Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/pYrHRRdGKzp7OIe1SUWLYtXcM9Y.roa
File: pYrHRRdGKzp7OIe1SUWLYtXcM9Y.roa (raw, json)
Hash identifier: OzOY0OrVWczErs4fuxcA3h4F8Ql7jZ/JPJpASVv2l9A=
Subject key identifier: A5:8A:C7:45:17:46:2B:3A:7B:38:87:B5:49:45:8B:62:D5:DC:33:D6
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0194F18A4FC148F742A800AAD06B82A71C66
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/pYrHRRdGKzp7OIe1SUWLYtXcM9Y.roa
Signing time: Mon 10 Feb 2025 20:26:00 +0000
ROA not before: Mon 10 Feb 2025 20:26:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211585
IP address blocks: 193.160.141.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:8a:4f:c1:48:f7:42:a8:00:aa:d0:6b:82:a7:1c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Feb 10 20:26:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a58ac74517462b3a7b3887b549458b62d5dc33d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:31:35:76:cd:f1:0b:11:58:5b:c2:be:9e:
03:59:39:4b:b3:04:d5:ba:72:32:12:69:f8:65:d5:
cb:ef:80:e0:dc:fd:1a:7a:6c:aa:4f:54:e9:d2:e4:
1e:a9:a1:c4:22:08:5e:c1:58:5e:62:57:ec:bf:6b:
12:ea:f9:67:13:7e:2e:cf:4c:d7:02:5f:96:11:f5:
36:b0:a3:93:3b:70:78:91:a4:5b:d5:b1:a9:38:df:
d0:43:89:bb:4e:88:fd:9c:4d:59:be:31:a5:9d:26:
d7:4a:31:e2:d3:7e:d5:be:3d:0d:e6:f3:15:66:b3:
4e:75:e2:dc:25:aa:80:81:2f:e3:18:ba:63:45:f8:
5b:f4:7d:88:25:42:ee:7f:5a:d4:65:bb:29:dc:87:
20:46:c4:13:8a:a1:65:db:07:b1:55:cd:58:2f:f6:
29:a3:15:7b:35:77:b4:ac:ba:de:eb:49:ef:df:a7:
81:6f:ae:43:32:c7:ec:57:91:2f:ef:fd:4f:1d:14:
d5:04:46:34:ed:0b:21:ed:58:a7:19:ff:62:29:37:
9a:f1:93:a6:72:39:fd:ee:85:a7:f9:f3:f2:6c:81:
7c:0c:f9:c2:47:62:25:67:0e:84:50:5a:dd:05:c1:
84:e3:51:e9:c1:ff:b6:cd:91:4b:f8:52:2e:7e:35:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8A:C7:45:17:46:2B:3A:7B:38:87:B5:49:45:8B:62:D5:DC:33:D6
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/pYrHRRdGKzp7OIe1SUWLYtXcM9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.141.0/24
193.160.143.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b1:77:94:f1:b1:d6:c5:bb:40:53:9d:fc:45:71:14:9a:b1:
0e:fa:34:5d:90:bc:6c:95:c9:a2:85:fc:32:91:1e:08:14:5c:
c0:5d:37:dc:aa:e0:7e:58:54:35:0a:c5:50:ae:4a:bb:fd:4c:
72:24:37:2e:0e:40:ac:d3:b3:eb:3c:ff:f1:7c:64:5f:05:e0:
9d:5c:e2:74:a4:7f:68:8d:7e:e2:ae:bd:ab:90:9e:6f:5f:1c:
a1:00:1b:c5:fd:f0:92:01:a2:0b:d6:bf:79:00:94:bc:38:d3:
08:fb:69:58:9d:a8:e9:70:08:6d:32:bf:0c:05:51:fa:8a:b3:
85:e4:9b:6e:20:a3:4e:3e:2b:61:99:3b:f5:06:bc:9d:69:84:
cd:4d:f0:8d:8f:97:d8:9f:8c:71:31:13:ca:da:0d:de:c6:80:
5a:d5:05:3a:88:ae:8d:b9:f2:ed:c4:7c:7c:a6:36:0b:32:c2:
da:ba:95:4f:59:2e:3b:e0:39:26:4c:76:a4:d3:cb:12:4e:20:
65:eb:9e:2e:98:28:82:4a:2a:15:cb:d8:43:7c:bd:e1:b3:68:
1d:a6:13:e7:1a:02:61:6e:eb:b1:f3:af:aa:39:b9:c8:3d:47:
d6:6f:90:da:88:51:23:15:d1:71:73:c6:c1:2a:b9:eb:46:fe:
e8:25:6f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:40 2025 by rpki-client