Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/qLO5cj38BRyYdeH-rfctS6n9M7U.roa
File: qLO5cj38BRyYdeH-rfctS6n9M7U.roa (raw, json)
Hash identifier: aMShn4FXdnTufUpyHOP7ThkTMbndZL+QIAZz0lq4l0Y=
Subject key identifier: A8:B3:B9:72:3D:FC:05:1C:98:75:E1:FE:AD:F7:2D:4B:A9:FD:33:B5
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 01951F0D5710606E253FE8048A7D75865F7F
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/qLO5cj38BRyYdeH-rfctS6n9M7U.roa
Signing time: Wed 19 Feb 2025 16:32:02 +0000
ROA not before: Wed 19 Feb 2025 16:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213194
IP address blocks: 193.37.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1f:0d:57:10:60:6e:25:3f:e8:04:8a:7d:75:86:5f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Feb 19 16:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8b3b9723dfc051c9875e1feadf72d4ba9fd33b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:1a:63:f4:e4:35:f0:f0:32:88:e0:bb:b0:
c1:c7:6f:cd:7e:64:3e:a3:63:c5:b5:22:93:0c:49:
bc:27:93:df:01:01:c5:bd:cf:40:d9:c7:ff:68:01:
ab:98:03:75:4a:0e:1e:65:c7:18:7a:6b:5f:7e:1e:
11:23:8c:27:e0:bd:90:82:4e:8d:c3:e0:75:b0:6a:
7d:4f:c7:25:de:11:6e:13:f9:ce:28:34:4d:09:fb:
64:73:30:63:51:21:f1:80:b2:fe:b7:72:34:44:82:
7f:fb:ee:f5:59:a7:4d:ef:83:2e:90:9d:32:a8:bf:
89:8f:00:40:a0:85:ce:b0:77:0e:b6:1c:9d:6f:6a:
f2:06:46:65:91:f8:8c:57:42:3e:8d:4e:2e:e5:f6:
0b:e7:b9:05:49:23:38:77:d6:30:a7:8d:6e:82:b7:
4d:a0:94:bf:9f:3a:89:0f:83:7c:9c:e4:aa:d7:ff:
a5:b6:ee:97:7b:ae:c8:61:f3:20:c8:ba:18:24:c5:
89:d2:0f:d5:be:b2:6d:33:5e:73:4a:50:94:dd:0d:
2e:76:cf:1a:18:a6:11:af:87:a8:8a:d7:a2:51:2e:
23:8f:01:7f:b7:84:52:75:0e:ef:88:e9:0c:83:0c:
61:a1:b2:0b:7e:0a:83:7b:a9:f8:35:7f:d9:3b:57:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B3:B9:72:3D:FC:05:1C:98:75:E1:FE:AD:F7:2D:4B:A9:FD:33:B5
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/qLO5cj38BRyYdeH-rfctS6n9M7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.69.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a1:d2:4c:c0:77:34:36:7e:3d:6a:1e:a0:24:53:e5:e6:c4:
cb:d4:e6:9c:4e:8e:84:ee:47:79:68:95:b9:87:55:31:0e:79:
22:f6:61:6e:9e:40:43:b2:29:57:26:f1:89:ab:d7:ab:e1:6d:
81:c2:c6:e5:c5:8a:80:49:b9:93:73:7f:d7:1b:fb:c1:91:01:
97:25:8f:ef:e9:62:c4:1d:25:2c:0d:2a:61:76:cd:d2:e5:a5:
79:1c:a1:5b:e2:03:d0:35:2e:ec:92:38:b5:b8:63:41:71:ae:
d4:bd:fc:22:db:6a:7d:31:fb:f7:ef:0f:04:08:ce:4a:95:03:
e9:2e:cd:ad:0f:17:c1:b4:07:d9:93:d5:b8:71:b3:f7:f4:db:
f2:81:f5:af:32:bf:09:4d:44:26:92:c5:a4:1d:b4:18:c5:ac:
97:bf:62:65:51:43:c8:59:6f:c4:60:f0:d7:54:ea:37:1a:be:
c2:b8:c3:24:06:b4:93:52:db:a9:45:dc:86:33:af:69:08:94:
99:e8:f1:8c:5c:ca:7d:3a:04:51:8b:93:73:38:f3:1f:ed:74:
f3:74:ba:fb:83:c1:e4:e0:ec:63:91:b8:53:62:82:56:d6:ec:
94:0c:e7:b7:da:7c:23:13:e2:40:2e:a9:c1:35:46:f1:e4:c6:
d0:0e:17:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:03:40 2025 by rpki-client