Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/n1PdHVenW5fayjdB9KftVERroVM.roa
File: n1PdHVenW5fayjdB9KftVERroVM.roa (raw, json)
Hash identifier: vk271JDoo1aPMh1SkN6xn//CcT9hk4SqnKTKa0JtzvQ=
Subject key identifier: 9F:53:DD:1D:57:A7:5B:97:DA:CA:37:41:F4:A7:ED:54:44:6B:A1:53
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 019422FB059216B2891CCA5C9B2250F8E330
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/n1PdHVenW5fayjdB9KftVERroVM.roa
Signing time: Wed 01 Jan 2025 17:47:43 +0000
ROA not before: Wed 01 Jan 2025 17:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215061
IP address blocks: 193.28.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:05:92:16:b2:89:1c:ca:5c:9b:22:50:f8:e3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Jan 1 17:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f53dd1d57a75b97daca3741f4a7ed54446ba153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:d3:82:e5:54:d0:85:09:76:84:08:69:ce:
4a:88:22:c8:ce:12:9d:4f:92:3f:71:18:b1:91:7a:
9e:4d:6f:86:df:85:37:cd:8d:18:fc:8e:a1:00:e6:
6c:59:66:bd:1c:2c:22:b1:4a:8e:f6:62:5a:04:fe:
84:28:bc:b7:ad:7d:ed:98:fe:f9:50:bf:43:b2:2d:
5c:36:52:7c:5e:22:63:40:30:6d:28:9b:e4:50:81:
5d:89:ad:c8:d5:e4:a6:41:0d:52:1f:ba:3e:d9:e1:
98:db:2f:70:54:2a:34:18:d7:b4:d5:30:c3:bd:43:
b6:be:ca:ee:26:d7:cb:ab:fd:ba:6f:42:a3:d4:f2:
d2:aa:39:60:51:df:1e:f7:5e:79:f2:d7:90:7c:bb:
fa:a3:b1:49:33:13:05:b5:4f:fa:4a:c4:cd:00:58:
2b:f9:2c:06:98:bb:25:88:0a:9e:64:8d:78:57:93:
3a:b4:e8:87:67:e4:0e:d6:3b:3b:7b:75:e7:44:0f:
e1:b7:f6:b8:a0:05:b1:21:bd:bb:ee:26:b5:86:4e:
b3:af:8d:9d:88:61:08:05:20:b1:48:3d:3a:cd:16:
c7:94:80:3a:1a:ec:41:dc:b4:b8:01:52:71:32:41:
d3:3e:62:89:99:d1:cd:7c:af:d0:d9:d4:98:2f:cf:
d9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:53:DD:1D:57:A7:5B:97:DA:CA:37:41:F4:A7:ED:54:44:6B:A1:53
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/n1PdHVenW5fayjdB9KftVERroVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.71.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a0:16:9e:b8:6a:35:8c:ac:b3:e5:79:bd:c4:f5:13:0f:a4:
0a:15:88:f2:14:de:27:1a:3c:d4:3f:28:97:59:d3:b7:54:67:
f3:c4:0c:14:bf:0a:f2:77:e8:21:4b:a7:31:c3:a8:ae:00:d1:
a3:69:6f:9d:99:8d:d3:e4:26:fe:47:5e:48:2d:01:71:d5:ae:
2c:4f:42:b3:e6:eb:bf:ed:94:72:7e:8d:7c:31:2b:2a:10:b1:
32:fc:1c:83:0c:59:c4:2c:59:f9:7f:e7:1c:fd:a5:4d:8e:85:
2c:bf:69:fc:52:5f:70:0f:5b:b6:17:6d:35:19:f1:76:33:ac:
9a:bd:8a:bd:46:dc:b2:e3:66:c9:15:29:f4:00:f3:c7:4b:d6:
2a:d3:54:f5:bb:49:7a:dc:f1:4b:75:c8:79:b5:04:69:9c:0e:
c8:5c:a0:9b:dd:43:51:bc:9a:20:00:b8:bf:0b:84:5a:28:b4:
ce:b9:4b:d2:7e:d2:7e:4e:b2:d1:f6:7c:16:21:76:b0:62:14:
bd:75:62:3e:0c:8e:f5:de:30:cb:69:3b:5b:ce:39:48:70:4f:
fa:dd:4d:64:95:8f:f7:64:fe:36:43:4e:30:38:21:85:0f:32:
a9:aa:92:85:08:aa:13:f5:c7:6c:e0:d7:43:67:fa:30:16:af:
64:e3:b3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:45:29 2025 by rpki-client