Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/pSCPepTx67SC5l3Ed1hdUBnE5IA.roa
File: pSCPepTx67SC5l3Ed1hdUBnE5IA.roa (raw, json)
Hash identifier: MWvK8q7nznQKhnSv15ZjQ+g2Xqx0IxpC4fGczjIPPSs=
Subject key identifier: A5:20:8F:7A:94:F1:EB:B4:82:E6:5D:C4:77:58:5D:50:19:C4:E4:80
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 019425FDA94F174915003B7195D1B8D1F22A
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/pSCPepTx67SC5l3Ed1hdUBnE5IA.roa
Signing time: Thu 02 Jan 2025 07:49:28 +0000
ROA not before: Thu 02 Jan 2025 07:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 193.30.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a9:4f:17:49:15:00:3b:71:95:d1:b8:d1:f2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5208f7a94f1ebb482e65dc477585d5019c4e480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:15:44:05:85:8b:c6:12:fd:9c:49:bb:d5:
db:9c:42:ef:d7:91:70:3e:db:cb:02:66:a0:a6:54:
ca:1b:be:7b:4a:09:cc:bf:91:a4:13:09:c3:43:ec:
bf:e3:a9:3a:3c:65:e8:cf:f0:86:8c:d0:73:e5:28:
8e:f4:28:28:f9:74:68:f1:c5:c4:b0:34:36:a6:b8:
f6:42:a4:81:45:2e:02:0d:a6:f5:e9:2c:3c:7f:2f:
20:97:76:97:03:28:67:e8:99:78:50:a4:3e:7f:a1:
e2:f9:dc:61:47:46:7b:37:b3:8a:36:08:31:b0:b2:
e1:90:f0:7f:07:90:c3:86:4e:38:c6:bc:a0:42:4b:
06:5d:e2:6f:3b:c9:ea:78:40:42:85:0c:64:dc:12:
64:00:69:5a:07:2a:57:65:83:9b:b3:1b:34:ec:73:
95:dd:68:48:ac:65:d5:ed:09:7e:da:1f:93:86:69:
20:fd:33:b2:03:16:70:9e:3d:e2:07:f5:92:82:75:
f3:53:df:b9:40:60:a6:45:4c:3c:43:dd:ed:b0:12:
66:c4:3c:97:05:e4:01:a1:42:8d:f6:7b:0b:0c:6b:
05:b9:fd:28:a5:47:de:e4:7a:04:7d:6a:41:3a:00:
ad:56:36:d7:c9:80:ff:65:45:b9:d3:a8:f0:dd:59:
2d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:20:8F:7A:94:F1:EB:B4:82:E6:5D:C4:77:58:5D:50:19:C4:E4:80
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/pSCPepTx67SC5l3Ed1hdUBnE5IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.140.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:99:8e:ef:b5:26:0c:e2:65:8c:99:38:4f:36:47:0c:f8:a9:
ff:f2:b2:2a:57:77:f0:a1:d5:1f:bb:28:80:b8:03:e4:96:4e:
a3:1c:c7:31:a6:7c:dc:fa:b6:ff:31:83:4f:c0:40:d2:e4:17:
90:a3:be:91:93:bb:fe:1f:b9:44:b9:30:68:02:18:ae:8f:5d:
56:24:5e:42:b1:02:9c:97:db:4e:67:9b:35:2a:7e:37:f5:d5:
5e:23:70:e8:b3:47:3c:36:0f:59:a9:78:47:93:fe:52:2d:13:
06:84:db:52:a9:d7:ee:95:01:3a:10:19:f5:38:16:b2:00:e9:
fe:6d:a3:9e:8b:67:b1:2a:9b:12:9a:20:9b:2c:a2:d2:6c:5a:
05:a7:a2:80:bf:3e:cf:44:4a:d6:70:18:92:f5:d8:fe:7e:c5:
79:e8:87:85:9f:27:06:c4:2d:07:71:ea:84:db:99:35:6c:32:
2b:f7:94:b6:8f:65:e9:86:02:b9:dc:6f:19:be:db:79:3c:c4:
25:e6:91:e1:10:07:3f:1a:b8:1a:1f:b9:4f:c5:8c:42:a7:61:
13:57:e4:a7:2b:50:f9:b6:fd:20:22:27:eb:f4:70:fc:97:d6:
30:e2:bc:27:e4:40:74:be:b4:2f:ad:82:f2:e9:95:0c:1b:fe:
91:2d:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:46:58 2025 by rpki-client