Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/w63CtVkaTB-I3bLthiRIKcHJ1z0.roa
File: w63CtVkaTB-I3bLthiRIKcHJ1z0.roa (raw, json)
Hash identifier: PphDOFm6VhjC/oLMpXqjasemzNyOPtAOJruxm2WGQGk=
Subject key identifier: C3:AD:C2:B5:59:1A:4C:1F:88:DD:B2:ED:86:24:48:29:C1:C9:D7:3D
Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial: 01942521EFEC706D541004E11F9595336EC9
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/w63CtVkaTB-I3bLthiRIKcHJ1z0.roa
Signing time: Thu 02 Jan 2025 03:49:28 +0000
ROA not before: Thu 02 Jan 2025 03:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35450
IP address blocks: 193.192.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ef:ec:70:6d:54:10:04:e1:1f:95:95:33:6e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Validity
Not Before: Jan 2 03:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3adc2b5591a4c1f88ddb2ed86244829c1c9d73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:3c:0b:62:c3:f5:7f:ad:df:2e:b1:fe:96:
e2:fd:40:1d:6f:3f:fa:e4:df:dd:81:e0:a5:f6:c5:
24:71:1b:1d:c3:53:a5:d8:34:bc:44:6a:e9:b0:fe:
01:7f:55:92:58:92:e1:53:da:18:6a:21:04:40:b7:
15:8d:ef:1b:78:3b:3f:0c:42:10:1b:c9:5e:09:15:
b6:f9:10:2d:7c:ea:cb:dd:07:c5:24:f2:90:cf:0d:
32:37:f2:ab:1f:0e:21:be:53:7a:9f:81:51:fa:bc:
07:13:23:ad:ed:15:65:b0:ec:72:68:d1:0a:50:1a:
8f:6a:c2:7f:ee:7c:18:10:42:d1:35:4c:3d:85:ec:
4c:66:cb:f5:e7:ff:a1:1f:53:d1:3c:cc:e1:22:2b:
8a:f9:3c:6e:09:d8:64:26:97:c6:a8:45:bd:11:e4:
af:5d:dd:a2:e8:4c:c9:2a:58:81:6e:f4:d6:c1:2b:
d3:de:ba:e5:5f:63:bd:5f:39:63:95:00:79:36:6f:
aa:01:73:11:25:d0:08:2b:76:25:a3:f6:9b:9f:27:
36:bd:62:20:58:09:c2:eb:c4:a0:00:f7:09:ff:1c:
84:07:bd:48:23:53:31:b6:0a:88:ce:dc:24:3a:74:
cd:62:19:3b:74:21:ea:75:e8:18:87:e1:53:83:1e:
b4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AD:C2:B5:59:1A:4C:1F:88:DD:B2:ED:86:24:48:29:C1:C9:D7:3D
X509v3 Authority Key Identifier:
keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/w63CtVkaTB-I3bLthiRIKcHJ1z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.42.0/23
Signature Algorithm: sha256WithRSAEncryption
60:1c:42:ce:89:d8:c1:a1:a3:6f:f4:08:08:a7:91:0a:db:67:
49:2c:d4:9c:3a:c0:2d:af:6a:e6:9c:42:2d:d3:c6:97:1f:f8:
52:26:04:c8:85:21:3a:40:be:44:a7:89:78:66:33:3c:df:28:
9a:7e:f7:1e:28:54:02:68:43:a7:ff:5e:c2:a9:14:ee:b6:c9:
e8:1d:28:e7:88:6b:39:37:79:f0:17:70:eb:4d:8c:3d:c4:ed:
55:3c:55:95:f0:f9:17:31:b2:be:11:76:b7:c6:f2:6d:90:db:
83:e2:3a:ba:5e:8f:66:44:f5:71:8b:ee:9b:f9:3e:ea:23:b3:
a4:11:ab:84:f2:b0:45:b7:ba:e4:35:47:26:24:57:06:82:ca:
ca:c5:14:c7:bb:88:87:a2:f6:dd:57:aa:a4:e0:34:e9:e4:38:
4c:39:b8:29:85:14:02:26:8c:e8:52:cc:53:54:26:ce:b0:1c:
d3:a7:ca:ba:f1:5e:8c:f2:52:cd:7f:78:1f:93:40:75:67:b2:
e7:64:2c:b7:3e:b9:8f:b2:e4:18:17:5f:2c:b1:2d:11:85:e2:
f9:ba:bc:61:0a:3a:ec:a2:fe:b0:5d:28:d7:52:7e:41:24:de:
c5:0c:8f:10:c6:b7:6b:b7:78:f5:f3:54:51:38:95:19:00:9a:
b2:59:53:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:52:29 2025 by rpki-client