Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0bnQHrsZ_XK8QTAyyr_uVjPbQ54.roa
File: 0bnQHrsZ_XK8QTAyyr_uVjPbQ54.roa (raw, json)
Hash identifier: i6v76hVg0yvUf6GgahJ/MdQb+juvv9FsEMdf8g1b3fc=
Subject key identifier: D1:B9:D0:1E:BB:19:FD:72:BC:41:30:32:CA:BF:EE:56:33:DB:43:9E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C401BD22440EBB1CF80F7D010FA09
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0bnQHrsZ_XK8QTAyyr_uVjPbQ54.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210822
IP address blocks: 193.230.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 21:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:40:1b:d2:24:40:eb:b1:cf:80:f7:d0:10:fa:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1b9d01ebb19fd72bc413032cabfee5633db439e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:c9:f2:fa:e2:06:44:10:dd:5f:f8:88:87:
1f:a8:bf:b7:27:59:c1:e2:22:98:87:c8:34:a3:37:
f7:96:90:3e:66:ed:82:b2:f9:34:71:c1:66:ed:ac:
cf:99:46:48:4c:96:6f:53:7b:1e:7f:29:76:a3:fc:
14:7e:2c:7d:af:20:df:12:41:6b:33:4f:19:bc:df:
72:44:8f:44:b3:9a:ef:18:93:d9:89:c1:13:1b:76:
31:2b:8e:14:e5:1b:cb:86:f5:3a:cc:62:83:b9:e2:
20:47:94:80:04:6b:33:c0:45:d8:f4:b5:ef:08:c2:
69:6f:65:19:06:0b:12:80:ea:f5:18:d4:c4:ef:bc:
37:37:e4:0e:bb:48:f2:13:9b:57:29:f2:9a:1d:03:
72:d1:48:f1:8a:9f:ad:37:f4:5a:a7:a5:9d:9c:a0:
eb:04:a1:13:25:6c:1d:6e:26:1d:a8:e3:25:09:f2:
8a:38:ea:ed:9d:39:29:dc:b7:34:1a:b0:43:ee:c2:
55:9f:54:55:a5:46:55:3d:83:a1:4a:ad:2d:6d:1f:
0c:e1:3b:72:62:55:05:b7:b0:86:88:cd:57:1e:7a:
1c:f7:05:88:0b:e3:bc:a4:d7:e2:27:33:e2:02:1e:
77:c0:2c:7f:d7:22:74:ad:3d:5d:12:55:58:0c:b2:
9b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B9:D0:1E:BB:19:FD:72:BC:41:30:32:CA:BF:EE:56:33:DB:43:9E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0bnQHrsZ_XK8QTAyyr_uVjPbQ54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.230.133.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b0:a2:16:9c:58:54:73:5d:e0:a5:77:f4:28:3e:15:36:1e:
64:03:f2:bb:cb:5e:5c:30:38:88:eb:02:49:7a:cb:73:cd:c6:
f3:b2:ff:3e:a4:fe:70:5b:8e:37:47:5b:e3:af:09:73:5f:5f:
90:30:fe:3e:55:bd:03:fd:bc:fb:dc:15:f1:fb:09:66:ed:24:
fc:ba:61:a6:a8:f4:cb:bc:da:a5:ae:26:2f:7f:41:bc:4f:36:
d2:a6:fd:fa:e4:8f:7b:9d:3a:17:9b:10:1d:d8:de:3e:d4:09:
d6:92:3a:cb:ef:06:89:ff:ac:61:93:07:b7:7c:5c:d7:3a:ec:
15:45:77:2e:ba:f7:35:79:b9:2b:8f:92:89:d2:39:c8:74:bd:
c6:b8:3e:08:bb:69:43:af:87:9d:c7:2a:38:49:d0:4b:68:b6:
01:89:c9:63:80:3a:66:c6:fb:47:41:3c:d6:82:65:a7:18:58:
6b:4f:2d:4b:6f:f8:d5:22:6e:f0:60:f3:01:ac:c1:9c:04:12:
bf:0f:55:6c:ff:c5:9e:49:a1:37:dc:28:5c:9c:a5:ae:26:d6:
82:08:48:3a:27:e0:d5:b1:db:89:6c:ca:65:63:40:3b:12:a4:
f2:18:60:14:d2:44:f7:85:a7:30:f3:04:02:de:9c:27:8c:6b:
01:75:c3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:44:04 2025 by rpki-client