Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/w9ZFhmeWl9P8oxUCmO0haW1uUVw.roa
File: w9ZFhmeWl9P8oxUCmO0haW1uUVw.roa (raw, json)
Hash identifier: 4gJ+U4SX6C0kJ8fPc/SsSrnAYsThJp4UepZuuWBccp0=
Subject key identifier: C3:D6:45:86:67:96:97:D3:FC:A3:15:02:98:ED:21:69:6D:6E:51:5C
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 019424B27B29D85F149A4F1328C23DF5B914
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/w9ZFhmeWl9P8oxUCmO0haW1uUVw.roa
Signing time: Thu 02 Jan 2025 01:47:44 +0000
ROA not before: Thu 02 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13237
IP address blocks: 193.178.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:7b:29:d8:5f:14:9a:4f:13:28:c2:3d:f5:b9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Jan 2 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3d64586679697d3fca3150298ed21696d6e515c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:0e:92:88:78:08:76:6b:8b:25:eb:60:74:
b1:68:21:b2:e8:fc:ae:83:87:df:59:e4:b3:a7:60:
97:bc:ac:19:75:0a:02:35:e9:6e:e7:aa:3b:71:1a:
74:76:45:e8:d6:2f:2a:db:c7:bc:96:12:d6:66:7e:
97:1d:2f:09:53:39:ef:a3:4a:fd:00:8b:fb:75:69:
b4:f9:c6:b5:a8:a9:fb:88:8a:e8:8b:f9:18:b7:53:
72:10:6a:8c:a4:c6:5e:af:2b:db:ee:7c:71:32:51:
97:0f:1d:91:11:7f:86:76:8a:7b:3a:c7:96:13:74:
32:ee:6b:7f:b1:1f:6e:1c:a0:85:8f:94:97:35:3d:
5a:25:b5:bb:1a:83:bf:7c:63:25:16:e1:25:23:94:
60:0b:39:36:e9:9d:1f:36:bd:c2:6d:3d:67:90:5c:
bc:d9:0b:a4:63:41:16:72:b0:56:8f:33:91:d4:a6:
94:37:5b:01:05:ca:43:c3:b5:3c:3a:fe:7c:f1:1c:
83:58:f9:87:82:94:74:23:5b:10:91:db:3e:33:3e:
1d:05:1a:bc:4b:63:11:65:1e:01:d0:a6:e1:0e:34:
2e:00:b9:18:03:29:65:a5:2c:b0:3c:ef:ea:8e:87:
b9:55:c8:7a:18:a8:99:f9:43:2d:e4:fe:61:f5:21:
30:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D6:45:86:67:96:97:D3:FC:A3:15:02:98:ED:21:69:6D:6E:51:5C
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/w9ZFhmeWl9P8oxUCmO0haW1uUVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.217.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e6:3e:e4:c3:0c:d6:e4:4c:e3:ee:5f:7e:ef:e7:72:14:a9:
16:55:73:a2:b7:73:e8:b5:8a:83:29:04:6c:6e:6a:96:f0:2f:
da:a6:a1:ed:bd:9c:83:9a:5a:45:2d:39:4c:59:7d:df:45:6b:
17:b2:06:e1:87:a5:45:d3:65:fa:23:04:87:04:75:0f:a3:82:
1f:24:e5:b6:d5:80:12:41:84:8f:df:4d:4a:65:b0:6c:87:de:
8c:fc:93:40:7c:fb:22:81:13:ba:f1:00:db:27:6c:26:1d:67:
17:d2:f2:64:1c:a1:ef:96:58:51:5a:f8:0d:41:13:e9:5e:0c:
53:2f:2f:90:71:0d:5c:f8:12:8e:fc:05:cc:17:0c:a8:52:68:
37:30:81:a5:c5:3d:67:de:7d:0a:e3:94:b8:10:9b:58:84:a2:
73:21:c1:29:e8:c0:5d:76:d5:63:bf:d9:a4:85:81:a1:42:08:
79:a7:fd:f7:fe:09:53:2e:8e:68:48:47:a7:a6:ee:0c:13:e0:
49:e5:b0:68:84:d2:eb:eb:4b:df:6b:56:92:a2:fc:c5:a0:83:
90:ba:22:f3:70:55:d8:5b:c7:97:49:02:bf:8b:fd:62:83:6d:
9e:a7:21:6f:03:42:0a:ca:12:fc:ad:ff:ff:8d:e7:e0:f0:c3:
4c:ce:e8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:49:02 2025 by rpki-client