Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/TN7hnpecGw4vVEA_h9JU4nwBKAI.roa
File: TN7hnpecGw4vVEA_h9JU4nwBKAI.roa (raw, json)
Hash identifier: QguoCsciRkHqlithinwUkI7ebgBBrsRhr+OaqhRW+4A=
Subject key identifier: 4C:DE:E1:9E:97:9C:1B:0E:2F:54:40:3F:87:D2:54:E2:7C:01:28:02
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0197406CBFAB9239F125E33A3ED94E44B74D
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/TN7hnpecGw4vVEA_h9JU4nwBKAI.roa
Signing time: Thu 05 Jun 2025 14:09:18 +0000
ROA not before: Thu 05 Jun 2025 14:09:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209043
IP address blocks: 193.93.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:6c:bf:ab:92:39:f1:25:e3:3a:3e:d9:4e:44:b7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 5 14:09:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cdee19e979c1b0e2f54403f87d254e27c012802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:04:05:19:7d:9d:13:6e:48:81:4c:cb:31:4c:
5b:e2:3f:74:44:f7:d9:87:a5:01:01:ea:d7:5b:6f:
66:31:57:3b:48:6a:06:9c:dd:d4:8f:25:d9:45:67:
1e:06:31:3a:4c:c3:89:1d:4d:ce:70:6e:93:50:fa:
8e:cf:7d:1c:6c:aa:91:25:5d:52:09:b4:11:b7:a6:
b2:8b:13:f5:f5:76:9e:ce:27:31:f4:b8:0d:57:10:
68:11:93:95:ef:00:2e:68:3d:93:56:b5:0f:eb:30:
54:6d:4d:4c:d1:9a:21:bc:63:07:f3:9a:cc:53:45:
d7:2f:0a:d4:e2:82:7c:34:3c:e9:17:c9:11:7b:96:
75:71:9d:8d:d9:07:24:4d:ca:56:3a:be:41:03:42:
26:fa:83:0c:76:aa:3f:9c:58:d0:1d:c3:e6:cc:8e:
70:8a:1b:40:8e:ca:09:5a:58:cc:de:b3:57:b4:bb:
8a:22:0e:4b:b1:b0:c2:a8:aa:63:e2:9c:32:8b:a1:
ab:f1:5f:1a:37:64:ad:47:99:6d:8f:88:a1:bc:c5:
b0:3c:31:06:02:ff:c3:e6:3e:1c:88:0f:a5:4b:5b:
51:74:3c:a8:91:e3:f8:1e:3c:d9:b3:ce:dd:4f:f1:
dc:fa:6d:08:54:a2:8a:6e:4b:bb:e0:3d:e5:45:88:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DE:E1:9E:97:9C:1B:0E:2F:54:40:3F:87:D2:54:E2:7C:01:28:02
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/TN7hnpecGw4vVEA_h9JU4nwBKAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.52.0/24
Signature Algorithm: sha256WithRSAEncryption
27:c4:10:cf:7f:6f:db:e0:c8:89:17:6f:10:d8:e5:a6:d5:e6:
66:1a:1b:e7:ba:6f:80:2c:03:a3:f5:7b:78:b0:f2:fd:9f:8f:
78:1f:e6:ec:21:01:4e:e7:19:3a:e2:c2:c5:a8:1a:50:a4:2f:
ee:0f:4b:3c:36:9a:42:aa:fb:bc:5c:bf:68:b9:e5:4b:f3:8f:
f6:df:6c:e3:2b:86:2f:d0:8c:17:25:1a:8c:0f:8f:80:9b:80:
f7:68:14:84:a6:fb:26:2c:72:ed:c8:c5:10:5e:bd:54:d2:23:
a7:0d:cb:0b:75:22:40:29:76:ea:a9:2d:d3:f9:f8:3c:6c:c9:
6c:50:af:0a:1e:07:09:42:b2:8c:e2:f1:51:f6:33:5a:a6:42:
6a:ed:44:4e:ff:c3:16:1c:a5:a8:4f:86:dd:b1:3d:25:18:71:
2c:64:de:ef:d7:52:5d:ce:8f:38:c4:46:52:dc:7e:d8:45:c7:
5a:19:2a:57:25:20:6b:8b:98:09:a1:d2:ea:1f:70:7e:94:35:
d2:d9:cd:92:bc:50:cd:4b:2a:62:2c:1e:07:32:88:f6:3b:e3:
98:e4:9b:c7:0f:55:3f:5d:fd:28:cd:a1:4e:a3:19:f7:3f:a6:
80:53:61:88:2e:49:e8:3c:9f:b0:01:52:22:06:64:3b:c2:fc:
57:50:3a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:56:10 2025 by rpki-client