Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/BuDcPMwCapskKDGJlWsZctPOBc4.roa
File: BuDcPMwCapskKDGJlWsZctPOBc4.roa (raw, json)
Hash identifier: 3bBve525vpAtWU3g8/6VOaPU/EQ0F7VvrXGpa6fOHFk=
Subject key identifier: 06:E0:DC:3C:CC:02:6A:9B:24:28:31:89:95:6B:19:72:D3:CE:05:CE
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 01942143F17D61458D551C873D19FA6A8834
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/BuDcPMwCapskKDGJlWsZctPOBc4.roa
Signing time: Wed 01 Jan 2025 09:48:08 +0000
ROA not before: Wed 01 Jan 2025 09:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 328543
IP address blocks: 195.78.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f1:7d:61:45:8d:55:1c:87:3d:19:fa:6a:88:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jan 1 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06e0dc3ccc026a9b24283189956b1972d3ce05ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d5:ae:24:c1:32:e8:53:3b:10:6a:ef:8d:a2:
e5:b3:51:6e:64:c3:fa:51:55:c3:86:65:e4:36:3f:
74:c7:50:bc:72:e7:bd:e1:0f:78:27:ca:eb:b1:b4:
01:7b:68:4c:b0:8f:af:20:4e:97:53:fc:b8:93:cf:
43:61:77:50:88:3b:91:98:d6:d9:70:c2:0c:e0:1b:
a5:d0:65:a5:69:83:6e:9b:55:b4:75:62:60:cd:be:
c8:b7:2b:6d:29:24:20:b9:be:8e:7a:e4:92:b5:8b:
70:45:f4:c8:26:66:c6:71:7b:25:1a:ce:4e:e7:c6:
0d:3e:5a:97:8f:bd:0f:0b:d1:de:93:66:75:7b:63:
47:06:6d:ef:f6:dd:c5:da:4f:85:bf:75:97:97:e8:
4f:c8:d5:2d:03:e1:82:78:85:5b:9f:c8:7f:25:85:
a2:53:8d:fa:cd:b7:f2:40:d7:fc:3f:41:8b:86:1d:
40:5e:89:38:2a:28:c5:bf:55:c7:a7:bc:11:2c:16:
7e:de:03:41:3a:f0:e0:ad:ec:0b:c0:9d:c0:0b:7d:
7a:3f:66:1f:5e:b8:f1:3f:d6:9d:28:81:60:3a:c1:
ab:20:73:68:0d:63:50:ce:49:d5:45:b8:f9:af:22:
32:01:03:2d:76:96:d2:b6:d5:90:8f:2b:b0:ff:e0:
4d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E0:DC:3C:CC:02:6A:9B:24:28:31:89:95:6B:19:72:D3:CE:05:CE
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/BuDcPMwCapskKDGJlWsZctPOBc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.48.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:71:c5:e1:7f:34:20:b2:fc:c5:3f:47:1b:a1:1f:15:21:a8:
c9:6b:e7:e7:90:9f:e4:66:24:db:77:e4:67:1a:d1:91:aa:22:
45:17:c9:75:33:5b:01:cf:4b:b5:0d:e7:f7:e3:c2:19:5a:ff:
2c:16:dc:83:ce:2c:79:86:7d:5d:de:ef:d5:68:be:52:1a:46:
a9:f6:6c:26:04:d5:f6:14:dc:94:fc:6f:02:95:2b:4c:ba:d6:
5d:0f:a8:c3:0a:90:58:92:51:19:f0:9d:11:25:51:09:10:44:
e9:59:f7:78:8d:0f:12:f8:20:44:01:cc:d8:ac:09:b9:6b:a9:
86:d0:09:f3:c3:a5:cf:04:14:fb:93:37:9d:6a:6f:10:0b:e5:
0d:18:3d:b6:49:83:35:b7:71:d6:4e:39:b0:ff:71:29:96:bf:
0f:bd:27:05:90:5f:36:e6:e0:cc:70:9b:04:86:dd:a0:23:fb:
33:0b:35:76:08:2a:c1:21:81:59:b6:92:bc:08:9d:8b:36:81:
3e:19:98:0b:2c:7c:71:dd:29:be:82:c1:95:f7:cb:65:de:7d:
17:a6:eb:70:54:d9:a0:98:de:84:70:60:82:27:6d:70:18:1e:
7f:f7:3a:95:0c:54:9f:b3:90:9f:af:74:70:65:e9:75:8d:14:
80:cf:05:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:37:15 2025 by rpki-client