Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/sxJ4adnYKO7gli2y2qrSkbqN80g.roa
File: sxJ4adnYKO7gli2y2qrSkbqN80g.roa (raw, json)
Hash identifier: zIiuKl1GBABWNnrsEF/02SPcAT6HuQK8fZBVndJMElk=
Subject key identifier: B3:12:78:69:D9:D8:28:EE:E0:96:2D:B2:DA:AA:D2:91:BA:8D:F3:48
Certificate issuer: /CN=114ad0faea03f60593b940ba4c1b7c8660403653
Certificate serial: 01941FFA47646D3F7EC204B7B58B26F67A09
Authority key identifier: 11:4A:D0:FA:EA:03:F6:05:93:B9:40:BA:4C:1B:7C:86:60:40:36:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/sxJ4adnYKO7gli2y2qrSkbqN80g.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 193.33.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:47:64:6d:3f:7e:c2:04:b7:b5:8b:26:f6:7a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=114ad0faea03f60593b940ba4c1b7c8660403653
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3127869d9d828eee0962db2daaad291ba8df348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8f:b5:71:85:ec:57:97:ef:f6:07:35:e6:d1:
d5:fc:54:bc:f9:3c:de:a0:37:12:60:1a:c3:22:c3:
93:b8:9e:bf:99:90:73:a3:a6:e7:ab:2c:88:8b:a2:
70:35:89:dd:54:e9:c8:f7:8a:29:84:d5:2a:db:47:
0a:15:e7:74:6e:a6:e0:8c:e7:6e:d9:e2:c5:7e:89:
66:1f:d3:7c:86:13:32:9c:be:3a:a9:c1:05:71:ec:
9a:20:99:96:27:fc:02:f2:8d:5c:a0:52:e8:cd:c9:
97:18:33:62:a6:0e:e0:b3:86:e6:2e:98:3c:ca:78:
f2:9a:82:1c:81:1e:37:0e:43:07:50:69:76:25:8d:
54:1a:e7:8a:00:38:8a:43:72:55:80:3d:aa:a6:bb:
dc:9f:2e:37:bf:7e:ef:9a:8e:f2:42:03:98:ea:31:
09:d4:21:27:23:2b:af:c0:46:ef:de:6a:54:0f:2d:
85:e6:56:81:f3:9c:62:59:05:f4:c7:d8:d9:26:a6:
db:3e:fb:56:5d:df:4e:e2:cd:12:3e:99:c4:18:79:
60:fd:6e:46:df:d1:d5:93:38:a6:07:5f:18:fe:3d:
5f:eb:2e:2b:2a:77:a6:c8:25:37:e7:9d:5b:9c:01:
7a:99:8f:f2:5d:e8:29:14:46:60:48:c6:d5:b6:ce:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:12:78:69:D9:D8:28:EE:E0:96:2D:B2:DA:AA:D2:91:BA:8D:F3:48
X509v3 Authority Key Identifier:
keyid:11:4A:D0:FA:EA:03:F6:05:93:B9:40:BA:4C:1B:7C:86:60:40:36:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUrQ-uoD9gWTuUC6TBt8hmBANlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/sxJ4adnYKO7gli2y2qrSkbqN80g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b44a6f-69b6-41e1-b45d-c6d92ab678cb/1/EUrQ-uoD9gWTuUC6TBt8hmBANlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.142.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:3f:9d:cc:7e:59:cf:9c:fa:c0:2c:ce:78:fb:1b:79:28:8c:
64:80:37:5d:1a:43:4a:09:e7:b0:90:0f:a5:67:a3:10:82:a3:
da:38:f9:95:3f:3f:63:16:2c:f0:73:4b:24:b3:c3:f2:df:83:
e7:f7:f8:97:2a:c6:bc:49:af:68:b2:e0:69:af:ab:a2:8a:79:
4f:00:fe:09:ac:78:d7:8d:1f:93:3a:4c:be:ee:46:f8:03:5f:
9e:e5:74:ee:ea:0b:65:ab:d6:eb:bd:23:3b:11:c5:a4:c2:82:
c9:37:76:e5:ce:0e:64:16:8a:27:fa:7e:0a:61:7d:3a:ac:61:
80:6c:33:2a:d2:25:7d:a2:da:f2:6d:f3:3c:d9:16:e2:5d:12:
48:f5:8f:3e:d5:79:51:0b:27:43:e1:df:1e:ea:21:17:99:0e:
85:f2:95:77:7e:da:1e:9b:46:36:f7:55:b2:fc:9b:ed:00:fd:
14:3a:0e:cd:b2:f1:c6:d4:a0:54:65:04:70:a6:9b:5b:9c:d3:
2e:44:97:ed:70:97:4d:34:c8:e5:af:14:71:e2:d0:ec:e7:14:
9a:5a:70:38:43:7e:61:2f:e6:45:57:62:ca:4b:a7:44:9f:82:
7b:eb:ac:59:81:0a:55:f6:e3:97:b3:18:cf:a8:b2:dc:2c:30:
1c:ab:03:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:59 2025 by rpki-client