Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/911mu2Suj6Dc73U5ClpiV6uw4no.roa
File: 911mu2Suj6Dc73U5ClpiV6uw4no.roa (raw, json)
Hash identifier: qEURFtDeY+J3VwVWw/O3Pp8clugIYSrMPdnPar+j3OQ=
Subject key identifier: F7:5D:66:BB:64:AE:8F:A0:DC:EF:75:39:0A:5A:62:57:AB:B0:E2:7A
Certificate issuer: /CN=54e610c2abd3664c11204580f748996555c22225
Certificate serial: 01941F8C8332C5FD833EAB2C8F48E613868E
Authority key identifier: 54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/911mu2Suj6Dc73U5ClpiV6uw4no.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60893
IP address blocks: 193.0.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:83:32:c5:fd:83:3e:ab:2c:8f:48:e6:13:86:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e610c2abd3664c11204580f748996555c22225
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f75d66bb64ae8fa0dcef75390a5a6257abb0e27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:64:02:99:10:56:fe:bb:f8:76:21:82:38:
50:75:be:d4:2a:81:35:b8:da:8e:a3:ed:c2:0e:ba:
31:fd:6f:db:52:d4:2a:db:af:96:4d:6b:23:b5:bc:
f0:9b:6e:39:f3:4b:a2:55:eb:e4:e5:ab:e4:7a:6e:
38:50:e9:f7:37:50:d3:b2:f7:c7:59:05:c6:84:9f:
4f:a0:34:3f:9c:0a:b6:4f:eb:97:27:58:4a:fb:78:
d4:a6:76:2e:0b:9d:0f:95:ed:e6:74:34:16:0f:f0:
aa:ab:65:f7:ca:7b:65:8b:34:de:40:d8:5f:f0:19:
9e:30:e0:63:ac:c5:a7:0b:5f:4b:85:06:8b:21:99:
27:4f:77:c2:88:53:5d:46:c3:d9:dd:89:3b:b2:8f:
85:c4:43:74:8f:b4:aa:39:ca:33:60:8b:ef:db:77:
e3:f2:f8:f3:7c:0e:a3:6e:0f:fe:cf:bb:7b:0c:ba:
dc:6d:99:3f:bb:89:93:17:41:8f:01:e6:26:77:ba:
65:92:86:ed:38:a7:cc:e0:64:25:c2:88:58:cb:75:
ae:50:55:28:72:77:fb:ce:23:7e:65:bd:8f:c2:48:
3f:42:da:a8:59:06:11:8e:83:bd:39:87:84:2f:d1:
fb:c5:34:8c:90:8d:f0:4b:16:21:db:28:17:2d:b8:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5D:66:BB:64:AE:8F:A0:DC:EF:75:39:0A:5A:62:57:AB:B0:E2:7A
X509v3 Authority Key Identifier:
keyid:54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/911mu2Suj6Dc73U5ClpiV6uw4no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.233.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e6:d7:7a:d4:9a:74:9b:38:7f:9d:36:7d:03:28:71:95:e3:
81:7a:cc:5e:35:0a:25:c9:6b:c9:8a:56:19:08:4c:d9:f0:0c:
a7:5d:12:cd:a7:d9:70:b2:3e:97:a0:88:91:3f:f3:f8:6c:bd:
2c:67:3f:33:06:41:6f:ba:06:91:7b:2f:c3:7c:6f:82:26:4d:
18:0d:0e:b4:db:1e:f8:ae:19:66:c2:14:01:99:11:68:12:dc:
23:06:f2:56:c0:91:9b:cd:fe:65:47:35:8c:92:48:aa:17:77:
7e:d9:a2:73:cf:b9:80:14:14:4b:ca:c4:7f:63:49:69:54:cc:
08:ba:75:0f:bd:46:d0:e4:16:bd:8c:1d:19:f5:96:5e:49:68:
5d:62:12:03:35:b9:75:b3:93:36:c5:e1:69:0c:a5:a9:fc:04:
8c:56:88:6c:1a:d2:0f:b8:d4:53:55:7a:04:3c:54:66:45:d4:
a9:13:32:86:d0:a7:79:dd:71:35:8d:02:29:92:80:17:e4:44:
be:3f:34:d5:36:c9:0a:bf:96:60:d2:04:ff:b9:f0:c2:b6:be:
a2:5e:95:e2:ff:f3:ea:f5:21:0d:d1:32:45:b6:e1:65:b5:c1:
ac:dd:af:44:b8:0b:e5:d5:a2:56:17:59:93:33:c3:f5:08:81:
2d:1b:f9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:31 2025 by rpki-client