Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ClYEPAGP0mZaV812EBlPFIiBVWc.roa
File: ClYEPAGP0mZaV812EBlPFIiBVWc.roa (raw, json)
Hash identifier: lWJZ9DB9EA5OIkZLocafml+unk1fszKbN8FpfNXpsew=
Subject key identifier: 0A:56:04:3C:01:8F:D2:66:5A:57:CD:76:10:19:4F:14:88:81:55:67
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0195F6DE793E92B91F6473884B3FB25F04DF
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ClYEPAGP0mZaV812EBlPFIiBVWc.roa
Signing time: Wed 02 Apr 2025 14:18:49 +0000
ROA not before: Wed 02 Apr 2025 14:18:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210240
IP address blocks: 193.31.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:de:79:3e:92:b9:1f:64:73:88:4b:3f:b2:5f:04:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Apr 2 14:18:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a56043c018fd2665a57cd7610194f1488815567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:da:75:90:4c:73:60:60:73:a2:dd:44:b0:4a:
5a:e7:93:89:bd:1a:7d:2c:56:97:f1:38:8a:99:8e:
29:6c:a4:f5:19:3f:05:0b:ce:0c:ca:96:fb:70:31:
19:6b:4d:1c:b6:1e:64:e3:ba:8e:c3:13:32:2f:7f:
71:57:0b:47:c5:06:9d:f2:87:d4:68:6d:40:8a:65:
f9:af:06:11:d7:36:3b:44:37:ff:a4:c6:d0:7a:da:
fc:a3:cf:ed:38:a6:51:8a:02:5a:81:60:42:3a:b6:
de:1c:a0:09:0d:b7:a8:02:5f:9b:6d:37:f2:1a:58:
03:d6:03:9f:4d:b1:07:a9:d6:18:37:ce:bb:8a:5c:
0c:c7:52:e7:68:82:fc:06:e9:f6:e7:29:90:2d:0c:
25:13:eb:6a:f7:b4:80:fa:85:7f:c8:1f:a0:57:fe:
ec:48:8c:14:02:b6:66:87:48:2a:7f:69:f8:5c:11:
e2:42:2a:2c:9b:c7:ad:3e:55:9a:72:43:31:2f:4c:
f5:63:a0:5d:83:8e:fe:7a:ae:ca:fd:35:33:08:e3:
e9:b7:46:d2:f7:0c:3e:65:71:ea:ae:3b:21:d8:78:
43:e7:12:36:ec:5c:ff:ba:d8:a6:80:1d:2b:1a:b6:
1c:95:a9:24:a4:1b:0c:92:2e:dd:c7:75:8e:49:fa:
e3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:56:04:3C:01:8F:D2:66:5A:57:CD:76:10:19:4F:14:88:81:55:67
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ClYEPAGP0mZaV812EBlPFIiBVWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.13.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d1:d2:af:a9:e3:4a:c6:74:b2:c6:d1:28:20:a9:0f:27:e0:
9a:d2:02:ee:ef:93:f6:02:cb:1c:98:b8:6e:1c:ec:f7:68:f8:
70:a3:da:79:c8:66:67:33:d9:2a:88:2e:93:01:ce:a4:8d:4e:
02:0d:07:e3:a6:3a:6d:81:dd:da:a7:b3:a0:61:b5:2a:9f:bd:
7e:4c:85:d6:f3:81:50:50:ef:bf:7c:e6:23:36:f6:d2:0e:e6:
a4:6f:8f:9b:72:81:aa:b5:22:3a:b4:65:e8:51:a4:ac:43:c7:
b4:f7:a4:5f:0b:1c:05:da:a1:e3:c6:e5:4b:99:51:fd:b3:a6:
74:44:83:96:34:24:a0:aa:51:d8:e0:27:af:af:2e:74:d7:ec:
f0:35:ed:3f:0c:6c:e7:aa:dd:0e:d8:59:c4:ef:f8:56:d6:74:
8b:49:cb:54:9e:f1:ed:a2:3d:f8:fd:5e:ae:4b:7a:2e:89:7d:
f8:10:1b:5b:32:87:37:b6:ef:ee:e4:22:a6:0f:18:3a:c7:96:
77:96:8e:12:9f:27:54:35:a8:cb:15:fa:6e:67:c2:80:3d:6b:
ca:43:c1:07:51:29:1f:8a:72:f8:92:b0:2a:2a:11:6f:82:20:
27:e2:bd:43:8d:bb:34:1f:b3:f9:80:12:10:6d:28:41:a7:32:
4e:f7:69:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:31:38 2025 by rpki-client