Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/OyVcB1brzSxuoeEjBo4fT0W9OFc.roa
File: OyVcB1brzSxuoeEjBo4fT0W9OFc.roa (raw, json)
Hash identifier: sut6tQHQTuBMJAc0/1shERZEk1RWFKSSDeDy5cd5Klo=
Subject key identifier: 3B:25:5C:07:56:EB:CD:2C:6E:A1:E1:23:06:8E:1F:4F:45:BD:38:57
Certificate issuer: /CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Certificate serial: 01941FFA4A686EBC3C285F548F6D2F9556C0
Authority key identifier: 6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/OyVcB1brzSxuoeEjBo4fT0W9OFc.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34272
IP address blocks: 193.110.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4a:68:6e:bc:3c:28:5f:54:8f:6d:2f:95:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b255c0756ebcd2c6ea1e123068e1f4f45bd3857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:87:81:58:18:b9:80:22:a0:a3:25:af:b1:
0e:86:15:49:e6:dc:db:94:4c:ce:ed:f7:08:e2:71:
94:0f:e8:ec:ce:4f:46:cc:95:f6:f8:e7:24:7c:d7:
b7:f6:64:d3:2e:8b:b2:93:d6:cf:05:94:82:04:2e:
6b:56:c3:c4:ea:bf:b3:15:53:fd:86:fb:39:e1:a4:
f4:f4:cf:5b:a6:39:fa:6d:34:5f:cd:7c:34:f1:1e:
76:8a:e7:59:69:4d:db:b8:36:bd:a5:65:c1:c3:8c:
e0:69:3c:ec:82:48:36:ab:a8:29:bf:6d:0b:17:1d:
33:6a:b6:21:2d:09:af:f4:b5:96:28:d3:17:02:06:
80:d0:22:e0:7c:da:d8:84:03:8b:e4:fe:07:cf:69:
f7:51:69:8c:99:bc:42:5c:91:d1:bd:24:d0:cb:0d:
f7:02:35:62:d0:82:64:cd:7f:db:0b:d0:70:81:35:
95:47:dc:09:78:d8:01:87:98:e0:0a:2c:58:22:fe:
a0:1a:a7:f8:13:2d:da:9f:72:a4:b6:3a:ab:7c:f0:
f2:ea:e1:cb:aa:5e:0c:3c:52:9d:82:7c:f4:14:46:
09:d0:66:df:77:ea:b8:de:9d:d4:ed:0f:c1:d4:e4:
38:cc:19:32:5d:b8:f3:6c:ec:78:73:13:28:4b:4a:
01:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:25:5C:07:56:EB:CD:2C:6E:A1:E1:23:06:8E:1F:4F:45:BD:38:57
X509v3 Authority Key Identifier:
keyid:6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/OyVcB1brzSxuoeEjBo4fT0W9OFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.132.0/24
Signature Algorithm: sha256WithRSAEncryption
47:39:da:6a:ba:08:ac:fa:87:1c:5e:37:f1:66:f0:76:a5:b5:
f5:72:cc:ee:cf:d4:c3:61:c8:7d:ac:54:07:84:0f:14:e0:f7:
cb:f3:c7:1b:08:d6:11:2e:66:cf:fd:25:c0:11:50:3f:a6:5d:
01:e3:30:84:39:51:39:63:af:e6:71:1b:71:a8:75:c4:f6:5b:
0f:64:e2:b6:a7:b9:c6:cf:59:0e:c6:ef:bb:fe:31:6c:2c:52:
4c:66:6d:11:ab:45:fe:ad:89:2d:e9:ce:3c:de:55:c3:c4:2d:
d4:87:c3:0b:f3:c2:a7:9c:17:4a:6a:c0:84:70:2f:25:b9:b9:
d6:47:c7:2c:76:0a:68:af:e5:64:79:8f:9b:c5:b2:77:a2:83:
2d:4e:60:7a:b1:08:4d:7f:8a:58:d0:7e:fd:2e:c6:4b:89:e2:
bd:ba:d1:3c:fe:05:3a:7b:c2:90:9e:1c:2d:ca:27:ef:ab:b9:
cb:47:0d:77:64:cc:ae:c6:3a:6f:2c:ed:a5:90:85:25:46:ce:
37:8a:5b:24:92:d5:40:60:9d:83:a7:34:68:73:6a:cd:90:42:
3c:31:d4:3c:42:fd:58:70:3b:3d:6a:7a:8e:6d:31:64:f7:6e:
20:70:95:0f:c8:85:1b:d8:60:28:6a:e0:ff:f6:8a:6c:96:9f:
59:48:d7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:56:38 2025 by rpki-client