Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/1-T1wzl3TUKiA8m5iaH9QZh9hjp0.roa
File: 1-T1wzl3TUKiA8m5iaH9QZh9hjp0.roa (raw, json)
Hash identifier: JRA15qBJeMepq09VmhJeTzptT8oyDdYWsjobeMnNOAk=
Subject key identifier: F9:3D:70:CE:5D:D3:50:A8:80:F2:6E:62:68:7F:50:66:1F:61:8E:9D
Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Certificate serial: 019425FCC5331EA418D42565D7C69A657BF1
Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/1-T1wzl3TUKiA8m5iaH9QZh9hjp0.roa
Signing time: Thu 02 Jan 2025 07:48:30 +0000
ROA not before: Thu 02 Jan 2025 07:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2852
IP address blocks: 193.84.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:c5:33:1e:a4:18:d4:25:65:d7:c6:9a:65:7b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Validity
Not Before: Jan 2 07:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f93d70ce5dd350a880f26e62687f50661f618e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:38:76:4f:87:99:ce:91:75:ec:03:45:29:48:
b4:25:b2:2c:56:77:7b:2a:81:eb:d4:3d:b8:39:de:
ad:33:8e:87:85:bf:77:4d:de:37:6b:6b:cb:ae:30:
ad:f5:f5:51:78:f0:71:6c:93:af:c6:68:6c:68:b2:
d3:fa:34:ec:b2:8a:bc:be:f3:cc:95:6c:0f:33:9a:
ea:74:d4:bf:c5:ad:5d:54:24:1c:db:31:38:35:82:
e9:d5:60:53:55:ea:2d:1a:3b:f0:a0:e0:a5:29:53:
2a:14:af:06:7a:92:2c:36:2f:6b:6c:de:96:53:07:
2c:ec:ff:99:cb:1c:b0:cd:f7:8c:59:aa:9f:5a:a2:
58:db:65:05:4a:26:d6:bd:ff:1f:d2:85:18:cd:72:
3f:44:43:e2:ce:0e:0e:a0:fa:cd:e5:8a:84:7b:ca:
76:00:9e:54:79:2f:96:9f:be:3e:ce:f8:76:c1:76:
02:d1:2d:0b:a6:15:81:5b:c6:f1:3f:0c:bd:61:1d:
01:dc:47:81:69:55:a0:bd:96:27:85:78:93:85:2c:
b6:8e:c8:a5:6c:eb:30:b5:09:40:83:4d:39:71:cd:
3a:33:bf:6e:fe:af:45:c6:88:7c:21:3e:e6:95:fc:
a6:6c:8f:b0:c0:3f:8e:af:79:5c:3c:6b:52:03:a1:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3D:70:CE:5D:D3:50:A8:80:F2:6E:62:68:7F:50:66:1F:61:8E:9D
X509v3 Authority Key Identifier:
keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/1-T1wzl3TUKiA8m5iaH9QZh9hjp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.116.0/23
Signature Algorithm: sha256WithRSAEncryption
05:e5:4d:3c:91:8a:ab:59:35:8e:e3:d8:00:be:4f:9e:ab:95:
0a:c7:e3:03:cb:15:ff:e7:72:90:5c:e9:fe:4b:17:94:0a:c7:
d4:02:42:e1:82:05:3a:12:2f:d2:95:b2:69:ab:19:ff:6c:96:
69:f9:2b:67:18:9b:8f:b9:a8:a8:bd:08:dc:ec:2e:db:1a:e6:
f9:1f:66:06:ac:8c:76:54:0e:6c:9c:00:23:8f:7e:61:15:f6:
08:d1:73:83:6b:0e:06:12:af:fc:de:8e:54:df:73:fc:67:3b:
ba:b0:51:c3:e4:72:a9:79:9f:fe:ae:41:f3:2c:d9:f1:f9:c4:
29:81:3f:b5:63:65:97:b8:4f:dc:e4:01:fb:37:07:d9:bf:9b:
05:b7:2e:04:e3:c4:9f:fe:17:01:07:07:03:87:ed:ab:01:9b:
42:44:67:91:ed:d3:17:40:ec:f2:41:bc:eb:f8:16:2c:8e:80:
91:8c:a1:66:3c:02:73:d0:f6:ae:c5:7b:0b:31:0b:9e:17:ad:
d8:3c:23:1d:6d:94:e0:55:98:0b:86:fa:c2:73:81:14:7c:2a:
8c:6d:c5:ce:02:40:23:1d:e4:46:64:98:6f:58:39:2c:f0:10:
3d:6c:e5:10:90:b4:ad:8f:41:82:ea:b1:28:4c:e1:65:a4:b6:
49:d7:d8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:15 2025 by rpki-client