Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/fYK373nYUB0XvmUvg-oovkxaiNE.roa
File: fYK373nYUB0XvmUvg-oovkxaiNE.roa (raw, json)
Hash identifier: xzFxyXs3TjE095d1PcNasH+Goh3HeA3NihMPCGecT0o=
Subject key identifier: 7D:82:B7:EF:79:D8:50:1D:17:BE:65:2F:83:EA:28:BE:4C:5A:88:D1
Certificate issuer: /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial: 019425FC34735A00340D1E5F739C7FCE1D13
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/fYK373nYUB0XvmUvg-oovkxaiNE.roa
Signing time: Thu 02 Jan 2025 07:47:53 +0000
ROA not before: Thu 02 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24961
IP address blocks: 193.193.190.0/23 maxlen: 23
194.9.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:34:73:5a:00:34:0d:1e:5f:73:9c:7f:ce:1d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Validity
Not Before: Jan 2 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d82b7ef79d8501d17be652f83ea28be4c5a88d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7f:de:11:a9:70:8c:0e:d3:f1:d5:d5:c3:a1:
30:82:0b:cc:1a:8e:dc:66:c4:96:f4:89:aa:4a:8a:
15:93:d4:d6:4c:e3:d6:47:a1:c9:c8:12:52:2d:2b:
5a:fc:02:6d:f9:46:09:f1:77:50:a1:53:84:c3:b9:
2a:d8:df:61:80:f4:9a:37:28:cb:71:01:bf:7b:a8:
e9:45:9f:d7:ad:1c:c7:56:15:1c:1c:0e:a0:62:d5:
f8:5f:13:ec:71:54:8e:4a:73:68:7d:f8:84:da:c3:
5f:8e:01:cc:d5:32:79:db:c6:e5:99:39:65:cd:2c:
09:be:4f:ae:ef:0e:d5:cf:c9:b2:d2:9f:15:f6:87:
a0:d0:c4:76:b5:a5:6b:e1:ea:18:1c:8f:4e:d6:fa:
ca:5d:a3:aa:2e:d6:15:d6:d5:7a:09:b4:65:60:12:
68:94:44:40:5c:dd:f8:db:16:bd:7f:c3:84:b0:63:
81:36:7a:d7:41:8c:61:92:07:f8:a6:fa:b6:42:bb:
12:7e:0c:2f:34:03:d3:7b:d3:7e:fd:eb:02:7f:f6:
e2:7a:6f:a0:73:af:0f:4a:db:9b:68:72:c7:af:ab:
56:33:6c:df:bb:98:ad:b9:9b:ef:f7:00:1a:3f:73:
5b:af:13:26:ac:d9:2f:dd:91:02:c5:0c:f8:3c:73:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:82:B7:EF:79:D8:50:1D:17:BE:65:2F:83:EA:28:BE:4C:5A:88:D1
X509v3 Authority Key Identifier:
keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/fYK373nYUB0XvmUvg-oovkxaiNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.193.190.0/23
194.9.182.0/23
Signature Algorithm: sha256WithRSAEncryption
07:b3:47:29:20:54:a4:7f:2d:51:31:23:ef:60:71:82:89:95:
d6:74:ea:40:75:11:9b:35:47:71:c2:4c:f9:be:77:b2:ed:dd:
9d:5f:67:4e:c7:15:96:b8:cc:1b:a1:38:9d:c9:05:47:20:72:
54:b0:26:34:34:d9:6a:78:47:4c:3e:ac:37:c3:7b:a5:24:1b:
82:ef:d3:2d:fc:18:dc:77:d7:65:87:f6:44:fa:9e:e3:bf:68:
97:53:ef:bd:45:a0:da:7e:0c:c1:69:6b:d9:0b:84:c7:00:ef:
b0:9b:5a:1d:45:1f:a7:70:bb:ef:8c:0a:e4:43:8a:09:73:ef:
9c:b3:5f:6a:17:ce:c5:95:d4:bf:e8:ea:88:5e:a0:cd:eb:40:
f5:e1:60:ba:24:a4:84:d6:78:99:04:54:8a:85:42:2f:89:0b:
56:13:dc:07:f7:b2:d9:e9:c7:af:a5:9e:32:fa:21:d3:fa:e1:
6b:9b:9b:b0:d1:75:9b:5b:64:36:c9:78:3f:8e:72:a7:0d:9d:
f6:be:fb:94:ef:fc:6a:0d:d9:7a:f2:76:56:bd:1e:7b:46:3b:
9f:27:ef:29:5b:bf:ee:f5:65:db:3d:d2:b8:c9:99:aa:44:12:
0d:1c:b4:2c:e0:09:04:cd:bd:1e:76:0d:5d:49:22:e2:fc:59:
76:ab:be:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:25:03 2025 by rpki-client