Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/_YFT4hVNYyXh4lnoEwOwHf8FvbM.roa
File: _YFT4hVNYyXh4lnoEwOwHf8FvbM.roa (raw, json)
Hash identifier: tlgEY6jYUU+UF0+FT6gUJlgYou8+Ams7PkVw5ofCpx4=
Subject key identifier: FD:81:53:E2:15:4D:63:25:E1:E2:59:E8:13:03:B0:1D:FF:05:BD:B3
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0194221FF6B24BA6D18417377C9DDEADDE04
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/_YFT4hVNYyXh4lnoEwOwHf8FvbM.roa
Signing time: Wed 01 Jan 2025 13:48:27 +0000
ROA not before: Wed 01 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273177
IP address blocks: 193.160.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f6:b2:4b:a6:d1:84:17:37:7c:9d:de:ad:de:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jan 1 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd8153e2154d6325e1e259e81303b01dff05bdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:a5:e5:92:cf:94:cc:0e:db:a5:34:a8:01:
83:dc:3b:d2:94:df:5e:2a:82:2e:fb:13:dc:22:49:
e1:d3:e7:52:aa:7f:8b:e4:31:be:af:be:77:ee:46:
d5:8c:80:25:9c:b3:f9:7d:1d:d7:34:88:5f:a1:72:
29:c3:b9:47:e9:0b:73:60:86:bc:32:49:77:db:a0:
2d:c1:a2:24:41:92:4c:86:42:60:a0:af:bf:49:d0:
c7:5f:e3:30:1d:2a:e6:e6:c4:36:f5:c4:46:29:1b:
55:1f:7e:68:32:68:5a:71:3c:de:5a:22:b2:be:ea:
c4:77:04:9a:9b:c3:c7:de:de:a5:b1:8e:8c:7e:1f:
6c:62:4b:17:23:0a:02:09:88:07:ac:ec:fb:d1:77:
01:2b:4b:f6:3e:ee:81:c6:4d:a8:44:12:fb:b9:c7:
ef:39:d3:12:04:79:9f:8a:56:26:28:df:2f:95:33:
75:94:73:cc:68:a9:08:10:8b:69:27:b4:83:ff:a8:
67:d7:e0:81:55:e5:75:64:32:17:1e:0e:44:e1:f3:
b8:29:62:f9:7b:19:66:6f:d9:78:1b:2c:ed:47:22:
0a:67:2f:ec:09:48:e3:b7:75:c7:a9:5c:51:90:ac:
a1:54:f4:2b:15:2d:c0:8a:89:e9:4d:ba:1f:d0:75:
45:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:81:53:E2:15:4D:63:25:E1:E2:59:E8:13:03:B0:1D:FF:05:BD:B3
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/_YFT4hVNYyXh4lnoEwOwHf8FvbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.220.0/24
Signature Algorithm: sha256WithRSAEncryption
49:0d:0b:79:83:c4:91:9a:1f:28:78:67:b7:9f:72:8c:48:6b:
b2:0f:76:4a:94:16:f9:3f:e4:d7:25:9b:5c:b7:90:6c:35:19:
87:ee:0a:2d:11:a7:a7:4a:4e:8a:4e:12:6b:9f:41:90:74:28:
f3:3c:63:bc:66:5c:6a:00:90:5b:8f:67:4d:78:94:24:af:26:
6b:c6:9f:9c:6a:91:e1:db:4a:44:1c:e3:4d:d6:ae:d2:2b:64:
f8:47:64:af:86:13:25:c7:7c:bb:a3:01:2f:fa:a9:33:92:2e:
db:cb:f8:02:dd:60:8b:ce:d2:71:7f:6f:7b:3c:ad:3a:f9:86:
7b:fd:ca:58:03:e2:d8:9a:89:c9:f3:19:f9:2d:87:a3:5f:c7:
3b:f6:e6:58:8a:ae:24:a7:34:5b:fe:3f:8c:33:e1:1c:21:71:
11:8f:19:37:50:49:13:e4:08:6e:96:16:f5:d5:c9:0f:e4:7f:
91:3f:91:25:63:a3:c7:ae:a0:9a:0d:e2:bd:8c:3c:84:6c:1b:
16:27:32:06:52:49:a6:2f:82:1e:45:af:ad:69:29:8c:24:ad:
bf:f5:92:a2:8a:4e:ac:10:b1:22:04:2f:ff:9e:6c:47:b1:33:
eb:e4:46:3a:43:16:23:6a:f6:59:a7:21:e6:24:8b:37:80:37:
e9:75:e7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:35:22 2025 by rpki-client