Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/0IG70QW2hCrm52M5Cqyqdv7Bcb0.roa
File: 0IG70QW2hCrm52M5Cqyqdv7Bcb0.roa (raw, json)
Hash identifier: usdtXTbOrc0vwd46ZO8C/l/xue6j9QcbuHgY1Bupvvo=
Subject key identifier: D0:81:BB:D1:05:B6:84:2A:E6:E7:63:39:0A:AC:AA:76:FE:C1:71:BD
Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898
Certificate serial: 019423699788B2E880A9CB069D51DD1C92CC
Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/0IG70QW2hCrm52M5Cqyqdv7Bcb0.roa
Signing time: Wed 01 Jan 2025 19:48:30 +0000
ROA not before: Wed 01 Jan 2025 19:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44682
IP address blocks: 193.111.120.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:97:88:b2:e8:80:a9:cb:06:9d:51:dd:1c:92:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898
Validity
Not Before: Jan 1 19:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d081bbd105b6842ae6e763390aacaa76fec171bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:46:bb:3d:48:cb:00:28:b2:14:04:21:4d:
a2:22:bb:9f:8a:b5:bb:2e:30:9b:69:5f:2b:9b:51:
72:3d:88:d7:00:c3:65:00:11:43:fe:89:11:93:83:
df:1c:f1:e1:e0:f0:d4:d6:62:49:b1:de:26:1e:c9:
8a:f9:64:d3:da:ed:b2:7f:a0:29:b9:49:25:28:d0:
f7:ed:b4:af:ea:fe:47:af:8a:86:d6:8e:2e:9a:22:
e8:17:b2:d9:f5:97:5b:66:16:79:e9:d2:2e:5a:35:
de:cb:a6:50:a1:c5:4e:41:0f:f4:ff:17:b5:0e:eb:
1f:6c:30:f4:9a:08:f5:1e:d8:d3:be:ff:48:80:23:
2d:e3:57:63:ba:26:81:ed:65:a4:00:2f:15:9e:d5:
50:f2:9c:18:b8:25:09:e3:04:d3:8f:b4:de:00:0d:
6e:c4:f2:93:de:87:a7:c5:0c:b4:f0:ce:cf:a7:bb:
8e:11:6e:44:3a:00:9e:7e:87:7f:f1:f6:51:7a:d9:
c5:5c:78:99:f3:f0:d4:d4:ad:b8:b3:60:b2:16:4e:
34:63:15:a8:da:ca:5c:96:32:e1:3e:26:a2:7b:12:
21:b0:ed:48:eb:8d:61:3e:ba:1d:05:2c:1f:be:5d:
33:37:2f:c1:47:c2:3a:50:b0:f0:68:ae:17:9e:85:
4c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:81:BB:D1:05:B6:84:2A:E6:E7:63:39:0A:AC:AA:76:FE:C1:71:BD
X509v3 Authority Key Identifier:
keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/0IG70QW2hCrm52M5Cqyqdv7Bcb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.120.0/23
Signature Algorithm: sha256WithRSAEncryption
54:1a:da:4a:04:37:0a:6b:02:d5:00:5d:18:1b:1e:60:64:51:
9b:81:f4:38:ba:b4:75:4c:35:92:0e:e2:f4:3b:86:a1:01:25:
be:4d:73:f1:01:86:7b:39:d9:29:0d:f0:2f:57:a8:86:af:1c:
80:bb:03:58:cc:e5:4a:3a:8c:84:31:c4:f9:0c:9c:e4:98:bd:
74:78:6f:6f:7f:61:49:2d:7a:9f:84:03:8e:cc:da:63:fd:e8:
e6:70:a1:f3:83:90:bf:c5:f1:e1:96:4e:fe:81:05:3f:ef:0c:
fb:dd:5f:11:0c:30:e3:4b:42:3e:5a:cf:cf:56:68:2d:25:7a:
ea:f3:f1:62:a5:4f:7c:f0:4c:02:58:2d:f0:73:10:73:6c:e1:
0d:ea:e6:0b:2f:4b:b0:5b:c1:6c:69:4b:03:6c:c0:98:fc:75:
fe:99:10:1f:c6:d9:19:d6:86:c9:f5:59:0c:1e:18:c8:d9:de:
ef:6a:47:ea:be:9f:fb:73:2b:6a:e6:07:52:42:94:6a:a3:0f:
b9:df:62:e4:72:0c:24:08:58:c4:71:f1:6d:c9:b3:37:bb:07:
a5:d9:9b:62:be:2e:c1:6b:2c:8b:5d:23:d3:43:d1:58:b2:7f:
d0:f1:e5:f5:89:b3:ad:2b:92:4e:12:d5:ff:8f:03:57:67:c2:
f2:42:ad:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:48 2025 by rpki-client