Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/tesrxSIX8wDOD0usavdzlelTyC8.roa
File: tesrxSIX8wDOD0usavdzlelTyC8.roa (raw, json)
Hash identifier: 2mw6qDJEVPvk2SB5Frfa2IZ+DHf6Rgtla+C91qwtmwA=
Subject key identifier: B5:EB:2B:C5:22:17:F3:00:CE:0F:4B:AC:6A:F7:73:95:E9:53:C8:2F
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019428260DB3996FB50ABE6E38F93DD76FA4
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/tesrxSIX8wDOD0usavdzlelTyC8.roa
Signing time: Thu 02 Jan 2025 17:52:50 +0000
ROA not before: Thu 02 Jan 2025 17:52:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200017
IP address blocks: 188.191.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:0d:b3:99:6f:b5:0a:be:6e:38:f9:3d:d7:6f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 2 17:52:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5eb2bc52217f300ce0f4bac6af77395e953c82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:dd:12:be:ea:b1:52:42:8b:e5:c2:18:4b:
d8:a0:5f:1d:1b:29:f2:17:e7:b2:64:b9:30:9a:2b:
18:97:59:bc:46:18:98:24:32:2f:c8:37:41:7f:46:
26:63:29:bf:fc:c7:a4:ba:90:e8:7e:a6:5b:80:2b:
f7:52:55:8e:d6:1b:0a:8e:91:c2:23:ed:d3:b4:5e:
f3:de:eb:51:d5:e7:d4:44:a8:35:40:85:20:1a:68:
8a:14:af:d1:a0:2c:f6:45:64:75:c9:07:67:73:ed:
ee:81:ba:96:e5:2f:f1:2b:7d:67:7b:26:03:4e:e6:
6c:4c:56:09:26:97:c6:09:dd:3b:7e:a1:1b:e5:b4:
28:4a:99:44:1f:d4:70:03:4a:ab:1c:ec:29:a0:9a:
ab:4b:81:c6:77:d0:c5:42:64:9f:ad:8d:89:44:32:
cd:80:0e:45:65:52:a7:c6:0e:95:53:46:28:f6:7d:
92:ef:18:d8:8c:24:e4:ae:ad:d2:fb:c2:b1:20:aa:
7d:7c:34:08:5f:b6:43:83:dc:8c:17:b1:1e:b5:2a:
3c:cc:a2:f0:d4:57:a7:83:7a:8e:92:0b:dc:87:fc:
b1:00:76:d4:34:b5:24:73:3d:84:16:f2:56:27:ba:
17:85:1f:ce:09:0d:23:c1:6e:3d:46:af:57:2e:cc:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EB:2B:C5:22:17:F3:00:CE:0F:4B:AC:6A:F7:73:95:E9:53:C8:2F
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/tesrxSIX8wDOD0usavdzlelTyC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.105.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:cb:05:ba:74:36:08:53:f1:ae:cb:08:22:12:ad:bd:6a:e6:
c5:e8:f3:41:f8:34:97:0a:02:36:e1:f1:f8:88:85:68:3a:e0:
7b:23:f1:f7:3a:55:cd:97:9d:8f:ba:df:12:00:05:65:76:cb:
f6:e3:7c:76:7c:3e:b4:d0:20:83:a4:e9:f1:72:78:cf:86:3c:
98:0a:68:a5:ff:c5:c1:fc:26:ad:6c:0e:1b:ec:47:55:bd:5a:
9b:2c:e9:dd:94:ba:bd:fb:12:d6:a4:ad:2c:b4:ae:45:36:b9:
22:4d:36:ba:85:cb:bf:1f:68:e1:44:f3:9c:e3:70:49:a2:cc:
ac:87:c1:cf:58:49:27:4c:21:4b:c5:9e:78:cd:9b:85:cf:fd:
d5:0c:3e:10:c3:9f:a0:9f:40:17:bf:49:dd:6a:ea:a8:25:c5:
b9:ea:4e:6a:47:c3:36:f2:47:dd:9a:52:f2:56:a9:35:32:1a:
e1:18:da:31:3d:46:de:97:f5:df:ea:aa:e8:c3:bd:80:3a:a9:
bc:24:f7:7b:dc:f1:7e:ae:dc:69:2e:43:c5:49:e2:89:bb:cd:
84:3e:ab:c1:1a:57:09:7f:49:58:5a:ad:fd:06:a9:52:a2:5d:
8f:c3:10:af:f1:21:3a:25:9e:3d:d6:ca:57:d8:b6:fb:cc:2d:
76:4f:02:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:47 2025 by rpki-client