Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/AdFVK1KtSnf7ZNfSr9y68mDkPRc.roa
File: AdFVK1KtSnf7ZNfSr9y68mDkPRc.roa (raw, json)
Hash identifier: /eDjhHT0EL0eZWQnzwFCLaBMZZnRebciW+q12o5OJ+M=
Subject key identifier: 01:D1:55:2B:52:AD:4A:77:FB:64:D7:D2:AF:DC:BA:F2:60:E4:3D:17
Certificate issuer: /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial: 0194266B6EB42B2DE02FEBD41E67D1FE167B
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/AdFVK1KtSnf7ZNfSr9y68mDkPRc.roa
Signing time: Thu 02 Jan 2025 09:49:22 +0000
ROA not before: Thu 02 Jan 2025 09:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16111
IP address blocks: 193.238.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:6e:b4:2b:2d:e0:2f:eb:d4:1e:67:d1:fe:16:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
Validity
Not Before: Jan 2 09:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01d1552b52ad4a77fb64d7d2afdcbaf260e43d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:74:7a:d3:1f:03:fc:f1:1e:15:78:19:03:
ea:95:b2:dd:f3:67:ca:1d:d7:33:fc:6a:74:09:a1:
70:b1:6b:7b:75:20:41:61:f3:82:d4:08:a0:ea:4d:
11:58:f2:01:b5:2f:45:dd:8d:e9:12:68:36:a7:6f:
6d:d6:02:57:54:0d:73:6b:70:0f:ce:34:f9:d0:8b:
31:23:3f:4e:6d:9c:4b:9d:ea:04:41:a9:13:78:20:
f1:55:01:f7:df:7c:ac:56:c4:59:5b:a5:be:6a:62:
a3:72:6e:8b:56:3c:23:f2:10:6d:b5:89:78:21:12:
28:90:8a:16:0e:13:54:7c:aa:77:00:97:cf:86:e1:
0d:24:bc:c4:a9:5a:99:f3:aa:67:36:8d:e2:91:be:
58:8b:92:af:53:17:12:6a:70:a2:90:bb:b0:24:6b:
95:ea:52:91:db:8f:85:8e:59:41:77:ed:98:90:37:
b5:22:7e:0b:d3:50:6d:ca:73:71:76:9f:91:9b:fd:
01:72:a6:94:8b:b6:91:22:e4:af:1b:0e:91:e3:8c:
b2:59:1a:bf:fa:f1:9d:25:29:27:10:fe:24:e7:b2:
0f:8b:c5:11:41:7d:43:dc:36:eb:bf:9e:20:c1:23:
2b:d9:73:10:fe:dd:fe:8c:c8:57:76:a2:64:4e:1f:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D1:55:2B:52:AD:4A:77:FB:64:D7:D2:AF:DC:BA:F2:60:E4:3D:17
X509v3 Authority Key Identifier:
keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/AdFVK1KtSnf7ZNfSr9y68mDkPRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.140.0/22
Signature Algorithm: sha256WithRSAEncryption
52:f7:7f:79:41:4d:f6:f0:f4:ff:de:68:30:50:a3:f3:a3:3c:
1d:62:f6:5b:6f:69:32:2e:e0:79:d5:dc:e8:8f:c5:03:91:7b:
13:5c:19:24:a5:b0:f2:63:97:d2:d3:2c:63:be:a5:e2:a1:c9:
1f:6a:ba:bf:cc:1f:f2:27:f9:24:1c:c7:4c:51:ee:fc:ec:b6:
72:38:6e:02:92:c8:76:ff:21:2c:f4:66:9b:fd:6c:a7:a8:e8:
8c:d5:57:15:3a:5e:08:32:cb:68:db:da:36:56:bc:85:22:2e:
0a:df:44:3d:b9:c7:d5:e1:82:85:b4:ea:a9:8e:96:53:8a:be:
94:ff:4b:70:51:e6:98:31:5b:94:4b:83:15:a6:df:fd:17:ff:
bb:5a:b0:10:e8:61:2b:df:cc:78:df:74:2f:6f:84:7a:3f:8f:
57:05:2e:18:58:f3:cf:f8:d9:88:67:be:ce:58:30:67:ce:ce:
54:34:07:a2:1f:24:84:ba:b2:58:9e:4a:97:95:14:90:31:33:
98:78:34:fa:f0:2b:de:24:3c:bf:c6:3c:3b:7d:d0:dd:72:73:
85:d3:c1:6a:c1:8a:8b:2f:05:f9:20:ef:78:bd:01:96:0c:45:
7a:9e:07:05:0c:fe:2e:5c:6d:eb:e7:f4:84:a5:47:72:98:09:
26:c7:05:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:35:26 2025 by rpki-client