Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/SIEblnDTmxDkNQuR8GrQyNScjq8.roa
File: SIEblnDTmxDkNQuR8GrQyNScjq8.roa (raw, json)
Hash identifier: 994/huZNdlRSyw8MDRW+EKE0ylyI66j7DW5sNtIspOA=
Subject key identifier: 48:81:1B:96:70:D3:9B:10:E4:35:0B:91:F0:6A:D0:C8:D4:9C:8E:AF
Certificate issuer: /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Certificate serial: 0194DA67D97CEF1560A4F04F889F08309BB4
Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/SIEblnDTmxDkNQuR8GrQyNScjq8.roa
Signing time: Thu 06 Feb 2025 08:37:06 +0000
ROA not before: Thu 06 Feb 2025 08:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200924
IP address blocks: 194.30.186.0/24 maxlen: 24
2a10:3d80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:67:d9:7c:ef:15:60:a4:f0:4f:88:9f:08:30:9b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Validity
Not Before: Feb 6 08:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48811b9670d39b10e4350b91f06ad0c8d49c8eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:0d:4e:7d:b6:e3:18:ea:95:06:8f:a3:c4:
12:fd:33:90:2c:e9:ab:7b:83:b2:fc:23:f1:82:c6:
b9:61:1b:c2:6f:7f:bc:a6:b3:93:ec:07:47:31:0a:
e8:ae:78:c4:98:1b:55:81:6c:0d:16:e4:17:6e:1d:
87:ee:27:64:bb:da:62:89:d0:89:77:bd:6e:b9:28:
17:12:98:0b:97:67:65:35:90:3e:d8:ac:9d:71:32:
3d:b6:cc:45:be:3a:1f:c4:35:5f:8c:ff:7d:d6:cd:
26:3f:4b:24:91:16:0a:d0:bb:32:a4:97:e9:ba:de:
18:f4:5d:0e:e7:d7:49:b0:40:74:f9:a1:50:ff:c0:
10:01:58:a4:f1:fd:84:93:80:96:13:b5:89:b8:45:
25:d5:2b:53:0c:68:21:a7:c3:71:1e:08:1f:e5:a8:
e0:0e:1d:1f:52:a0:8a:72:aa:5a:ea:9e:e1:8d:4e:
3e:aa:44:b9:e2:d2:4f:ee:32:74:25:ba:21:4b:f2:
21:c0:73:7f:60:8c:2e:d2:e8:ee:09:50:36:6e:e2:
de:fc:9b:68:e5:ea:cd:41:c5:08:a0:ea:bc:8e:52:
b2:55:82:60:de:87:72:9a:c9:25:48:3f:11:9f:73:
89:57:b3:89:ad:9d:36:e1:96:52:b8:ee:21:a1:73:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:81:1B:96:70:D3:9B:10:E4:35:0B:91:F0:6A:D0:C8:D4:9C:8E:AF
X509v3 Authority Key Identifier:
keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/SIEblnDTmxDkNQuR8GrQyNScjq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.186.0/24
IPv6:
2a10:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
b9:04:61:c5:f8:80:09:18:b9:2c:98:db:bc:00:90:51:f1:d7:
60:0f:00:49:b1:b2:87:3b:5b:fe:9b:d2:cf:27:c4:df:dd:bc:
3d:c1:92:54:15:22:5e:fd:b8:58:bb:ce:8b:d0:6e:45:b8:b0:
fe:04:67:a7:37:f9:50:60:17:7e:3b:21:f1:9f:91:79:eb:1c:
25:38:f0:b3:8d:37:07:7e:51:fb:98:7a:aa:d7:1d:da:54:2f:
d9:b1:17:25:a2:b8:47:99:d7:aa:50:04:ad:a4:f7:6d:47:58:
85:56:2d:57:ae:b4:bb:bb:a3:52:d0:1e:8b:bc:9a:68:e3:79:
4f:9a:c2:5e:77:18:4d:17:39:ba:4b:55:a6:5e:a5:a4:eb:f7:
7e:d3:d3:64:53:13:5c:90:50:c2:d5:9c:23:39:35:ab:fe:f3:
ef:d3:79:a1:ea:15:8f:a6:e7:4b:39:82:e2:d2:5b:65:4a:bd:
77:6c:08:80:fe:e4:1d:7b:c8:78:6d:6b:dc:7d:61:d3:c1:59:
c7:79:a7:5a:cf:f6:b9:73:23:28:a4:b6:4a:7c:19:98:2c:50:
05:8a:79:14:5e:f2:f6:c8:87:f5:b4:23:5b:5f:17:4f:0f:0a:
9a:6d:69:1c:19:61:ae:d9:d0:51:2f:0d:a8:21:67:8b:80:13:
30:b0:9a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:44:25 2025 by rpki-client