Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/4GxVZYT6wgLs9QRcqmj0GiM7s38.roa
File: 4GxVZYT6wgLs9QRcqmj0GiM7s38.roa (raw, json)
Hash identifier: Yf9r6F+tVsYOuFs6eeGX/tcDYKZsAISxGNzkQl8o+rw=
Subject key identifier: E0:6C:55:65:84:FA:C2:02:EC:F5:04:5C:AA:68:F4:1A:23:3B:B3:7F
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747E4253D30F52952186BCE35F2F4E4
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/4GxVZYT6wgLs9QRcqmj0GiM7s38.roa
Signing time: Thu 02 Jan 2025 13:50:10 +0000
ROA not before: Thu 02 Jan 2025 13:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208393
IP address blocks: 193.221.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e4:25:3d:30:f5:29:52:18:6b:ce:35:f2:f4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e06c556584fac202ecf5045caa68f41a233bb37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:d1:59:5e:f5:ac:6c:c0:05:67:a3:41:15:
48:6d:0a:32:62:fa:1a:f5:01:d2:78:2d:e3:27:c4:
c9:e6:bb:40:25:43:47:7e:1a:52:8b:49:4d:2f:19:
3a:49:ae:00:70:34:b0:f8:6f:5d:08:59:e9:55:da:
88:5f:ff:64:30:14:69:06:da:91:a1:90:8f:a7:c4:
ec:1f:39:41:13:3a:1d:2b:96:8d:aa:61:59:14:b2:
5a:ba:6e:c1:49:99:76:8d:a6:04:12:27:84:2f:09:
68:42:74:2f:a4:b4:96:88:bb:50:9c:98:5c:c2:6a:
e3:df:d3:3e:b9:42:22:60:04:da:91:a3:73:76:31:
18:09:c2:f5:d2:7d:eb:38:e7:3b:1e:f7:50:ec:9c:
94:7b:59:98:15:e9:5a:8e:1f:bd:10:65:68:5c:8a:
cc:d9:a8:a2:be:18:5f:bb:7d:ee:c8:32:f9:12:b1:
57:0c:c6:8c:b4:19:77:33:42:1c:d2:0a:fc:7f:3b:
df:8d:1b:7f:7c:1e:37:db:c9:06:6f:f1:19:1c:93:
41:ca:19:c4:51:f2:82:2c:bc:60:6e:74:f6:43:95:
82:6d:9a:95:37:b2:45:59:2a:1a:70:1a:d8:75:fa:
ee:46:aa:1e:3f:10:68:73:0a:27:35:7a:87:71:7b:
83:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6C:55:65:84:FA:C2:02:EC:F5:04:5C:AA:68:F4:1A:23:3B:B3:7F
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/4GxVZYT6wgLs9QRcqmj0GiM7s38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.192.0/24
Signature Algorithm: sha256WithRSAEncryption
48:96:9a:36:69:5f:c9:94:43:80:90:d6:0c:c7:c2:41:c4:5f:
57:da:3d:c1:44:0b:65:b7:35:bf:bc:df:45:11:03:89:69:a9:
d8:21:98:86:b5:8d:e1:9a:e9:29:2f:43:2c:7e:6c:0a:f9:98:
fb:f9:54:9c:13:50:83:60:d9:06:c7:a0:a8:9a:60:de:6f:49:
10:6d:ac:db:27:a8:f1:c7:2a:47:e2:cc:7f:32:f3:a9:b3:6d:
2c:80:dc:2c:62:69:d1:28:79:fb:8a:ad:d2:98:80:df:dd:7e:
d1:8b:9b:c1:82:fb:3b:76:13:0b:3b:e4:0a:d5:6a:91:16:88:
12:80:f7:ff:3e:ff:43:a7:ef:c1:2b:ad:93:d1:05:68:9f:e3:
8b:81:68:b8:6d:a8:c3:3f:c1:3c:80:1d:cb:26:73:79:54:cf:
d0:2a:b6:1c:ce:6c:bf:90:c4:5a:25:c0:3b:e0:71:9d:94:9c:
de:3d:ed:07:31:ec:eb:4e:6b:bf:63:d2:b8:f2:5e:d6:ad:48:
d8:35:3f:6d:2b:5f:cf:30:85:67:ef:a5:63:58:ad:8a:83:1d:
2c:19:3c:0f:4c:ae:cb:d2:3f:37:e1:f8:ad:42:7a:b9:a5:4e:
66:0d:62:2a:a4:d4:0b:aa:40:bf:69:1b:69:9d:0a:9f:ff:be:
c5:65:0c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:00:35 2025 by rpki-client