Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/c1FFC3CfJTkPpEjudAaQ1kdwfPA.roa
File: c1FFC3CfJTkPpEjudAaQ1kdwfPA.roa (raw, json)
Hash identifier: uMTQqmI3sSIjieWva+ZS3Ufjj39UcALTDCZiZLmxyic=
Subject key identifier: 73:51:45:0B:70:9F:25:39:0F:A4:48:EE:74:06:90:D6:47:70:7C:F0
Certificate issuer: /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Certificate serial: 01942444C17E44A00E0E5913D6A5A91D3D15
Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/c1FFC3CfJTkPpEjudAaQ1kdwfPA.roa
Signing time: Wed 01 Jan 2025 23:47:53 +0000
ROA not before: Wed 01 Jan 2025 23:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207930
IP address blocks: 193.46.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c1:7e:44:a0:0e:0e:59:13:d6:a5:a9:1d:3d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Validity
Not Before: Jan 1 23:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7351450b709f25390fa448ee740690d647707cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:60:94:3d:a7:85:15:5a:72:3f:e8:b5:c3:
69:d3:13:ad:87:3c:cb:06:4c:02:0c:22:ea:c6:be:
dc:73:e1:db:f6:f6:d7:7e:32:bd:69:e9:0c:44:9d:
15:ab:b3:d3:3c:c8:ee:2a:a3:e8:84:b3:ed:b6:61:
a1:68:b1:34:0c:7a:bb:02:b3:d3:b2:59:7c:28:f0:
1f:3d:70:78:e6:29:4a:3a:8d:39:ac:fe:ee:79:c5:
af:04:c2:ef:d2:99:0c:f1:b5:3e:dd:26:94:85:80:
b0:2a:96:5a:ea:40:dc:e2:d0:85:1d:69:ff:ee:2e:
de:50:12:a7:b0:46:18:5d:69:8e:fb:50:c3:ce:be:
94:c4:c3:ab:73:81:28:2b:c6:30:4c:ac:fb:8f:56:
f3:b8:f5:91:d1:54:d4:a6:3a:ba:a2:9f:52:3d:2a:
9b:b1:06:e2:6c:90:d1:37:94:a3:13:c3:98:35:2b:
4b:07:03:3c:3b:44:1e:c7:af:ab:44:86:78:78:2e:
69:13:49:21:76:2f:62:7b:d5:ca:2e:68:64:a1:55:
4e:0b:3c:95:e3:9c:7f:e1:4f:6e:02:51:aa:ca:1b:
74:a6:88:93:27:c2:99:f8:78:3c:3e:41:3a:e7:85:
39:dd:a9:3a:82:1a:6a:79:44:71:62:b8:4a:22:c4:
c9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:51:45:0B:70:9F:25:39:0F:A4:48:EE:74:06:90:D6:47:70:7C:F0
X509v3 Authority Key Identifier:
keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/c1FFC3CfJTkPpEjudAaQ1kdwfPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.202.0/24
Signature Algorithm: sha256WithRSAEncryption
57:2f:54:46:62:a9:65:88:26:23:59:b4:2a:5f:23:e2:69:58:
0a:38:f2:7b:ef:c6:21:00:02:1d:4d:ae:60:dd:87:e2:fb:94:
87:9a:f5:e3:45:6f:fd:ae:67:2c:03:9f:0f:88:60:42:5d:10:
c3:33:91:95:55:05:68:31:11:9e:7f:ae:e0:f3:89:a4:32:1d:
f4:b1:b2:1a:b5:40:9b:e6:64:69:78:35:f4:09:8c:9c:d3:fc:
5c:94:4a:d0:a0:14:ae:a2:09:c0:c0:4a:79:b5:cb:32:89:4e:
2e:69:3a:83:8e:ed:d3:f4:96:99:9d:b9:19:45:e6:3d:40:45:
b2:97:b1:62:ec:d1:1c:d8:0f:23:0e:b1:66:62:b7:a7:81:43:
cf:6c:49:4f:b7:04:d3:f3:bd:0b:16:bc:35:b4:5a:fb:ff:e4:
3d:49:8b:58:7a:a5:ef:cf:89:83:35:38:1d:42:e9:3a:17:4b:
91:fb:47:fb:b4:97:67:4d:72:d4:ad:83:47:a9:b4:0d:26:6e:
83:8a:b4:35:38:d4:b8:59:7c:bd:e2:a7:ee:b2:7f:12:5a:72:
e2:15:e6:44:72:04:b4:31:98:27:74:97:9e:57:cc:9d:53:1d:
80:5e:c4:c9:0e:da:d0:22:94:dc:e7:39:1c:ab:86:e4:2a:3d:
6f:56:19:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:16 2025 by rpki-client