Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/tXVRXa1qJjFTp7ESN89vh6T8E94.roa
File: tXVRXa1qJjFTp7ESN89vh6T8E94.roa (raw, json)
Hash identifier: 0lv9VjdN51nQRf36Hx017s+uMUMF9eBDdjJHsff15ek=
Subject key identifier: B5:75:51:5D:AD:6A:26:31:53:A7:B1:12:37:CF:6F:87:A4:FC:13:DE
Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial: 019426D904A9282BB52B11D8CFD73D1066AD
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/tXVRXa1qJjFTp7ESN89vh6T8E94.roa
Signing time: Thu 02 Jan 2025 11:49:04 +0000
ROA not before: Thu 02 Jan 2025 11:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208949
IP address blocks: 193.151.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:04:a9:28:2b:b5:2b:11:d8:cf:d7:3d:10:66:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
Validity
Not Before: Jan 2 11:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b575515dad6a263153a7b11237cf6f87a4fc13de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:04:ee:8a:35:25:a7:ab:a1:19:d7:38:79:
e1:cf:20:4f:ee:60:4b:13:12:da:ac:fa:63:2d:d9:
3b:fc:a4:03:c4:c8:d2:27:e9:2f:5b:a3:af:55:aa:
23:ca:12:7b:b6:af:95:c6:ab:ca:47:ea:87:ff:75:
57:e5:f8:02:ff:4b:3e:3c:9e:4d:1f:78:49:92:c7:
e6:71:90:56:c8:27:f8:c6:0c:ff:46:9c:fc:bf:ce:
68:a9:bc:d9:1b:53:40:bc:88:53:0c:9c:59:50:b9:
9f:ee:c2:dd:fb:40:93:74:2d:0c:ab:5b:dd:84:5b:
4e:29:31:64:93:e2:c2:ce:e4:d1:f8:f0:44:b1:27:
48:7c:61:ad:e2:ca:6b:31:51:22:59:a5:fc:c4:59:
14:4f:37:7f:09:ac:04:41:61:18:93:b8:45:b8:fb:
f2:a0:6a:cc:b2:5b:d6:d7:eb:6c:23:2f:0f:0c:4a:
d5:cb:14:b2:ba:ce:36:dd:9c:d2:11:72:9c:96:03:
6b:a9:79:43:9f:f7:4b:23:e9:1e:c4:8f:34:4d:a0:
6d:94:9e:b4:b6:03:96:50:43:18:1b:7f:34:fa:b6:
e8:c6:e6:b9:49:33:a7:d6:5d:c6:65:6b:d7:88:77:
3e:08:67:85:13:d5:38:28:f7:37:d0:47:3c:b7:38:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:75:51:5D:AD:6A:26:31:53:A7:B1:12:37:CF:6F:87:A4:FC:13:DE
X509v3 Authority Key Identifier:
keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/tXVRXa1qJjFTp7ESN89vh6T8E94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.109.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:88:b6:8e:f3:7f:f9:30:e4:32:93:c1:c1:52:79:b0:75:30:
31:63:54:89:be:dc:f3:57:03:91:a6:48:84:33:e5:a0:8c:a0:
ce:fe:55:ef:6d:d3:1b:06:99:9b:20:b3:3e:74:28:d7:a3:4b:
91:ce:6f:32:01:d0:c1:12:e1:91:b2:e9:91:49:20:f7:5f:e8:
fc:bf:d2:bf:b2:4f:8f:d8:1e:ff:2f:a8:ec:01:f4:31:f0:e9:
d8:72:46:37:ab:47:03:f1:da:f0:47:07:be:b2:71:b9:ce:90:
b0:34:62:ae:ce:60:d4:d8:2d:8b:c6:78:9a:95:3d:bf:14:0b:
14:d9:22:40:52:e0:35:21:80:47:a4:89:34:a4:06:54:97:2a:
7a:0a:e1:26:85:21:7d:dd:0c:cb:4a:8c:1a:52:93:33:4c:44:
1c:90:c0:97:0f:14:d9:fa:bd:5e:4f:24:e1:a6:39:27:e3:1d:
5c:32:54:ca:e9:b4:ef:ee:76:41:9b:43:3a:ab:64:20:c6:c3:
86:3d:3c:d0:bf:1c:0d:a9:5c:1c:f4:f9:15:c5:39:7f:79:0d:
d9:0a:e7:f0:05:42:2e:fd:c5:c9:ae:bd:04:f3:61:b1:dd:86:
78:c8:18:3f:73:9b:8a:7b:3d:75:22:1a:d6:33:ac:1e:74:1a:
dc:7a:9f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:15:00 2025 by rpki-client