Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/bTKBc42tXDi_zX0dMq0HddtScgI.roa
File: bTKBc42tXDi_zX0dMq0HddtScgI.roa (raw, json)
Hash identifier: lEi06vaib9NpWsrvDpoqTavKihSNsj4G7hhaYfH95VQ=
Subject key identifier: 6D:32:81:73:8D:AD:5C:38:BF:CD:7D:1D:32:AD:07:75:DB:52:72:02
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 019424B2888948953E758F85FBDC7FB460B0
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/bTKBc42tXDi_zX0dMq0HddtScgI.roa
Signing time: Thu 02 Jan 2025 01:47:47 +0000
ROA not before: Thu 02 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 193.247.83.0/24 maxlen: 24
193.247.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:88:89:48:95:3e:75:8f:85:fb:dc:7f:b4:60:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Jan 2 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d3281738dad5c38bfcd7d1d32ad0775db527202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:aa:51:4d:51:14:a9:7c:c9:82:a0:a5:83:27:
cc:78:ef:cb:ec:5b:c7:e5:ae:0b:ab:ab:45:de:5a:
8a:59:73:4d:69:5e:58:6b:ca:7a:33:1b:d4:0c:44:
9e:dc:ce:fa:e2:84:f4:d0:69:da:0b:60:ce:ad:c6:
55:f2:39:be:f4:ff:fe:a0:a4:13:7a:4f:38:e0:22:
21:c1:80:f1:7e:17:13:80:1b:a8:b3:16:06:b1:58:
e7:9f:55:b2:d8:a8:2b:0c:86:4d:30:96:17:03:a3:
73:75:d1:c6:7b:fc:23:03:79:bf:22:2a:f3:82:4f:
72:e1:c2:40:63:3a:ac:c3:a5:cc:08:30:01:04:85:
bc:a6:aa:8d:05:82:3d:66:b6:05:b7:fa:df:23:b7:
a9:81:72:95:4d:b3:46:79:b9:5a:2d:3b:ea:e9:c8:
2a:70:7e:76:b7:1d:82:fa:fb:cc:44:87:9d:75:46:
5d:d9:aa:02:f7:db:53:8c:09:fa:35:b3:87:2a:97:
fe:ef:51:9e:69:c2:cb:f2:e5:3d:04:bc:b1:ee:d6:
43:c6:ee:91:2d:a0:41:1a:72:df:1f:d7:99:36:53:
ac:f2:bb:cf:bd:ce:4a:99:00:16:cf:ff:7a:42:50:
d9:cd:a5:54:e7:e7:5b:c7:26:31:69:69:12:94:57:
7d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:32:81:73:8D:AD:5C:38:BF:CD:7D:1D:32:AD:07:75:DB:52:72:02
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/bTKBc42tXDi_zX0dMq0HddtScgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.83.0-193.247.84.255
Signature Algorithm: sha256WithRSAEncryption
3e:73:73:fe:c2:c9:68:6d:24:ea:3c:e2:14:18:d3:80:fb:2e:
fe:33:45:84:5e:8a:10:5c:89:fe:0f:9a:80:af:65:46:b3:af:
8c:7c:54:5a:dc:fa:5a:b8:06:f5:60:6b:0e:28:bd:f4:4e:82:
81:fa:76:1f:aa:40:8b:10:e3:5a:c3:c6:72:92:70:46:0a:29:
21:c9:f5:f8:c4:f3:f6:27:88:61:55:12:30:84:68:9f:bb:aa:
5d:32:01:c3:f4:49:23:8a:03:06:cd:7d:09:4f:a2:58:e2:af:
b9:01:e6:0a:d6:aa:fb:28:8f:25:dd:ad:69:71:70:20:f7:a1:
fd:b7:8f:14:94:17:5d:59:4c:1c:d9:e2:2f:d8:8f:8b:45:14:
d9:37:43:9c:7b:98:fc:4b:20:f7:61:51:e7:27:66:9d:6a:0b:
78:46:72:56:0e:5e:5f:26:3b:b5:b9:9c:f7:27:e8:d6:40:5e:
76:fe:d8:ca:c7:10:46:04:e5:eb:15:ae:26:dd:81:ec:33:dc:
06:99:49:12:c3:8b:d0:ee:57:e8:fc:f0:da:9a:ab:96:cc:e0:
f1:d4:a3:4c:00:6d:e5:f2:bf:4c:ab:ae:c0:fd:93:1a:07:16:
40:16:af:58:05:77:6f:8a:a9:bd:b4:3c:72:42:56:06:5d:c8:
de:2e:8a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:12:03 2025 by rpki-client