Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/N2kkoQ2o02HHZZ6qVv-WtTqW5RQ.roa
File: N2kkoQ2o02HHZZ6qVv-WtTqW5RQ.roa (raw, json)
Hash identifier: UVosnwUdXYQqAJ8cpa4t/j4iKftdjiRWmrikerbtPWI=
Subject key identifier: 37:69:24:A1:0D:A8:D3:61:C7:65:9E:AA:56:FF:96:B5:3A:96:E5:14
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BCA1E35630197B503F4400DEAB9DF
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/N2kkoQ2o02HHZZ6qVv-WtTqW5RQ.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399448
IP address blocks: 193.93.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ca:1e:35:63:01:97:b5:03:f4:40:0d:ea:b9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=376924a10da8d361c7659eaa56ff96b53a96e514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bf:a3:42:7e:75:0d:8a:6f:ae:84:e8:9f:84:
10:21:8a:1f:e7:09:77:2e:bb:97:a1:b0:ba:79:1d:
12:36:64:c7:b6:5c:24:55:1c:18:15:8c:02:ae:80:
e5:49:62:bb:9e:12:59:cf:ce:3f:d1:91:36:65:97:
10:2e:47:0a:8b:ec:8b:86:27:73:97:66:f0:d2:63:
10:b7:7b:6e:c3:cc:20:0b:90:41:14:47:36:ef:67:
41:43:af:91:e2:05:a2:5e:42:9b:b8:3f:6d:9d:96:
71:3c:d1:12:43:cc:e9:99:4f:b6:1a:7e:0c:63:24:
82:26:a5:3f:31:3a:17:63:f5:27:c7:24:ef:ef:2b:
66:d6:41:cb:c4:37:d2:73:2c:a1:da:75:ab:f8:24:
2c:e6:29:d4:d5:72:fb:97:ad:06:14:60:3a:6e:24:
ba:88:93:ba:3c:9c:00:9f:7b:6d:3d:1b:f5:12:cc:
6e:01:e5:3a:02:8a:b3:1a:bd:e1:27:71:76:1a:90:
41:1e:db:a4:e1:21:82:6f:f2:b6:a9:b7:bd:d4:86:
3d:c7:51:27:21:d7:af:90:2c:69:57:a1:71:43:9f:
b8:a5:37:7e:a1:66:17:22:85:a9:a8:4e:a0:0d:45:
39:ca:c2:52:e0:e3:6e:78:0d:83:b4:42:de:2a:ad:
e2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:69:24:A1:0D:A8:D3:61:C7:65:9E:AA:56:FF:96:B5:3A:96:E5:14
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/N2kkoQ2o02HHZZ6qVv-WtTqW5RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.52.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:66:21:cf:90:d0:88:1c:55:71:99:64:05:b6:8f:5c:b6:4d:
dc:00:39:ce:f2:8e:fd:2b:4a:33:ac:c6:02:30:52:e6:3e:2d:
a2:dc:a6:de:0e:31:0a:68:32:34:6e:ec:d6:fb:f9:7e:b1:be:
f3:d0:93:e9:aa:fd:91:05:89:20:6f:4e:50:dc:71:2a:95:87:
a2:8e:00:5a:08:7c:1a:76:b4:fc:bd:52:0b:1d:46:90:e6:eb:
42:db:66:b8:ad:9a:97:02:f6:29:7d:75:62:e7:6c:39:00:ef:
1c:e7:68:5c:e8:61:f5:5e:f9:bb:f3:09:a0:79:d0:e2:a1:ac:
3f:f7:1e:6d:00:1c:6d:3f:e3:3e:2f:82:5c:2d:43:0a:0a:38:
55:f7:f7:be:43:e9:90:88:9a:4d:6a:1c:b7:85:8e:5e:66:79:
34:65:3e:aa:24:10:c0:3c:78:93:eb:52:38:6d:4d:53:43:03:
5a:d2:8e:b0:95:ca:09:6a:09:1d:d5:c6:75:ee:f8:55:d7:44:
43:3d:3f:d3:04:ee:6f:ee:99:3b:71:ea:dc:43:31:61:5a:6c:
0e:f4:72:1b:c8:00:b6:07:96:c3:f5:82:d1:ea:7a:d5:01:3d:
dd:96:4a:7a:71:b6:c9:4b:14:d6:fd:f1:5a:b6:d4:ea:14:3b:
1e:02:c8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:29:13 2025 by rpki-client