Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/wV8zvnBET2OmPNrrtE4SsK5y3DM.roa
File: wV8zvnBET2OmPNrrtE4SsK5y3DM.roa (raw, json)
Hash identifier: WHZUiMThERHZ0hfVjMipF4WGFlL19sh6184Ce9U7WFE=
Subject key identifier: C1:5F:33:BE:70:44:4F:63:A6:3C:DA:EB:B4:4E:12:B0:AE:72:DC:33
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 01942521F8D0F347CFD83B57C7B9B1B93890
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/wV8zvnBET2OmPNrrtE4SsK5y3DM.roa
Signing time: Thu 02 Jan 2025 03:49:30 +0000
ROA not before: Thu 02 Jan 2025 03:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 193.56.233.0/24 maxlen: 24
193.56.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f8:d0:f3:47:cf:d8:3b:57:c7:b9:b1:b9:38:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Jan 2 03:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c15f33be70444f63a63cdaebb44e12b0ae72dc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b9:1d:96:6f:ab:86:2f:c5:55:d9:a6:61:a7:
1e:37:07:f9:e1:d8:fc:0d:ec:91:9f:a5:b3:1a:1b:
82:6d:b2:a0:2f:12:73:02:50:62:12:b6:58:f2:b7:
24:0d:63:35:81:7f:5d:18:f4:7e:f4:e2:c4:64:b8:
37:31:51:35:9e:ad:9c:3a:32:49:57:3e:6b:a7:83:
50:90:69:68:2e:df:6f:98:a6:44:40:cb:f2:5d:c5:
f3:9f:8e:b6:3b:47:1f:80:7c:3b:60:ad:b9:6c:f6:
19:09:c4:0b:51:4a:5e:c7:6b:cf:3f:b9:0e:5d:c0:
19:8f:93:b2:b5:0d:ee:20:7b:82:2f:42:ca:ef:b3:
d6:c9:8e:2c:a5:89:fe:82:91:13:2b:f3:86:13:54:
d9:e2:85:73:a2:e5:b2:e8:a8:2e:97:6c:55:17:90:
07:d9:79:39:c9:60:da:33:4a:16:85:47:63:4b:99:
ce:39:c8:21:c0:9a:10:b4:09:0a:08:3e:37:1e:cf:
ec:6c:15:18:4c:cf:b7:03:7a:b1:84:6a:36:29:1b:
e9:3d:ed:69:9c:33:f3:a5:f9:33:86:42:45:bb:9e:
62:fe:90:eb:67:85:c2:a6:c7:17:4a:d4:23:19:3d:
2d:8d:d1:a7:dd:21:b0:cb:ac:5d:4a:58:93:cd:4c:
e5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5F:33:BE:70:44:4F:63:A6:3C:DA:EB:B4:4E:12:B0:AE:72:DC:33
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/wV8zvnBET2OmPNrrtE4SsK5y3DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.233.0/24
193.56.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0b:74:6f:6c:f8:4d:86:23:97:79:d3:8c:6c:6a:33:2e:ff:
52:d9:1c:3a:63:06:be:a2:ed:0a:73:54:ea:c9:e0:3f:8d:97:
f8:56:e0:4f:5f:3a:86:31:89:0a:fb:aa:16:42:f5:2b:1e:02:
53:a1:f4:62:b8:68:75:fc:4c:6a:1a:33:33:01:e1:55:c8:fc:
4b:b2:8d:5e:ad:5d:10:d8:18:37:73:bd:32:1d:4c:f5:d4:f3:
56:d0:13:14:24:24:88:c4:ff:a9:0e:91:a1:0a:bb:84:04:5b:
ff:91:60:66:ba:09:5c:30:c9:6d:6e:df:c0:0a:41:25:31:80:
ea:af:05:85:1a:a2:41:3f:b0:c2:59:61:0a:89:89:39:0e:16:
c1:e5:a2:a7:ab:b8:32:c5:0a:be:3f:23:d9:df:05:26:f8:ef:
34:92:e9:a7:27:3e:d7:42:19:4f:d6:d2:7b:63:a2:7d:65:6f:
27:2f:31:33:5c:e5:4b:41:88:7b:eb:8c:7c:fa:34:73:9c:86:
41:b7:8a:13:20:de:92:fb:09:7f:21:ad:6f:b8:ce:99:c6:c1:
c0:eb:48:d2:97:4c:c7:2c:de:4d:bb:9f:f1:1e:ea:05:42:b2:
8c:8f:82:e9:de:af:c8:2f:f3:a7:6c:d6:6c:66:10:9b:84:56:
7c:4a:cd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:53:44 2025 by rpki-client