Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/fuNTm9OkKgw1mC4KKOVTy1qgwlI.roa
File: fuNTm9OkKgw1mC4KKOVTy1qgwlI.roa (raw, json)
Hash identifier: U1l6Z979R3w3BYeOJyPvuo9cktUgt6LoAxySgYlXj8c=
Subject key identifier: 7E:E3:53:9B:D3:A4:2A:0C:35:98:2E:0A:28:E5:53:CB:5A:A0:C2:52
Certificate issuer: /CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Certificate serial: 019426D8D827ADA4FBF79C9E998BEA673890
Authority key identifier: EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/fuNTm9OkKgw1mC4KKOVTy1qgwlI.roa
Signing time: Thu 02 Jan 2025 11:48:52 +0000
ROA not before: Thu 02 Jan 2025 11:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147185
IP address blocks: 193.32.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:d8:27:ad:a4:fb:f7:9c:9e:99:8b:ea:67:38:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Validity
Not Before: Jan 2 11:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ee3539bd3a42a0c35982e0a28e553cb5aa0c252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:83:cf:e2:3a:49:e9:28:59:c8:82:9c:32:95:
57:5c:3f:2f:7f:a1:33:8b:0f:52:e6:eb:c3:c7:e4:
d1:8e:09:c1:d0:80:5b:c3:fa:4e:ab:5f:ef:51:27:
23:e9:fd:c5:00:57:fb:ad:5b:30:20:70:fd:1a:e6:
b7:5b:93:0d:69:ee:3f:f1:a1:6d:a7:d7:bc:05:6e:
93:53:ed:e9:7d:aa:81:a2:3c:22:6e:6e:81:03:85:
d0:a8:0e:33:8b:95:f0:e3:0f:45:94:17:7f:18:7a:
e3:02:c6:36:1f:52:ee:a8:cc:c0:db:28:81:e5:a2:
1e:50:cc:e3:81:76:f6:26:91:7d:30:95:af:0d:d4:
e3:7a:66:3f:52:ed:37:c5:8b:ad:7a:2b:aa:92:5d:
48:ea:f4:73:15:a0:e1:60:54:61:74:b0:7f:93:f1:
77:93:32:33:ea:e1:8c:1c:87:06:79:2f:91:01:a5:
89:1b:6e:46:d5:92:23:b0:98:b0:9f:2a:5f:c9:66:
b0:41:4e:76:93:2b:ea:b7:98:db:83:52:69:16:e7:
e6:06:8f:5a:f3:cd:9e:20:b6:65:d3:a5:78:60:4b:
59:27:b0:54:29:d1:a7:55:01:e5:55:e5:77:3d:91:
4c:e8:dc:dd:61:8a:6f:4e:90:f3:51:67:af:b8:59:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E3:53:9B:D3:A4:2A:0C:35:98:2E:0A:28:E5:53:CB:5A:A0:C2:52
X509v3 Authority Key Identifier:
keyid:EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/fuNTm9OkKgw1mC4KKOVTy1qgwlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.246.0/24
Signature Algorithm: sha256WithRSAEncryption
24:cf:47:71:1b:d3:28:5f:14:dd:38:25:d7:ab:f6:90:76:3d:
01:7c:9f:1b:4b:d1:48:47:f3:02:5b:b3:eb:fa:26:e9:bc:83:
08:1c:bd:67:cd:bb:d5:e5:4f:3f:d6:97:87:da:b8:e3:7c:26:
b4:10:9e:0d:e1:35:8e:99:13:20:ef:30:f0:ce:8e:48:0d:55:
c4:6d:1a:96:b1:3a:2d:f1:85:23:3b:bb:b0:87:7f:d6:43:e6:
29:87:c7:2d:77:6f:61:a7:56:a5:da:70:7d:14:a5:26:fc:2e:
ec:02:03:26:60:c4:f0:0e:34:d3:4a:57:9d:67:b4:d8:a2:69:
0e:97:d1:23:8b:a8:3b:94:6f:36:62:bd:bd:4e:90:2d:79:e5:
86:52:fe:84:c2:f9:9f:fe:c1:24:3b:81:83:bd:84:7e:36:e2:
2e:fd:de:15:a4:06:01:2a:40:4f:44:7b:35:cd:43:10:14:6c:
ad:1b:6c:27:7c:87:f5:62:bc:3e:6c:cc:10:f2:8c:f2:a1:b3:
8f:c7:88:59:72:c3:02:d0:69:1e:26:25:c9:21:8d:c0:2d:30:
51:4f:15:23:ec:6b:b2:c1:34:1f:fb:dd:aa:3b:07:84:5e:05:
ef:d6:1b:c5:20:3a:05:0f:87:62:6f:a5:17:33:65:ef:5b:ba:
55:3d:03:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:42:14 2025 by rpki-client