Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/_WVlT7-1Imoz4g0EF5uWl2lTEc8.roa
File: _WVlT7-1Imoz4g0EF5uWl2lTEc8.roa (raw, json)
Hash identifier: H0e3KWlG+8qMZBi2VuBc5UjjGP9iBvHcYYdjqTrJwco=
Subject key identifier: FD:65:65:4F:BF:B5:22:6A:33:E2:0D:04:17:9B:96:97:69:53:11:CF
Certificate issuer: /CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
Certificate serial: 0194B790197B0C0D48485617A63BD9D89355
Authority key identifier: F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/_WVlT7-1Imoz4g0EF5uWl2lTEc8.roa
Signing time: Thu 30 Jan 2025 14:14:21 +0000
ROA not before: Thu 30 Jan 2025 14:14:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34519
IP address blocks: 193.58.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:90:19:7b:0c:0d:48:48:56:17:a6:3b:d9:d8:93:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
Validity
Not Before: Jan 30 14:14:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd65654fbfb5226a33e20d04179b9697695311cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:ea:23:f3:28:be:f1:07:a4:1a:2c:5d:47:
f3:12:af:5f:a7:a4:15:ca:c8:30:3a:1c:b0:c2:11:
97:f9:70:b0:55:68:b9:c5:b1:a2:45:cc:27:50:3e:
b6:5e:99:8e:2b:bc:87:2d:f1:d9:54:0d:06:2d:ec:
4d:56:9a:91:0a:55:26:59:f7:20:44:0e:0a:55:24:
67:ee:c6:65:74:e3:c4:17:d1:3e:b2:dc:d8:60:b1:
a5:0b:78:8c:0e:63:27:c1:92:5f:7e:8f:fa:85:19:
5f:d9:fb:83:dd:c5:3e:ce:aa:f7:20:8a:19:a3:c6:
34:be:dd:a5:1b:3b:09:2b:bd:20:cd:80:6a:6a:23:
e7:8b:bb:77:42:f4:70:cd:a7:43:81:8b:0f:21:98:
d9:66:54:ff:ff:fa:bb:3b:7b:5e:47:e3:ab:fb:98:
10:b9:e2:40:b1:8a:b1:5b:f1:68:b0:63:83:8a:38:
1e:73:30:cd:ee:d0:13:d1:85:71:02:17:83:4a:79:
28:84:50:57:94:bb:0f:17:26:26:78:56:d2:78:6b:
e4:9d:4b:f5:0b:5e:44:06:13:08:ca:96:68:38:6a:
5a:58:24:3b:4f:16:10:99:60:6f:86:05:b3:5c:d4:
c3:14:91:d9:12:14:1c:ff:b0:63:ac:fc:d8:6f:4f:
f5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:65:65:4F:BF:B5:22:6A:33:E2:0D:04:17:9B:96:97:69:53:11:CF
X509v3 Authority Key Identifier:
keyid:F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/_WVlT7-1Imoz4g0EF5uWl2lTEc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.252.0/24
Signature Algorithm: sha256WithRSAEncryption
46:32:c7:f5:7b:f8:4a:d2:f3:8d:1c:49:5c:5f:24:34:3b:14:
73:f2:a4:67:0e:5e:24:b7:0f:b1:2b:24:89:aa:73:db:48:54:
3a:42:2a:42:83:76:05:81:b3:a3:24:30:94:6b:6b:55:47:d8:
a3:a2:f7:e9:37:9c:8b:bc:4e:d6:fb:be:f8:ea:16:31:2c:b9:
c9:47:58:72:ca:1f:55:89:bb:0c:f7:d6:a4:14:f1:b4:1d:9d:
34:48:09:3a:6f:5d:b9:01:81:e3:e6:0d:25:00:85:49:76:50:
33:df:f2:5a:7a:da:4c:f4:46:25:10:0f:00:9a:7c:01:57:8b:
20:e2:93:3b:29:fa:04:ab:de:4f:da:92:19:16:6f:13:32:30:
47:89:81:7b:f5:66:ed:ff:70:9f:ec:2e:4e:c5:58:2b:4c:21:
53:bb:9c:ff:7a:8f:fd:f0:0e:db:59:7d:8a:d3:62:dc:4e:19:
42:b4:63:a4:60:55:04:e7:7c:ab:26:fd:e9:12:85:b2:61:cc:
69:7a:90:de:27:a9:0a:5c:27:8c:29:52:bd:2f:9f:e1:1e:d1:
a1:6e:7a:ee:fe:70:b4:7a:9b:92:48:ed:8f:9b:57:d1:c7:93:
53:75:2c:a4:0e:7f:d6:37:61:0a:e1:72:24:8a:77:f6:39:00:
c4:97:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:44:42 2025 by rpki-client