Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/7U4mLLCZOK9jPZHgW6zPsanLT3o.roa
File: 7U4mLLCZOK9jPZHgW6zPsanLT3o.roa (raw, json)
Hash identifier: zZ/3JaVashrdH1tPBAExwSunuDftYH55jv3g8RDnCrA=
Subject key identifier: ED:4E:26:2C:B0:99:38:AF:63:3D:91:E0:5B:AC:CF:B1:A9:CB:4F:7A
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 019421B1F091D6F3B1C2EA6FB8C6F26EBA63
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/7U4mLLCZOK9jPZHgW6zPsanLT3o.roa
Signing time: Wed 01 Jan 2025 11:48:17 +0000
ROA not before: Wed 01 Jan 2025 11:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196944
IP address blocks: 193.105.142.0/24 maxlen: 24
2001:678:fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f0:91:d6:f3:b1:c2:ea:6f:b8:c6:f2:6e:ba:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Jan 1 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed4e262cb09938af633d91e05baccfb1a9cb4f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:1e:4c:2d:85:7c:e7:a7:07:82:4a:b5:33:
63:fd:ee:f6:17:ee:ba:ff:5e:ad:37:17:10:da:52:
a9:04:12:2f:55:b7:79:6e:94:14:57:13:b6:9e:e8:
8f:7a:44:0e:b4:14:d7:f3:5d:d6:f7:68:ca:56:88:
e4:c0:ef:af:41:e0:a1:82:9b:a8:6e:9a:86:37:cb:
f7:fc:9f:0d:01:68:4f:78:e6:c9:91:18:58:f7:cf:
73:5a:b4:01:9e:a7:31:75:9f:e4:36:0c:49:a0:32:
9b:d0:e8:35:8d:16:1b:ba:7a:e0:c8:90:4c:68:2b:
21:9e:07:37:99:0f:2d:ef:4e:45:56:6a:5b:b0:df:
f3:01:69:cb:9b:15:d7:0d:8f:13:54:cb:11:60:3f:
ba:e5:35:fb:ca:6e:48:1d:69:04:00:81:cf:32:cf:
ed:e3:17:22:74:7e:54:5b:1a:9e:b1:ee:07:99:8a:
a6:e0:28:dc:9a:aa:c4:59:fd:90:37:bd:42:c3:92:
8a:b2:3b:a7:88:aa:bb:f7:57:c0:6e:67:0c:5e:be:
5f:4c:0c:b4:8e:fe:7b:99:88:2b:f8:f7:e3:8f:c7:
ef:30:0c:61:f2:11:ef:eb:e9:e0:d6:0a:17:b4:7d:
79:8f:0b:b0:3d:01:04:3f:a6:f4:80:59:d9:7a:6f:
d9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4E:26:2C:B0:99:38:AF:63:3D:91:E0:5B:AC:CF:B1:A9:CB:4F:7A
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/7U4mLLCZOK9jPZHgW6zPsanLT3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.142.0/24
IPv6:
2001:678:fc0::/48
Signature Algorithm: sha256WithRSAEncryption
02:f6:e9:c2:63:8a:51:6d:a9:10:da:4a:d5:80:ee:22:b1:ff:
16:06:00:cc:72:4c:f9:49:47:cd:e8:08:22:26:ca:04:93:78:
c7:96:70:17:85:c0:a2:66:1c:30:92:9c:9a:91:5b:a6:50:b1:
d0:42:81:b9:e5:10:9e:a1:11:5e:e7:7b:f1:03:af:8c:e0:19:
48:a9:2c:39:76:a2:41:78:19:49:15:ac:cf:ff:91:f2:b3:62:
31:dc:e5:cd:66:a1:81:a8:f5:a9:85:ef:22:f3:ab:24:ec:8c:
9f:4f:ed:c4:4f:74:82:58:c5:66:9f:99:11:2c:e2:65:ed:64:
3b:4d:42:ad:e8:f5:65:3e:82:17:f6:6d:e7:58:45:69:a9:4b:
b3:14:2e:9c:6f:b4:e4:04:21:ca:8b:8b:71:cf:eb:36:77:ac:
0d:ec:f3:03:74:5c:c1:18:10:01:6f:cd:e3:1c:8c:d6:08:c0:
6b:26:ae:e3:3a:06:7f:45:9f:a7:38:5c:f6:d0:8f:6e:0b:f9:
09:36:a9:12:d2:97:48:27:26:56:62:6d:ce:2f:56:ed:d5:72:
33:f4:7b:92:16:80:0f:2b:68:ee:7b:99:74:c6:28:0f:f3:a5:
8c:a8:27:f1:93:94:bd:7c:fa:3c:58:ba:4f:59:b7:91:01:f4:
a6:4c:af:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:06:39 2025 by rpki-client