Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/aTQzWebpqg_T1Vz72K8wYxcCH9E.roa
File: aTQzWebpqg_T1Vz72K8wYxcCH9E.roa (raw, json)
Hash identifier: sU4u/yCI9RN4etvN429ld52OXctixi8Cp3brB5244bc=
Subject key identifier: 69:34:33:59:E6:E9:AA:0F:D3:D5:5C:FB:D8:AF:30:63:17:02:1F:D1
Certificate issuer: /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial: 019424B3E203E903D65FC526E35DC8651933
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/aTQzWebpqg_T1Vz72K8wYxcCH9E.roa
Signing time: Thu 02 Jan 2025 01:49:16 +0000
ROA not before: Thu 02 Jan 2025 01:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48152
IP address blocks: 193.143.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e2:03:e9:03:d6:5f:c5:26:e3:5d:c8:65:19:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Validity
Not Before: Jan 2 01:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69343359e6e9aa0fd3d55cfbd8af306317021fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:6d:67:da:42:2b:42:cd:20:22:ee:b8:37:
34:8e:d0:13:8d:5d:14:8a:bc:3c:73:a6:65:c2:a1:
5e:d1:98:d0:aa:41:46:42:91:1f:93:30:33:a6:04:
a7:68:3c:a6:f3:52:74:1e:1e:16:f6:0d:4b:2f:72:
bb:16:28:59:45:60:42:4d:5b:cf:17:64:ef:7f:c7:
03:a1:d1:cd:0e:88:54:6a:9f:64:2b:11:03:74:e6:
9e:0d:78:32:f2:56:b4:ad:8b:49:05:f6:ff:29:b5:
b8:4f:e5:67:c9:86:98:f3:fa:3b:36:1a:9e:ab:03:
70:6d:0d:21:6b:1a:71:88:15:92:ad:18:c1:14:c9:
94:00:0c:25:97:36:8c:04:66:47:a3:d3:70:81:08:
74:73:40:65:f6:c0:66:5f:91:a6:0e:36:37:a4:84:
74:3e:6d:d0:ea:1e:47:44:28:39:1b:cb:cf:f6:8b:
29:7c:b0:d3:85:99:5f:30:1a:f3:59:a1:70:1e:57:
8f:31:ee:8a:ac:35:2c:9c:94:2a:0a:cb:09:55:90:
0c:1d:b3:e8:b6:2a:09:39:e9:88:c7:75:fc:d4:1f:
24:3b:b2:ad:c1:b5:4c:c5:27:62:0d:df:bd:dd:67:
66:b6:78:1d:a2:f6:61:8c:b9:a4:b2:10:b1:6a:96:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:34:33:59:E6:E9:AA:0F:D3:D5:5C:FB:D8:AF:30:63:17:02:1F:D1
X509v3 Authority Key Identifier:
keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/aTQzWebpqg_T1Vz72K8wYxcCH9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.122.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:26:b2:28:ad:67:8b:4e:01:db:1c:fa:33:63:d6:91:a1:76:
eb:4e:c9:64:66:69:80:30:9f:70:e1:25:81:91:3b:c0:4a:13:
ec:99:0e:3f:ab:20:65:00:b0:9f:d3:b3:a5:0b:ef:29:b4:a9:
9c:7c:4d:23:fa:be:7c:de:81:f6:9f:30:ca:01:43:52:85:46:
16:bb:30:e8:90:9c:9c:47:db:d6:22:a5:c5:7c:38:5e:9c:0c:
b3:cd:90:15:c9:bb:52:dc:5d:0e:43:16:e0:c6:20:b5:ed:05:
91:f7:bd:29:a1:59:d6:78:f7:4a:7d:4e:be:be:77:a5:98:b1:
be:0f:53:74:5f:b7:61:80:c7:67:ff:8d:7b:7e:ed:b8:4a:67:
97:b9:9d:fd:84:79:92:88:f6:07:bd:45:56:e2:db:66:0a:af:
46:ba:33:fc:98:1a:65:82:d5:8e:07:97:dc:59:85:1c:1a:ef:
bf:9f:68:c5:ff:50:c1:21:e6:29:42:38:dd:4d:3e:9d:8e:0a:
28:2b:9d:01:b2:8a:0c:c1:44:ca:1b:97:80:11:27:2c:52:13:
1b:94:c3:e0:a0:a7:a7:c6:e8:73:85:b7:d8:5a:38:c0:64:9d:
90:b5:e6:09:5e:36:f5:7b:bf:14:7b:3f:e9:6d:e3:75:10:a4:
a0:01:bf:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:03:15 2025 by rpki-client