Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/69dWdFoobjSA2iow5aUTFhuOh3s.roa
File: 69dWdFoobjSA2iow5aUTFhuOh3s.roa (raw, json)
Hash identifier: hNVA6fwfKmjy1DWyQtue9piqSZ7JJE9O4NoEjH6D544=
Subject key identifier: EB:D7:56:74:5A:28:6E:34:80:DA:2A:30:E5:A5:13:16:1B:8E:87:7B
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BEB75BF40BBC8D8BEC9F67F1FD506
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/69dWdFoobjSA2iow5aUTFhuOh3s.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201113
IP address blocks: 188.114.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:eb:75:bf:40:bb:c8:d8:be:c9:f6:7f:1f:d5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebd756745a286e3480da2a30e5a513161b8e877b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:95:f1:23:82:bd:17:d3:f6:21:a7:0b:ac:
14:57:c5:42:7f:69:7e:f1:0b:54:45:69:f1:1f:32:
a4:28:41:e2:1a:bd:2b:13:67:b7:a3:fe:47:86:4e:
2b:0e:26:60:e0:c8:bc:94:97:b3:8c:21:68:0a:fc:
7c:b7:4a:f5:9a:19:9a:e5:91:64:e7:12:63:6c:fa:
75:83:6a:22:17:e4:73:ca:a0:3b:3f:f2:d7:c7:45:
5a:86:cf:31:61:d7:7a:67:a2:c4:a7:13:6a:34:7a:
cf:c0:83:19:08:be:f3:2f:af:d8:2b:68:33:81:34:
28:97:58:fb:51:c1:8b:1c:d8:3a:1d:c9:f3:24:43:
02:09:65:aa:50:8c:73:5d:65:93:d3:c8:21:22:30:
3c:af:6f:7e:94:ee:45:ff:80:72:f3:40:e2:6f:93:
7d:f8:bc:73:4e:d2:12:f1:4d:22:d6:cd:64:e8:40:
4f:0d:0e:5e:8d:4e:82:cc:a8:49:e6:06:07:f2:23:
d6:9c:9c:f0:91:42:86:4a:3e:a4:4c:89:0d:1f:34:
68:b5:23:a2:e5:42:ab:cc:07:ec:77:7d:9f:98:66:
b6:1f:64:42:29:08:8e:1d:a2:e5:c7:c8:ee:5b:2a:
92:7b:54:7a:a2:8f:4f:ec:a5:1b:be:2c:4d:b7:5d:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D7:56:74:5A:28:6E:34:80:DA:2A:30:E5:A5:13:16:1B:8E:87:7B
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/69dWdFoobjSA2iow5aUTFhuOh3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.66.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e1:9f:a0:c9:60:27:08:15:5a:f3:db:ae:eb:47:98:09:35:
28:5a:24:45:67:84:a8:1a:f0:93:5a:e3:2e:c6:e6:0f:b8:e7:
c5:76:c6:55:c8:ff:c8:4e:61:78:21:52:5a:f5:ce:fc:e0:15:
1b:b3:b7:ea:8d:a1:20:4f:c8:ac:61:a5:01:19:f7:4e:9e:d7:
c0:db:4e:67:2b:f1:67:02:63:33:00:3b:c8:6e:62:a6:81:8d:
2b:16:74:79:4d:ae:3e:c5:60:12:cc:14:33:dd:26:a7:fc:8a:
b4:f4:18:7f:e7:a8:1e:a9:25:28:bc:c0:bc:30:2b:9f:63:21:
74:8d:38:68:f5:5e:2e:af:1e:25:c8:c4:0e:89:3d:a5:f3:76:
25:86:fd:06:31:73:93:20:b1:d3:6c:f2:8e:d9:60:50:37:49:
72:42:19:95:e8:3e:19:38:2f:98:24:17:72:9b:cb:fd:38:f8:
7d:63:5c:19:a6:32:9d:3e:8a:fc:5c:8a:6f:fd:46:aa:9a:12:
8a:1a:69:dd:7c:cb:5a:9a:4b:a3:9a:b0:91:ec:ac:d4:03:4f:
66:9b:ab:a5:84:ca:ee:6b:96:2d:8d:84:d5:d8:82:40:db:a5:
04:12:fb:91:63:87:64:20:cc:28:0b:6c:88:b0:5b:0e:64:87:
ce:8c:5e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:01:59 2025 by rpki-client