Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/4OAQQVO8VIFzfsVpiMv8jSSll54.roa
File: 4OAQQVO8VIFzfsVpiMv8jSSll54.roa (raw, json)
Hash identifier: JMcD21CurSjrVb9e/Fa0SxXVumzBh+XhCdZn2t0vX/k=
Subject key identifier: E0:E0:10:41:53:BC:54:81:73:7E:C5:69:88:CB:FC:8D:24:A5:97:9E
Certificate issuer: /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Certificate serial: 019427B5C50DA52E2FCB0881C8443EE7014D
Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/4OAQQVO8VIFzfsVpiMv8jSSll54.roa
Signing time: Thu 02 Jan 2025 15:50:11 +0000
ROA not before: Thu 02 Jan 2025 15:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42909
IP address blocks: 193.223.78.0/24 maxlen: 24
194.180.185.0/24 maxlen: 24
194.180.186.0/24 maxlen: 24
194.180.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Mar 2025 21:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c5:0d:a5:2e:2f:cb:08:81:c8:44:3e:e7:01:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Validity
Not Before: Jan 2 15:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0e0104153bc5481737ec56988cbfc8d24a5979e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:41:cc:8b:7e:dd:67:08:da:88:8c:3d:08:
a4:2d:69:ac:c8:8d:c3:02:25:af:29:c0:60:cc:d7:
ae:a8:0a:e2:b8:8b:3a:58:f0:9b:21:7e:5b:e0:97:
b4:79:5b:c7:64:09:21:dc:cc:93:dc:49:9d:fb:a8:
9b:34:a4:37:f2:37:c7:fe:87:2e:c1:89:35:32:bf:
99:90:9a:06:98:59:ab:a4:6d:bb:3f:d2:de:0f:06:
41:fa:a1:45:4c:b0:89:9d:d3:53:d6:33:e0:cc:8e:
29:d6:97:e6:a8:8c:ac:66:20:31:7d:a6:67:75:63:
c2:ff:5a:08:0b:75:94:20:12:97:ef:ed:68:af:cd:
f8:6b:e2:56:ec:3c:f0:59:73:80:6d:7e:07:19:54:
f6:cb:63:30:25:b1:ee:67:21:24:aa:5f:3b:ee:cd:
77:4d:3e:a1:e5:13:3f:59:d3:fe:fd:a7:d3:81:64:
dc:c9:7b:d9:f3:22:75:e9:c0:03:88:90:24:4b:49:
96:6b:59:86:57:82:ab:63:0c:35:c3:7d:54:f4:52:
19:b0:aa:6c:10:5c:8c:7f:46:dd:be:a7:48:51:05:
52:26:b8:d5:09:93:47:af:cf:ec:dd:d4:56:e0:50:
59:53:be:27:73:f5:96:a9:41:0d:76:14:2f:5e:f3:
ef:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E0:10:41:53:BC:54:81:73:7E:C5:69:88:CB:FC:8D:24:A5:97:9E
X509v3 Authority Key Identifier:
keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/4OAQQVO8VIFzfsVpiMv8jSSll54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.223.78.0/24
194.180.185.0-194.180.187.255
Signature Algorithm: sha256WithRSAEncryption
52:88:a0:78:cb:21:56:7a:fc:91:48:46:64:f0:a5:f4:10:57:
d8:50:c8:e3:b2:09:43:e5:5f:23:1d:98:88:91:75:01:54:74:
bb:aa:d4:a8:ce:a9:d8:a0:82:3a:1d:0e:67:ae:0a:d7:e6:4a:
c9:da:d4:13:6b:7c:09:12:b7:af:83:62:24:ab:43:88:91:2d:
d3:ca:89:97:28:43:62:b8:f0:4a:12:78:cb:74:cc:d3:80:e5:
63:e4:b6:4f:c2:24:16:32:2d:dd:7f:a1:e4:74:0c:96:c8:47:
e5:4c:5f:4e:94:68:a5:e0:50:86:4c:6f:88:33:f3:ed:cf:c6:
7d:42:09:e7:c5:46:08:2a:ad:ca:07:df:03:24:a5:1c:f8:3d:
64:28:e0:28:14:b2:a6:58:bc:be:c0:ce:7d:15:3b:ab:dd:c0:
43:90:8b:6e:28:57:47:e4:5c:2f:cb:20:35:4a:ad:8f:13:f8:
17:d5:75:96:92:47:c2:00:40:5b:ac:a4:36:1b:4f:da:4d:d4:
f7:0c:ae:b8:7b:45:83:f1:63:90:e5:3d:2f:a6:25:85:75:b7:
48:79:f9:ab:aa:19:b4:45:9d:5a:c6:cf:ae:c4:d8:75:03:a2:
0f:a0:c5:94:46:09:92:99:f9:65:e6:52:93:ec:0d:0b:30:89:
2b:e5:5e:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Mar 11 07:15:04 2025 by rpki-client