Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/534vF5sjkwJDGuUSMSbyeoXyx-w.roa
File: 534vF5sjkwJDGuUSMSbyeoXyx-w.roa (raw, json)
Hash identifier: yaE3+RBNj5kJXWkdpo0vdtCXgmh99gzWa0o0cozuQ7M=
Subject key identifier: E7:7E:2F:17:9B:23:93:02:43:1A:E5:12:31:26:F2:7A:85:F2:C7:EC
Certificate issuer: /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial: 0194228DDE96414A4E9595F91EB7B079FA78
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/534vF5sjkwJDGuUSMSbyeoXyx-w.roa
Signing time: Wed 01 Jan 2025 15:48:30 +0000
ROA not before: Wed 01 Jan 2025 15:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41807
IP address blocks: 195.8.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:de:96:41:4a:4e:95:95:f9:1e:b7:b0:79:fa:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Validity
Not Before: Jan 1 15:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e77e2f179b239302431ae5123126f27a85f2c7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:74:19:7a:98:34:3b:9b:8d:a2:2b:06:41:dc:
a0:88:01:ec:6b:92:16:cd:1e:87:7a:83:54:b5:10:
53:db:59:4b:75:9d:cc:b9:c9:fd:48:6a:5a:2b:ba:
6a:f6:d1:06:78:b4:09:2f:c1:19:9d:83:9a:54:a1:
3d:70:26:6e:03:97:97:b9:4a:7d:80:c7:7f:62:0c:
f1:a9:ae:f6:96:d6:bc:70:df:75:c8:73:70:f0:06:
e9:ed:32:9d:db:97:ca:81:53:77:b0:a1:28:95:35:
00:e3:da:93:93:19:5d:f2:62:33:dc:80:9c:56:1e:
4f:52:47:c7:c8:42:9a:54:84:3c:51:ea:51:a0:f7:
19:bf:ff:ca:67:74:18:14:a7:d8:45:a6:19:3b:a8:
c3:89:6b:b9:fa:08:3d:88:78:d9:41:f1:48:2f:3e:
51:11:2e:f1:a6:cb:4e:22:fd:04:ff:de:da:f6:53:
63:07:74:75:7f:f0:fe:f9:d2:6d:c9:03:0d:a2:a6:
86:ae:bd:45:e5:98:2e:c5:00:d1:ae:7d:d6:0e:b1:
6c:e7:ea:c4:4c:8e:25:cc:75:ec:f7:13:20:d0:7f:
5d:c1:c6:ea:b5:ff:c9:ff:a9:90:40:b9:2f:31:e7:
fe:05:1d:c2:b8:33:fe:16:2e:60:f9:ba:ef:c7:68:
57:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7E:2F:17:9B:23:93:02:43:1A:E5:12:31:26:F2:7A:85:F2:C7:EC
X509v3 Authority Key Identifier:
keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/534vF5sjkwJDGuUSMSbyeoXyx-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.206.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:ee:99:d2:ce:eb:eb:5c:ed:84:38:ff:fd:eb:c0:bf:f2:e7:
a8:61:91:48:58:85:50:c5:53:5d:a0:3a:b4:12:16:0c:d1:5e:
cf:48:fc:4d:eb:b7:dc:02:a4:9f:72:f3:a8:97:0c:e5:43:66:
b4:86:c4:66:de:8b:61:42:35:46:2d:e6:3c:d3:b5:6b:ab:a2:
b5:db:be:c4:5d:fc:78:64:b0:02:66:83:14:5f:89:e4:cc:60:
a8:f3:39:c5:24:b0:54:97:74:0e:4d:51:9f:95:67:ce:5e:cf:
cb:00:4f:06:b3:eb:84:ba:d7:fa:a1:38:02:44:34:dd:33:06:
63:f5:83:b8:ab:71:45:e9:3a:e2:2b:91:bc:55:cd:b7:b5:9b:
3b:4d:cf:90:24:54:f7:16:c3:da:e6:77:c1:d9:fb:34:d0:b6:
03:f9:da:90:30:f8:4d:8f:29:39:55:ce:91:99:e7:4a:ab:70:
de:81:9e:7c:84:d5:29:da:3a:12:ca:76:e8:40:a3:a1:ca:d4:
bc:54:0a:17:5f:41:77:48:0a:c7:58:92:89:f5:73:37:e6:5c:
44:9d:07:f8:2e:50:68:a1:77:ed:9a:77:43:2b:ed:25:c1:0d:
be:50:62:0c:d6:74:a4:11:14:05:a9:fb:ef:05:48:0e:dc:cf:
f7:ec:71:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:05 2025 by rpki-client