Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/hKsPJ4MnZD2pYCjFxua95M8Pd_I.roa
File: hKsPJ4MnZD2pYCjFxua95M8Pd_I.roa (raw, json)
Hash identifier: doF91Tq6urawTtlcrWXugjS7shhgWKPbbEAfjccw0S8=
Subject key identifier: 84:AB:0F:27:83:27:64:3D:A9:60:28:C5:C6:E6:BD:E4:CF:0F:77:F2
Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial: 019424B3EDE1360039E5FF454AB508536626
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/hKsPJ4MnZD2pYCjFxua95M8Pd_I.roa
Signing time: Thu 02 Jan 2025 01:49:19 +0000
ROA not before: Thu 02 Jan 2025 01:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34259
IP address blocks: 193.0.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ed:e1:36:00:39:e5:ff:45:4a:b5:08:53:66:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Validity
Not Before: Jan 2 01:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84ab0f278327643da96028c5c6e6bde4cf0f77f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b4:73:35:a9:cb:5c:08:5a:f4:ec:7d:02:da:
5a:7f:fd:87:04:f2:2e:63:b0:5c:44:8e:b6:ce:9c:
87:3d:4f:77:cd:b3:f9:ac:95:0e:3c:81:9c:1c:74:
d8:a9:ec:43:c3:fe:11:f0:53:75:50:c9:37:c5:bd:
fd:81:58:32:ec:47:16:23:7d:f4:36:5e:a3:2e:65:
a6:a8:46:6e:77:ac:ea:d8:ff:18:e8:6a:e5:80:5c:
0c:0f:58:10:10:04:38:d9:52:46:7b:b5:05:07:d3:
b6:fd:97:23:39:b9:81:62:e1:c0:e3:ea:d9:c2:92:
5d:5e:52:16:3f:a4:45:58:5a:23:d4:33:28:07:30:
bd:fb:16:dc:c7:f0:fc:93:90:bf:43:40:c9:67:95:
f2:ab:26:23:66:a2:6f:06:56:32:1d:12:e9:73:95:
b2:0b:75:f2:dd:1c:60:e9:3f:2e:12:96:d3:a9:95:
35:7e:96:f0:ce:ac:72:01:30:c9:2f:e4:af:ed:b6:
bf:73:f0:bd:be:bd:81:14:8e:8b:a6:0f:08:6d:73:
b6:97:44:99:b9:65:f6:1b:aa:26:a6:53:8f:d6:03:
e1:cf:2a:ad:7d:65:62:a2:df:db:56:ec:d9:74:a8:
f3:d5:4d:f9:72:7c:28:7b:99:fa:c4:f8:04:a2:f7:
31:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AB:0F:27:83:27:64:3D:A9:60:28:C5:C6:E6:BD:E4:CF:0F:77:F2
X509v3 Authority Key Identifier:
keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/hKsPJ4MnZD2pYCjFxua95M8Pd_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.223.0/24
Signature Algorithm: sha256WithRSAEncryption
61:df:4e:14:2d:bc:8a:4a:f8:40:c4:6b:05:71:54:77:d3:68:
7d:38:b2:f9:c4:9a:31:98:f1:cc:4b:c4:88:17:f0:36:34:d5:
ec:7e:e8:97:a7:2e:33:3d:3a:ff:26:cc:40:93:7e:a3:50:93:
f2:1b:44:76:d1:43:f4:cb:d1:3f:d7:7f:0a:89:80:32:42:4b:
78:a1:1b:78:ac:ce:ab:93:ab:54:db:c0:01:ff:d5:2d:c3:9f:
7c:83:01:fb:1e:f9:df:b6:cd:02:12:63:1c:9f:99:01:22:bf:
2e:c4:25:3d:40:4d:29:0f:35:e2:1b:80:bd:9e:d4:cb:b0:fb:
9f:73:25:82:d3:01:ab:a4:7d:e1:78:f1:9d:da:5a:58:8e:aa:
d4:53:f8:19:c3:97:ed:16:cc:ff:71:a7:55:f3:6c:d3:91:95:
19:e4:9f:19:08:6d:f3:62:e5:fe:fb:ca:e2:21:aa:78:9b:17:
c0:74:d7:1f:07:b2:46:38:eb:09:06:20:f5:61:f3:9b:fa:53:
cc:e4:5b:47:e1:75:e3:03:56:e4:a2:b2:62:2b:85:a4:b5:30:
d9:33:22:5e:6c:e8:09:b8:20:14:0e:46:3a:1b:ba:e1:26:6f:
db:0a:be:5c:a3:df:54:3e:4b:24:f5:a4:42:1c:60:a1:af:ac:
8b:b9:dc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:49:02 2025 by rpki-client