Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/aIJd5q5n1BMhAvDcaHy6hyORixY.roa
File: aIJd5q5n1BMhAvDcaHy6hyORixY.roa (raw, json)
Hash identifier: g4oLD9R9gouTz6cg2k+J0gSsSi5IKrB+jtKfUgG2zS8=
Subject key identifier: 68:82:5D:E6:AE:67:D4:13:21:02:F0:DC:68:7C:BA:87:23:91:8B:16
Certificate issuer: /CN=43e65136838668e35dd552ef0c21fbe9abed139b
Certificate serial: 0194B790193C05669C25FFBBAA89241E5E5E
Authority key identifier: 43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/aIJd5q5n1BMhAvDcaHy6hyORixY.roa
Signing time: Thu 30 Jan 2025 14:14:21 +0000
ROA not before: Thu 30 Jan 2025 14:14:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30841
IP address blocks: 193.22.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:90:19:3c:05:66:9c:25:ff:bb:aa:89:24:1e:5e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e65136838668e35dd552ef0c21fbe9abed139b
Validity
Not Before: Jan 30 14:14:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68825de6ae67d4132102f0dc687cba8723918b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:22:16:bf:82:e1:5c:5f:ef:7c:6d:e0:e1:60:
7d:38:b2:c4:6c:d6:e6:3f:60:15:3f:ac:1d:9a:b0:
2d:f1:76:d4:29:54:96:ef:80:f4:93:5f:89:3d:db:
e8:8f:42:26:d5:69:52:ae:26:91:dc:47:1e:34:ec:
98:b8:d4:15:be:8e:27:96:22:e0:91:b4:b7:e8:56:
ee:4c:9f:e2:5b:5e:dd:3a:33:2a:56:5b:e6:86:ec:
90:32:01:22:ae:00:02:c9:03:65:65:cb:27:5b:57:
de:8a:be:9a:67:cd:4a:b0:91:e0:f8:84:cb:74:59:
fe:07:62:21:04:73:bc:1f:4e:b7:81:83:fa:19:0d:
24:9d:80:56:ad:bc:49:f5:fc:b3:3c:21:5d:63:0b:
a7:f2:61:be:50:f5:9f:47:e7:09:9c:28:e3:37:89:
3d:29:28:a3:68:03:36:17:9b:51:11:73:01:c5:79:
92:33:5d:77:c6:92:99:9b:0b:5a:39:c7:95:2b:79:
4d:13:0d:47:29:d6:c6:1e:79:88:5c:b8:1e:fe:1e:
12:82:1e:3e:60:2f:25:35:67:b9:e4:40:19:dd:37:
e3:6e:6d:8a:cf:cd:98:d2:56:1b:08:00:64:48:b5:
10:0d:0b:de:a5:f6:de:38:64:0f:b7:ae:42:9b:4f:
03:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:82:5D:E6:AE:67:D4:13:21:02:F0:DC:68:7C:BA:87:23:91:8B:16
X509v3 Authority Key Identifier:
keyid:43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/aIJd5q5n1BMhAvDcaHy6hyORixY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.31.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:cb:09:cb:0e:31:3d:0f:01:88:bf:4f:69:39:c8:ef:3f:d7:
de:41:c7:a9:82:71:0d:57:bc:58:47:d4:9c:d4:37:22:a4:6e:
0a:d2:5f:68:35:4c:dd:de:19:07:cc:f6:56:d4:c1:69:68:8c:
09:a9:f4:7b:95:6e:b9:81:59:70:78:1e:ee:f5:13:c8:e3:8d:
69:30:f6:61:9c:bf:fa:a4:e2:a4:c8:69:5d:84:07:c0:71:33:
a6:91:9f:c8:04:ae:a4:cd:99:10:8a:63:26:55:b0:ff:06:45:
d7:9c:90:ec:b9:d9:f5:c2:78:4b:8c:17:0b:2a:42:59:30:ab:
b6:7b:6d:b9:2b:02:1c:24:5e:1f:0e:56:7e:a8:2f:0a:07:c7:
66:8c:4f:9d:17:1f:f0:5e:4d:2c:c7:d2:ac:92:52:01:74:1c:
05:19:f4:78:a6:2f:eb:47:ff:5f:ec:26:90:cd:62:a2:89:b3:
ef:57:2f:6b:00:8d:37:14:6c:48:f3:91:61:fe:53:09:4a:7d:
b4:84:66:18:aa:83:62:ec:08:0c:7f:0b:0e:f6:67:86:1b:4a:
60:80:df:5a:09:60:7d:00:74:8c:13:15:84:8a:0c:09:31:ef:
27:7c:b6:cd:0b:7b:e4:cc:d9:e6:c9:91:0e:96:3c:7a:88:97:
24:67:11:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:54:46 2025 by rpki-client