Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/rg97vUvro1QUCZLNC-zT_PYGVh8.roa
File: rg97vUvro1QUCZLNC-zT_PYGVh8.roa (raw, json)
Hash identifier: iZBiJSmpj/Q8UocwtFDbOX3xmzAVEyiNjKTvOdI8ZqE=
Subject key identifier: AE:0F:7B:BD:4B:EB:A3:54:14:09:92:CD:0B:EC:D3:FC:F6:06:56:1F
Certificate issuer: /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial: 019426D974FC5AC6770C1C08AD75143CEB81
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/rg97vUvro1QUCZLNC-zT_PYGVh8.roa
Signing time: Thu 02 Jan 2025 11:49:33 +0000
ROA not before: Thu 02 Jan 2025 11:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41872
IP address blocks: 193.247.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:74:fc:5a:c6:77:0c:1c:08:ad:75:14:3c:eb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Validity
Not Before: Jan 2 11:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae0f7bbd4beba354140992cd0becd3fcf606561f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:1b:21:fd:ac:44:0d:bf:4b:22:5a:cf:6f:
96:27:86:55:8f:35:ed:2e:02:bd:2c:98:b7:2d:cd:
b8:8a:80:4a:8f:eb:b3:ae:1b:d4:0d:a4:2f:a6:2f:
15:6d:08:16:64:f5:8c:02:71:80:8a:fb:90:63:ae:
a8:cb:7f:ef:f8:09:44:11:87:95:8e:13:a8:d3:ee:
45:5c:fd:ca:28:8e:8d:b3:fa:ba:47:0f:44:ac:ff:
1a:9d:f9:11:63:e9:b2:fe:14:b0:d8:3b:63:2b:34:
a2:cd:0f:c0:1d:d9:ae:e1:d7:e6:83:3c:9b:88:13:
16:82:52:0b:a3:3f:eb:ad:d9:63:2b:93:78:71:a2:
1c:2e:43:9f:ba:35:45:e2:63:1f:a3:c1:f3:af:84:
ae:ff:84:64:54:1b:1f:f2:90:11:81:7d:ed:d1:01:
3a:f4:25:b7:38:53:36:6d:27:79:0f:ad:76:4e:74:
59:f8:c2:ce:37:bd:ad:ba:74:94:24:e5:44:e9:b5:
93:79:2a:9c:fd:39:89:79:b5:24:e1:fb:c3:5f:67:
0d:1a:1b:dd:ca:1e:5a:3e:4b:51:18:65:61:ef:be:
43:3b:c5:e7:25:58:7e:c8:4a:b4:f5:66:54:bd:26:
21:bc:12:13:9e:6e:11:8c:63:bd:e5:cd:35:11:97:
56:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0F:7B:BD:4B:EB:A3:54:14:09:92:CD:0B:EC:D3:FC:F6:06:56:1F
X509v3 Authority Key Identifier:
keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/rg97vUvro1QUCZLNC-zT_PYGVh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.109.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:02:27:66:9e:11:6d:17:0a:29:7d:06:0f:7b:bf:51:ab:bf:
c3:10:83:8a:f1:06:5f:2e:36:a5:33:d7:26:06:3a:c7:e7:ec:
8a:68:5f:82:7f:2f:dd:80:4d:32:72:77:ab:72:3d:ba:23:78:
10:b9:af:67:f8:33:2b:f7:4e:fa:37:b9:4b:fd:4b:b9:cb:f8:
d9:8c:d2:d9:c0:f3:78:62:84:1b:88:89:b2:48:f6:33:c3:7c:
d5:b3:6b:3b:2d:84:cb:5f:ca:cb:e2:aa:21:20:24:66:f4:65:
51:b4:dd:a5:54:35:3d:c2:82:70:f2:c5:29:1c:6f:0f:1d:2a:
a9:85:f9:d1:6e:66:63:f9:c7:9e:1c:dc:ee:c1:a7:cd:80:f0:
91:46:1a:9d:40:03:11:31:fe:32:30:68:7f:24:ce:f9:fb:1e:
50:b7:69:97:a3:04:62:ec:44:2c:d6:74:dd:9d:8e:5a:eb:61:
ef:93:eb:64:33:7a:e7:8a:0c:2b:50:aa:5b:ef:9d:3d:38:df:
36:08:df:82:6a:42:15:be:9e:34:5e:09:ee:21:c4:e1:07:ab:
31:66:38:b9:86:4f:b3:30:75:b3:3a:e3:4c:d3:97:ac:48:b7:
b8:d2:6c:16:e5:0e:c8:2e:de:08:f1:61:44:94:ea:a8:58:b3:
92:55:2a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:11 2025 by rpki-client