Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/gySZz205phomZv7uwZ9DDc75Itk.roa
File: gySZz205phomZv7uwZ9DDc75Itk.roa (raw, json)
Hash identifier: eO5SMh+ywbk5mzLS6dSPU+KeItuyQY93yBUL4wk+YdY=
Subject key identifier: 83:24:99:CF:6D:39:A6:1A:26:66:FE:EE:C1:9F:43:0D:CE:F9:22:D9
Certificate issuer: /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Certificate serial: 019427B543AD9E8CC17437E901C011AE3ECE
Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/gySZz205phomZv7uwZ9DDc75Itk.roa
Signing time: Thu 02 Jan 2025 15:49:38 +0000
ROA not before: Thu 02 Jan 2025 15:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 193.150.48.0/24 maxlen: 24
193.201.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:43:ad:9e:8c:c1:74:37:e9:01:c0:11:ae:3e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Validity
Not Before: Jan 2 15:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=832499cf6d39a61a2666feeec19f430dcef922d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:45:96:1d:a3:c4:50:bd:8e:8c:f0:66:a4:12:
22:12:5d:28:eb:2a:bf:19:46:71:61:f1:57:80:fa:
c8:45:a6:e9:71:eb:47:98:4b:38:52:83:7a:0e:cb:
6d:73:9d:04:ec:57:6d:fb:97:fd:3f:fc:42:2b:ca:
a2:5c:c7:9e:46:92:c7:b0:73:90:3f:dd:b9:f8:f9:
95:99:87:6a:d7:4b:96:3c:06:c4:1d:1d:5c:af:d7:
fa:11:67:ce:db:68:62:f7:da:15:e4:b0:24:0f:93:
8d:7f:95:d1:42:43:c6:0f:80:3e:b8:77:6d:f0:fa:
54:07:86:86:97:ed:59:4c:1e:90:3f:9f:ef:75:ce:
21:6d:f1:fe:cd:e1:8b:29:74:45:99:cc:74:bd:70:
c6:d6:c5:a5:de:84:e9:ae:ea:19:31:9c:3c:7a:d7:
e2:00:0a:7c:f1:c8:52:84:12:59:70:39:e8:ca:df:
86:c3:34:c9:ff:ea:2b:b5:53:fc:b0:fa:24:0a:55:
d8:80:43:63:b0:42:56:c8:19:1c:c1:e8:5f:db:ea:
c2:f0:3a:60:00:fa:2f:7a:80:1f:83:e8:c1:ff:55:
0c:d6:ac:a6:ae:6a:f1:55:1b:dc:4c:4c:c3:66:9d:
01:7d:d8:49:cd:e1:1d:04:58:56:0d:65:9a:d4:15:
3e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:24:99:CF:6D:39:A6:1A:26:66:FE:EE:C1:9F:43:0D:CE:F9:22:D9
X509v3 Authority Key Identifier:
keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/gySZz205phomZv7uwZ9DDc75Itk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.48.0/24
193.201.122.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:b3:73:4b:90:8e:8a:9e:06:52:7b:e5:08:27:a1:e1:7d:99:
24:44:52:42:e4:68:c9:2b:3a:bc:2f:ec:70:1c:d5:15:0f:20:
bd:5d:5d:18:0e:98:ce:6a:04:a1:14:1b:dc:d0:d9:33:ba:1b:
26:19:b5:cd:9c:02:cf:19:52:d3:09:62:ec:32:8a:3c:62:e6:
45:f2:86:d5:7b:60:a6:ec:4a:ce:a9:d3:a3:34:24:4e:a3:e8:
b6:d2:2a:ae:ac:af:d7:2e:df:bd:3b:da:ac:99:03:41:18:e3:
9d:85:7d:5a:cc:b6:5d:18:34:1a:83:73:b7:95:a1:e2:84:75:
5b:9e:bb:40:d6:2e:aa:55:e4:a3:1d:52:c9:4f:21:8e:3f:c2:
03:7d:b7:53:ed:f9:e8:59:05:45:79:68:0a:08:62:43:f7:a6:
b5:67:0a:36:32:05:68:19:1e:f2:6c:7f:26:e2:11:f8:be:12:
52:60:55:ef:41:af:9d:c9:cf:ee:6b:a4:d3:10:e5:94:78:9a:
32:d2:b9:2a:3f:36:2c:7b:86:56:28:c4:47:79:db:01:61:d3:
51:87:5c:4f:34:af:7f:ef:8e:d7:c5:fa:32:53:f7:61:e9:a7:
c4:97:20:13:f0:08:b8:7e:fa:bb:48:ce:39:c8:a0:06:05:af:
2f:d3:dc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:02:19 2025 by rpki-client