Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/aeDfOfbVztGADm5NBTaLM-YRqHs.roa
File: aeDfOfbVztGADm5NBTaLM-YRqHs.roa (raw, json)
Hash identifier: 0X4nT8WQ19Et5qFSAny70J/znuk2NQeORpBaCqs4M3A=
Subject key identifier: 69:E0:DF:39:F6:D5:CE:D1:80:0E:6E:4D:05:36:8B:33:E6:11:A8:7B
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 019422FB6B946BBE65C1E22CDC1B47F2FFD2
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/aeDfOfbVztGADm5NBTaLM-YRqHs.roa
Signing time: Wed 01 Jan 2025 17:48:09 +0000
ROA not before: Wed 01 Jan 2025 17:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206747
IP address blocks: 213.248.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:6b:94:6b:be:65:c1:e2:2c:dc:1b:47:f2:ff:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Jan 1 17:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69e0df39f6d5ced1800e6e4d05368b33e611a87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:1f:4e:8a:76:51:d6:cd:de:77:9b:09:0b:
26:38:f1:69:79:86:a6:4d:60:0c:1c:0b:47:d6:fd:
f1:66:ba:49:ae:8b:1c:5e:eb:66:f5:cb:4a:d1:a4:
aa:2e:f6:01:ec:b3:bf:22:f3:36:e6:5c:b0:da:a2:
70:ff:15:8f:f8:5d:0f:86:a7:a0:d2:99:bc:8a:a1:
63:2a:69:03:cc:3f:f5:d0:49:60:c0:1c:32:c9:4c:
eb:bc:a9:28:c5:61:1c:08:52:2c:6d:ba:25:1d:6b:
ec:7f:8f:e2:75:86:c4:88:53:a0:b8:ee:55:2b:a1:
39:6a:96:82:62:f1:63:46:f9:16:0b:f5:70:f8:5a:
66:a2:a8:7a:e6:e6:10:21:75:5f:46:31:70:fa:f3:
8e:f5:b8:f7:66:b6:7e:11:c6:2e:f7:d0:5d:1f:ca:
eb:36:72:5d:a8:e5:13:0a:09:d2:c6:16:05:83:f3:
a6:d8:59:fa:71:2f:86:80:0d:6d:a9:61:e3:bd:f7:
fd:dd:ed:55:7f:f9:06:67:ea:9f:2c:42:90:1c:cc:
50:14:54:7b:a8:a6:bc:2c:6e:d1:43:3b:ba:60:08:
e2:87:3e:37:90:e2:f3:78:cb:8e:08:fc:03:60:c9:
87:de:81:b2:f1:93:c8:9c:71:bc:17:b3:2c:0f:8c:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E0:DF:39:F6:D5:CE:D1:80:0E:6E:4D:05:36:8B:33:E6:11:A8:7B
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/aeDfOfbVztGADm5NBTaLM-YRqHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.248.192.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:1c:9d:26:64:c7:3c:26:18:55:ad:ad:55:8b:84:a6:6f:bd:
6b:c2:1f:25:69:31:be:30:59:1a:4c:23:b3:98:36:69:e2:8b:
6c:bc:a4:e8:fe:95:94:8a:6e:bb:7f:2d:9f:26:3c:b6:cb:24:
96:92:bf:f5:93:0b:f9:ff:2c:50:e0:a7:75:95:0e:1a:a3:4f:
3b:43:f2:a1:9a:c7:e3:e9:11:1c:e1:37:d1:8a:3a:da:63:6f:
43:3b:a0:ab:94:82:03:fc:39:b7:19:b5:43:8c:8c:b9:62:b6:
31:58:be:ff:e3:1d:57:58:a8:41:dc:22:14:f1:0b:fd:7e:e8:
b0:24:73:4d:25:0a:98:ce:dc:6c:7e:dd:f4:3d:2c:91:b3:d2:
f1:05:c7:26:f2:2e:09:79:46:35:35:9d:8d:aa:a1:d1:e1:40:
11:30:3a:ad:12:c9:78:4a:8b:6b:71:00:8a:8c:6e:49:2c:67:
d2:9e:2d:09:ef:4a:61:13:dc:3f:2d:e4:6f:bf:b6:21:9d:3b:
25:08:78:a4:0b:d3:d8:54:4b:b6:65:d4:4f:02:5a:fe:be:c9:
68:69:cf:98:3b:da:45:af:09:aa:99:aa:83:00:e1:37:2b:2b:
1e:d3:4d:8d:8e:fd:0a:eb:e4:51:e4:b2:ed:e1:96:fc:37:0d:
cc:cf:44:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:33:31 2025 by rpki-client