Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/x6hLDer_XW1q_iEu4GXkzkZyC4s.roa
File: x6hLDer_XW1q_iEu4GXkzkZyC4s.roa (raw, json)
Hash identifier: WqVvea5/LNqbNIIZsdml33Mg9/QcNbUM12u8YdmaIWc=
Subject key identifier: C7:A8:4B:0D:EA:FF:5D:6D:6A:FE:21:2E:E0:65:E4:CE:46:72:0B:8B
Certificate issuer: /CN=db375e16a19367de99bb24ac115d259a2a0481ac
Certificate serial: 01942143DFCB158123FAB3FF9BDE182773E0
Authority key identifier: DB:37:5E:16:A1:93:67:DE:99:BB:24:AC:11:5D:25:9A:2A:04:81:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/x6hLDer_XW1q_iEu4GXkzkZyC4s.roa
Signing time: Wed 01 Jan 2025 09:48:03 +0000
ROA not before: Wed 01 Jan 2025 09:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 194.102.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:df:cb:15:81:23:fa:b3:ff:9b:de:18:27:73:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db375e16a19367de99bb24ac115d259a2a0481ac
Validity
Not Before: Jan 1 09:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7a84b0deaff5d6d6afe212ee065e4ce46720b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:97:04:7d:e1:ae:e4:0d:6f:25:3d:f4:01:
69:20:c2:4c:34:0b:74:63:e8:91:ba:ef:59:8a:c1:
54:ff:00:a7:b6:78:d1:ad:c4:0b:00:54:30:9e:61:
e7:8e:89:5b:62:72:68:ea:6a:96:bd:84:7b:a5:87:
c0:89:f5:27:c1:3e:31:6b:cf:bb:0b:5c:0f:6b:00:
d4:6b:6c:8e:97:b6:83:d0:23:76:82:2d:1d:8b:78:
9f:74:35:9b:0e:43:55:37:5f:40:b0:be:22:01:91:
cc:ee:c8:69:1b:81:39:d2:e9:54:29:d3:78:40:dc:
2e:6c:aa:99:ec:1f:ee:3e:81:12:36:09:3c:5b:b2:
0d:2c:1f:2b:68:c2:0d:4d:e2:ed:b1:62:b6:96:10:
9f:eb:90:3c:03:df:e6:fb:b3:72:e0:7b:c6:53:91:
3a:16:9c:6a:f8:6c:1f:43:ca:cf:3c:f3:ec:0f:a2:
33:fd:ed:2f:65:73:4e:36:a2:95:c4:a8:3b:12:b1:
ab:6a:4c:77:61:07:93:72:87:3e:f7:30:0d:10:8e:
f5:23:50:14:89:be:ee:87:8b:d2:89:0f:65:0b:0b:
df:fc:85:7b:77:85:e7:c4:0f:fa:4b:c0:85:ba:5d:
3a:43:15:91:89:12:2b:32:40:95:c4:ee:7b:ad:8d:
32:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A8:4B:0D:EA:FF:5D:6D:6A:FE:21:2E:E0:65:E4:CE:46:72:0B:8B
X509v3 Authority Key Identifier:
keyid:DB:37:5E:16:A1:93:67:DE:99:BB:24:AC:11:5D:25:9A:2A:04:81:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/x6hLDer_XW1q_iEu4GXkzkZyC4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.190.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ef:ca:77:6d:54:a1:3f:0d:a6:1e:0a:82:e5:bd:a0:be:fe:
d5:02:55:16:2a:83:56:ee:25:8e:44:e6:53:39:0e:7f:ae:42:
22:b3:dd:c5:bf:fd:56:d5:7e:ac:8d:78:0d:f6:4d:78:91:85:
2b:a0:86:cf:cd:be:b1:4b:21:64:d7:0c:40:84:9e:bc:a0:b9:
11:8d:43:66:d0:4a:78:68:99:0b:9e:04:2d:9a:78:5b:a6:98:
46:71:7e:af:57:77:3a:44:95:4a:17:4f:66:5c:ac:2e:b8:de:
0e:c5:d0:d3:a5:38:f7:b7:8f:89:9c:b8:8f:c1:7d:f0:d4:cc:
9f:06:51:6d:46:d7:b7:b7:26:42:d6:12:1e:47:bb:e6:66:84:
6b:0a:71:63:8b:a8:bd:c0:24:c5:95:3e:41:ac:ab:b3:10:df:
be:b9:87:d7:45:4a:01:70:1a:77:bf:ff:db:d6:a0:8e:f2:46:
8e:87:8d:11:29:c1:cd:ec:2b:0a:99:c1:fa:18:3a:e6:a0:fe:
83:9c:bd:db:80:07:dd:17:07:d7:3b:f0:7a:b6:29:92:47:14:
0a:23:02:b9:4a:72:7c:69:04:2e:95:b5:6d:9b:74:6c:d8:20:
9d:59:c2:44:13:fa:9e:2b:30:b2:a4:66:57:31:77:b8:a1:49:
ad:cb:95:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:54:09 2025 by rpki-client