Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/0hE7yQkOsQYY1LQEos4wbxzkfnM.roa
File: 0hE7yQkOsQYY1LQEos4wbxzkfnM.roa (raw, json)
Hash identifier: 70ia36yz/7UQliy+dQ5lEepwXI+ufgIzVRbaE7lLztM=
Subject key identifier: D2:11:3B:C9:09:0E:B1:06:18:D4:B4:04:A2:CE:30:6F:1C:E4:7E:73
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 01942445482B1627C22F2C7C4285A81E488A
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/0hE7yQkOsQYY1LQEos4wbxzkfnM.roa
Signing time: Wed 01 Jan 2025 23:48:27 +0000
ROA not before: Wed 01 Jan 2025 23:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202914
IP address blocks: 193.242.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:48:2b:16:27:c2:2f:2c:7c:42:85:a8:1e:48:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: Jan 1 23:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2113bc9090eb10618d4b404a2ce306f1ce47e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:05:fa:c4:f6:d3:42:6f:c0:8f:30:10:aa:
85:ab:7a:a1:cf:d4:33:e5:51:82:2d:d8:83:34:60:
ed:83:64:40:d3:db:41:70:af:9b:ce:fe:62:ec:4b:
1b:9c:e3:c8:be:82:14:6a:ad:7a:31:ea:40:85:9f:
94:71:cd:2d:fa:fa:df:17:cf:51:9e:b9:16:e3:85:
52:3c:0f:20:1b:1e:a4:f5:89:45:45:14:4b:52:63:
c4:83:02:e4:58:e0:99:06:c3:a8:d6:89:8a:b4:46:
7e:af:5d:39:3e:45:5b:4e:ab:39:4d:e4:5a:a5:b9:
66:cf:d7:91:fb:91:ae:b7:10:46:59:9f:2f:5e:f0:
bb:66:73:77:4d:c7:68:50:91:7a:f8:fc:9c:fd:2d:
6c:bf:46:54:e2:82:53:0b:cc:29:d2:47:73:8d:2b:
6e:3f:bf:0e:35:23:56:13:b6:ab:67:79:04:5f:dd:
3f:30:1a:5b:54:08:f0:95:d3:87:2e:6a:82:50:b4:
75:98:f9:e4:59:bf:51:4f:c4:29:67:03:51:57:a5:
d5:a6:4a:5a:18:73:76:18:1f:2b:71:c5:db:a8:9b:
0c:be:2d:90:ac:8c:0a:60:43:d4:f7:82:01:8c:ce:
5d:07:f5:0b:5f:59:8f:11:84:8d:0f:b2:b5:6a:fd:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:11:3B:C9:09:0E:B1:06:18:D4:B4:04:A2:CE:30:6F:1C:E4:7E:73
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/0hE7yQkOsQYY1LQEos4wbxzkfnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.155.0/24
Signature Algorithm: sha256WithRSAEncryption
ea:ad:7b:17:d7:ba:55:95:fa:d2:de:51:b2:a1:60:ed:77:db:
32:f5:9d:77:e4:0e:57:56:d2:90:fb:d4:77:1e:64:29:e0:30:
24:5a:9e:44:ba:30:71:2f:8b:8e:55:9c:41:7b:7d:dd:10:ad:
ab:9b:50:0e:02:c5:a2:8b:3f:4c:48:45:36:ae:28:bb:5c:c2:
50:e9:1c:8c:9e:f4:52:14:48:ac:b8:69:76:a3:69:ea:ca:c0:
44:3b:70:d0:aa:c2:e8:cf:a7:be:14:4f:53:1e:b1:ca:d2:5a:
c3:b8:ce:e4:da:24:3a:8a:49:ce:d7:e6:ae:10:09:60:87:ee:
81:dd:c6:a3:5d:5b:5e:91:b0:a7:60:fd:a0:47:06:b9:de:3b:
6d:b2:1a:7e:c3:43:4b:5b:0c:62:65:ea:ef:80:6b:5a:5a:ec:
c7:7d:31:d5:ab:cc:c5:c9:92:bd:e2:5f:dd:4e:37:09:39:ee:
48:a4:96:a9:89:95:79:bb:92:aa:63:d8:11:ba:26:02:71:a9:
6b:f3:92:b3:a7:b2:ba:72:98:11:c7:eb:ed:58:f0:3b:45:bd:
c1:af:16:49:6b:c9:2c:61:9e:46:37:08:e3:20:47:c5:b1:18:
19:47:21:8c:6d:0b:5f:67:35:7c:00:6c:bf:90:b6:75:a8:d4:
54:92:d0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:53:56 2025 by rpki-client