Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ki55bfqHhRC77pU-EJ0EZN9IsgY.roa
File: ki55bfqHhRC77pU-EJ0EZN9IsgY.roa (raw, json)
Hash identifier: AccLPwD52wvMA4/Hsn0acDKYYBn7x4JHw/P1GwnYSwA=
Subject key identifier: 92:2E:79:6D:FA:87:85:10:BB:EE:95:3E:10:9D:04:64:DF:48:B2:06
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0194221FED232AECDB4EBF422C5904A3EABC
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ki55bfqHhRC77pU-EJ0EZN9IsgY.roa
Signing time: Wed 01 Jan 2025 13:48:25 +0000
ROA not before: Wed 01 Jan 2025 13:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6762
IP address blocks: 194.38.49.0/24 maxlen: 24
194.38.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ed:23:2a:ec:db:4e:bf:42:2c:59:04:a3:ea:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jan 1 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=922e796dfa878510bbee953e109d0464df48b206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:e0:e4:41:8e:c8:20:3c:73:10:67:18:d7:
b0:6a:f6:65:9f:69:45:45:a4:b5:ed:c6:ce:df:f6:
67:e2:39:5e:8f:5e:18:9a:69:34:da:0d:c0:00:37:
e5:15:7d:68:f2:55:c1:19:14:49:e8:d1:bf:ad:26:
91:d4:2f:1e:7d:07:b4:a4:b8:51:6d:ae:f4:25:83:
f0:c6:22:1e:9c:fb:0c:36:3b:52:26:e7:1e:bb:69:
1b:cd:55:8d:2e:df:89:7d:7c:3f:4f:3a:12:71:b6:
b3:98:19:ff:b1:1d:13:2b:c0:fd:1b:94:21:46:25:
70:d4:e2:eb:48:bc:1d:f1:8c:8a:dd:f2:3d:7e:83:
3f:96:f2:05:91:d7:25:47:89:d3:61:45:34:b1:d0:
24:37:dc:d4:7a:59:2f:a6:53:74:d0:15:aa:6f:f0:
47:99:69:89:b7:23:3a:d0:a0:f8:7b:0c:ac:c8:ce:
d6:46:5f:5b:97:d8:db:ed:7d:cc:98:c1:5f:28:f0:
fb:f0:cc:1b:77:37:b5:4f:05:a3:d3:4a:1b:ed:78:
a6:b3:57:5b:8d:ae:cf:57:50:2c:12:0a:2b:71:80:
e9:f6:8f:bc:dd:c4:2f:27:69:41:ba:6c:44:79:ab:
b6:92:7f:27:fc:f2:46:d8:38:5d:05:6b:70:f1:54:
18:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2E:79:6D:FA:87:85:10:BB:EE:95:3E:10:9D:04:64:DF:48:B2:06
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ki55bfqHhRC77pU-EJ0EZN9IsgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.49.0/24
194.38.51.0/24
Signature Algorithm: sha256WithRSAEncryption
74:66:24:7f:17:be:26:65:81:5c:d8:79:e0:09:79:af:44:9f:
16:8d:b7:84:0c:e4:bf:70:d2:20:7c:a9:19:01:18:74:b8:8e:
03:f7:31:bb:46:a9:ab:5c:3e:49:e4:a4:bf:0c:5e:84:03:42:
fb:5b:24:84:16:1f:82:60:fa:ad:9d:ad:db:d1:21:d4:20:b5:
f8:e7:27:98:11:2a:1e:0b:eb:b0:d2:ec:4b:4f:8a:d3:bd:de:
9f:83:ab:95:2a:fe:3a:d7:5e:6d:3f:8f:27:e5:b2:1b:20:3d:
52:25:f8:68:e2:b7:3b:ef:78:a2:4e:e5:08:5c:54:dc:26:9e:
fa:31:6e:27:78:98:f3:c2:ac:67:f0:3e:42:fb:bd:fa:38:fe:
a8:06:bf:cb:a2:d2:3e:85:c6:b8:25:d3:cc:90:23:b9:81:23:
d6:01:1b:ee:d3:86:d9:0c:6b:ba:b0:96:6e:62:12:c5:01:4d:
ce:70:ae:e1:e8:79:43:97:59:22:7c:aa:c2:62:62:97:ff:be:
d1:eb:55:a2:c4:1b:4c:9a:38:02:36:72:7b:7f:f1:e0:ec:23:
32:d5:d7:14:d5:a5:4c:13:6a:5f:38:b7:7e:4d:b3:c3:9a:70:
a6:b8:c2:33:9c:e9:40:40:9b:4a:30:7a:e8:6b:d6:3d:1d:5a:
21:02:45:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:36 2025 by rpki-client