Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/xI58c73DeKr6LV7gWxL970Jiqyk.roa
File: xI58c73DeKr6LV7gWxL970Jiqyk.roa (raw, json)
Hash identifier: aAAwzlWd1w44DeLKsr1+DNATM4B00X1NUm9H9AmMKoo=
Subject key identifier: C4:8E:7C:73:BD:C3:78:AA:FA:2D:5E:E0:5B:12:FD:EF:42:62:AB:29
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BE2C5410AEAF42B52C0A3A79C94F4
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/xI58c73DeKr6LV7gWxL970Jiqyk.roa
Signing time: Thu 02 Jan 2025 09:49:52 +0000
ROA not before: Thu 02 Jan 2025 09:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198851
IP address blocks: 193.192.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e2:c5:41:0a:ea:f4:2b:52:c0:a3:a7:9c:94:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c48e7c73bdc378aafa2d5ee05b12fdef4262ab29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:f3:3b:84:0c:70:c2:7c:1e:d0:5e:b3:74:
93:36:51:76:b8:b6:9c:ce:5b:bb:87:79:cd:79:9f:
9d:f0:81:09:6b:2f:d5:29:ff:62:00:8a:a3:9e:a1:
07:32:2a:05:ac:b4:c3:09:05:87:8d:6b:4a:ea:5f:
b1:48:b6:2f:6b:e6:80:1f:01:37:ab:c3:ca:ce:c9:
de:c3:2f:28:35:8a:3d:d4:76:63:b8:44:1a:71:72:
64:b9:3c:14:ea:bf:55:24:97:d0:14:0a:0f:d4:0e:
2d:24:44:ac:2a:d5:60:37:d7:84:31:22:71:fd:c1:
27:94:27:a6:4b:31:e7:b7:28:7a:8b:fe:5e:fe:5f:
38:1b:04:9b:dc:62:b0:c4:f7:c5:ac:f2:db:7e:95:
cf:7b:40:75:b6:b0:af:14:39:1e:96:e7:64:1d:6b:
c4:3b:be:86:c4:ce:0d:a8:76:7d:76:86:57:c4:ad:
b8:61:68:a4:26:9b:72:75:98:2f:1d:64:b7:5c:57:
a5:dd:54:fb:88:90:e5:47:b6:d7:87:40:a6:0d:9a:
0c:b7:b1:ac:32:d1:dc:fc:b9:56:3a:ba:9c:e6:5d:
63:cf:62:e2:2e:05:1d:72:3e:09:2d:18:54:08:35:
81:c8:38:76:47:62:1e:49:63:05:5e:5f:a9:96:8e:
ad:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8E:7C:73:BD:C3:78:AA:FA:2D:5E:E0:5B:12:FD:EF:42:62:AB:29
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/xI58c73DeKr6LV7gWxL970Jiqyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.168.0/24
Signature Algorithm: sha256WithRSAEncryption
25:db:d9:b6:8a:ee:c7:60:8c:5c:13:e3:85:fb:22:d6:ec:9d:
bd:1b:55:d5:cf:3a:8e:1a:0c:3a:e1:48:cd:4c:08:62:03:ad:
fe:0e:7b:6b:8e:b6:18:e1:a6:ba:b0:f2:3a:be:ed:a5:cc:ec:
b5:df:d7:5b:d0:fe:44:4d:48:55:70:36:03:b1:63:de:e7:c4:
42:ab:25:a1:d7:52:77:15:9d:2f:97:0c:21:c4:70:53:51:d0:
eb:df:70:90:c8:da:77:c1:d3:a2:89:e5:09:23:33:69:e6:e0:
f2:de:1e:a7:f1:82:d0:b8:dd:8d:d6:a0:31:e0:5b:fe:b1:28:
7f:ca:f8:7a:7e:f4:81:8f:55:ad:a5:be:a3:8b:f5:5b:71:60:
0d:10:fa:78:42:4c:3c:d8:5f:d3:fe:db:1e:47:a2:55:0f:3b:
be:14:43:17:53:97:58:6e:40:d7:85:9b:66:d0:1b:20:5d:3d:
3e:9f:44:7e:72:41:dc:ff:ca:cd:2a:53:0c:1e:92:eb:aa:64:
a8:fa:cd:e6:b9:00:c7:52:e0:28:b7:42:c9:f5:51:7f:39:dc:
10:ca:64:4e:d2:ce:0f:b0:e3:e7:2c:9d:62:cb:1f:88:6e:f9:
42:52:78:b3:bf:06:07:e4:4e:9f:f5:a1:b4:7e:61:41:1d:6b:
98:b6:a9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:42 2025 by rpki-client