fa:50:c4:db:6e:3b:ad:1d:23:64:8e:be:f8:
c5:8c:6b:58:d2:65:b4:51:60:2d:88:28:68:52:ed:
2e:ef:bc:2f:ae:ee:10:6f:2e:67:31:7b:92:62:22:
9b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:64:55:0E:B2:66:B0:4B:01:F5:9D:79:F6:3C:85:9E:0A:B2:18:B1
X509v3 Authority Key Identifier:
keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/AWRVDrJmsEsB9Z159jyFngqyGLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.57.0/24
IPv6:
2a06:7d40::/29
Signature Algorithm: sha256WithRSAEncryption
3f:7b:9e:e4:13:8b:5f:fa:ae:2a:b1:61:1c:8c:c1:0f:ec:0d:
56:c0:0e:28:ea:cb:d3:47:0f:bc:a8:15:7c:ba:e5:1e:63:3e:
1f:ec:6d:3c:0f:91:43:27:c0:7d:d1:a5:26:73:93:20:fe:10:
89:b4:08:bf:f0:18:d9:16:98:0d:53:d1:8c:c5:1a:30:5d:3f:
aa:f6:9d:ed:02:d7:f7:3f:6d:2b:b7:9c:c3:35:b2:6d:2f:14:
04:1b:08:ea:57:46:af:89:b6:9c:5e:c1:67:88:f8:7e:c0:0d:
ef:67:32:56:66:c3:2f:d0:47:1d:ec:70:b7:4f:40:2b:14:46:
54:3e:bd:95:e2:92:a6:24:00:ec:46:58:36:13:b5:dd:d8:06:
4e:ea:26:d9:e6:d3:e6:49:84:48:f7:7e:10:a3:77:86:75:e8:
e4:e8:86:68:1f:60:06:e8:f5:f8:20:59:c4:d5:81:f5:aa:51:
d9:4b:81:9e:55:8e:a6:a2:f5:95:39:dd:1d:3e:f4:40:60:51:
28:3d:da:e4:f2:c7:0d:5e:70:29:c4:f1:4d:f3:ba:ff:d5:5e:
b1:71:6a:9b:67:ae:4d:38:f9:8d:9b:40:56:42:45:7b:d7:b2:
8e:83:f7:5f:28:5f:c7:5c:c9:fc:50:48:db:cb:8c:d5:0e:da:
b7:fd:e7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:03 2025 by rpki-client