Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/86KtnBbnKeZ-0UgjgDut1VRG7yg.roa
File: 86KtnBbnKeZ-0UgjgDut1VRG7yg.roa (raw, json)
Hash identifier: 9a1RZvSGlCAmLbNK4uU3Qsc9/UARHY4cgk9osDJtBww=
Subject key identifier: F3:A2:AD:9C:16:E7:29:E6:7E:D1:48:23:80:3B:AD:D5:54:46:EF:28
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067D1A785938E221FD53B470573832E
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/86KtnBbnKeZ-0UgjgDut1VRG7yg.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199642
IP address blocks: 195.65.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d1:a7:85:93:8e:22:1f:d5:3b:47:05:73:83:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3a2ad9c16e729e67ed14823803badd55446ef28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:96:02:ca:e3:30:05:fb:9c:e0:f9:16:0e:
4d:0b:26:96:f3:17:35:44:08:c5:36:21:18:cc:51:
09:5e:c8:9d:ad:85:fe:79:1e:0e:77:30:a2:19:36:
2e:77:2b:29:98:7a:a3:3f:5e:86:89:ee:2f:f2:57:
d3:58:34:9e:fd:9d:72:84:0a:c3:a8:52:5e:98:83:
fc:a9:e0:42:45:d2:e5:a0:68:29:2c:ee:14:a8:8a:
f2:45:af:ff:20:0e:b8:49:69:c5:a6:8d:3c:9e:ab:
ff:9b:8c:06:14:62:59:3e:d1:15:23:7d:f8:49:5b:
a5:46:12:4c:36:64:8f:cf:a8:ac:bc:b0:64:7e:bf:
24:98:f2:57:5c:5d:fc:4c:ce:1a:78:a5:ac:f2:03:
d2:5b:78:62:b3:29:da:03:d3:e3:89:4b:1e:20:07:
bf:76:ae:6b:74:19:9b:02:d9:25:30:53:11:9f:c2:
f5:ef:0b:60:81:75:98:6b:ae:64:4a:21:51:f4:8b:
5f:2f:c6:8f:ba:83:4d:16:b6:ed:47:17:40:dd:95:
3d:47:02:3e:46:e2:fe:fa:87:10:1c:2d:39:1b:ec:
11:fb:55:d4:01:29:7b:cd:36:84:10:63:75:2c:03:
f2:fe:c8:be:6f:3f:a2:9d:74:0d:e1:16:08:f2:a4:
66:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A2:AD:9C:16:E7:29:E6:7E:D1:48:23:80:3B:AD:D5:54:46:EF:28
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/86KtnBbnKeZ-0UgjgDut1VRG7yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:6a:ab:94:a0:96:6a:01:03:b7:be:b5:f8:6c:52:6d:35:0f:
c9:41:ca:8f:95:08:7f:03:19:c3:08:24:b3:29:39:7d:58:d0:
06:db:11:37:4a:19:64:d4:16:1b:c3:c5:92:c0:25:71:18:6b:
84:a3:15:d0:02:1c:7d:01:44:60:72:a0:bf:40:47:b6:b2:e4:
e5:d5:12:85:6b:a3:98:23:18:31:82:fe:4f:0c:65:c3:15:0e:
b3:e6:3f:5d:07:43:a9:22:ea:fe:fa:e0:84:a8:35:5d:5d:b7:
c5:83:50:7e:e4:9d:fc:ec:f2:bd:6c:01:a8:03:45:23:e7:d8:
10:2a:3d:70:f0:45:47:a0:b6:94:b0:47:ee:6d:2c:8d:ce:62:
96:c4:7f:78:05:1a:92:6d:cf:9d:53:21:dc:06:74:51:bc:c1:
db:b4:60:66:66:03:3a:c4:5b:e5:1d:e1:e6:aa:00:f0:b7:8a:
c3:af:33:8c:d4:c6:cd:b2:49:ba:74:6a:0f:61:6f:58:8c:62:
5c:d7:f4:b0:35:bf:09:55:cf:f0:69:f5:92:60:2f:be:b0:d6:
85:a0:1d:87:4f:bf:f7:a8:c9:1e:89:46:8c:aa:dd:5a:6b:4d:
ac:64:3c:f7:d7:0b:b0:57:63:70:b2:d4:24:0a:a2:a6:0a:5c:
03:73:d3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:53:15 2025 by rpki-client