Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ClL0g49hR5ChvUHMpXbLUOIPVXI.roa
File: ClL0g49hR5ChvUHMpXbLUOIPVXI.roa (raw, json)
Hash identifier: lrRBYkjVSTgGC/LLbKFD3XmfCma1IC2/IYZVyVwJ894=
Subject key identifier: 0A:52:F4:83:8F:61:47:90:A1:BD:41:CC:A5:76:CB:50:E2:0F:55:72
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC2174A5CDC3896D536327273727F8
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ClL0g49hR5ChvUHMpXbLUOIPVXI.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209883
IP address blocks: 193.203.127.0/24 maxlen: 24
2a0e:f8c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:21:74:a5:cd:c3:89:6d:53:63:27:27:37:27:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a52f4838f614790a1bd41cca576cb50e20f5572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:72:ea:1f:08:07:f3:0a:4c:29:71:8b:d8:
2f:25:2a:17:0c:56:28:2f:a3:98:3b:f2:69:a1:bd:
56:83:72:9a:9c:64:0f:aa:53:2e:be:e6:fa:8b:30:
cc:b5:9d:ed:24:13:bb:66:8f:e4:53:b7:88:d1:9f:
54:f8:5e:9f:36:22:8f:11:12:a1:bc:3a:fe:5b:de:
b8:8a:85:2d:16:a6:18:73:f5:df:f0:74:ac:45:e0:
de:e8:05:fd:2e:80:c4:8b:29:11:dd:1a:e5:38:a8:
16:65:bd:09:4e:a0:1e:56:9e:72:77:58:98:e8:ac:
96:21:ef:2b:4a:87:e5:d6:00:15:7b:0d:8c:ee:51:
d2:c8:94:08:74:cc:17:a2:13:e7:58:58:08:18:12:
f7:5f:8c:23:76:37:46:f8:b7:65:95:b9:46:83:ed:
8b:b6:ba:c7:0e:40:7f:10:90:f3:50:c5:4e:45:b8:
6d:3a:7d:16:93:fd:ca:0e:88:5f:80:7d:ef:5a:27:
fe:a9:81:4a:28:95:44:bb:fc:05:82:45:58:fe:b6:
73:60:05:66:12:ae:e6:bf:82:a3:b7:f3:6f:8c:40:
bc:ed:1e:75:38:c1:5d:37:d9:8a:bd:19:95:d1:cd:
35:ba:f0:0a:f6:a9:a9:35:aa:43:85:39:3b:6d:e4:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:52:F4:83:8F:61:47:90:A1:BD:41:CC:A5:76:CB:50:E2:0F:55:72
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ClL0g49hR5ChvUHMpXbLUOIPVXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.127.0/24
IPv6:
2a0e:f8c0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:93:0e:80:e3:6e:ad:a2:4d:e1:71:02:1e:6b:a0:bd:d8:dc:
60:14:f9:42:cb:88:b5:21:f4:9d:b2:93:78:14:64:8c:91:dd:
b5:38:a8:c2:e0:ce:f9:59:d0:82:3a:4f:da:f1:1c:0d:7a:83:
f2:8e:d0:3c:f5:9c:4a:35:e3:8b:a5:99:3e:c9:85:27:ff:cb:
83:4f:6b:62:52:b8:3d:26:5e:69:03:02:a1:6b:7e:6b:7a:f5:
00:52:85:f7:53:56:39:ee:4a:db:3f:60:c9:dc:66:38:56:9f:
2d:75:e0:e1:ac:f8:d4:d9:12:9c:11:e1:42:55:97:fb:71:33:
f6:42:29:67:5f:74:ed:9d:b9:f1:1b:7b:31:92:b9:9d:c7:f4:
c3:79:86:4b:14:2e:de:16:61:54:1e:aa:c1:96:4c:58:be:99:
25:55:06:98:c2:9e:14:67:4d:83:8f:a2:27:49:ac:7a:4b:ca:
46:cb:01:60:a7:1a:bc:db:2b:23:21:47:30:85:0f:e8:60:81:
1e:2b:bf:34:72:7b:78:c5:a7:96:d7:1b:8f:1e:a7:2b:25:f6:
29:bd:81:ee:9d:c8:aa:b6:fc:10:fa:4b:04:53:3e:53:fe:1e:
17:0c:3b:b5:70:e4:b4:16:60:e1:7d:86:11:39:de:cb:55:a8:
43:40:25:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:31 2025 by rpki-client