Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/RO9l6hoPRiEk5kvu-1wGIx3JVQs.roa
File: RO9l6hoPRiEk5kvu-1wGIx3JVQs.roa (raw, json)
Hash identifier: z3IHW9wPnoAAyV5Yp5JV/XIyxcaRpjPHnzXPpTc3PGc=
Subject key identifier: 44:EF:65:EA:1A:0F:46:21:24:E6:4B:EE:FB:5C:06:23:1D:C9:55:0B
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 0194236A07BFF4AC94AB978D0EF73797AB5C
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/RO9l6hoPRiEk5kvu-1wGIx3JVQs.roa
Signing time: Wed 01 Jan 2025 19:48:58 +0000
ROA not before: Wed 01 Jan 2025 19:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200638
IP address blocks: 81.163.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:07:bf:f4:ac:94:ab:97:8d:0e:f7:37:97:ab:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Jan 1 19:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44ef65ea1a0f462124e64beefb5c06231dc9550b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:63:e2:c0:3c:6e:78:36:d5:db:10:d4:4b:
d7:e2:12:7e:11:40:50:55:b3:fe:7e:95:93:11:32:
36:39:5e:4f:5c:14:89:4f:76:13:99:74:23:80:6b:
7e:7a:4f:9c:2f:1c:17:81:eb:61:99:c1:09:2f:7f:
e8:0e:da:73:64:91:fa:91:1c:8c:2e:1d:7d:e4:7c:
90:d9:a3:69:78:eb:c9:51:a8:9d:ac:2c:57:ab:45:
dc:a6:de:d3:34:e7:62:4a:b3:78:17:b1:40:66:10:
a4:68:cc:e9:73:a0:27:90:63:1b:59:a6:fa:54:3e:
e5:50:ec:ba:de:c0:55:af:d7:9b:8a:8b:b4:15:3f:
82:71:1d:33:92:c6:2e:86:d2:7e:ab:71:f7:78:27:
4f:5c:b0:2a:4a:3e:b7:d3:d6:47:db:b4:3e:37:32:
fe:eb:02:2e:86:05:2e:73:57:be:d4:02:ab:67:5e:
45:91:b1:d0:25:5b:a4:7d:25:f6:ef:ac:22:08:f3:
32:dd:e8:7f:a6:f4:26:15:4e:3f:34:72:80:cd:72:
9a:09:f3:3b:1c:ea:b7:01:17:56:de:4d:ff:36:6b:
33:e0:ec:e6:e7:de:4e:1c:5f:3e:c6:d0:5d:c5:a2:
51:0f:eb:dc:77:60:52:d8:73:92:b0:0c:b8:df:e6:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EF:65:EA:1A:0F:46:21:24:E6:4B:EE:FB:5C:06:23:1D:C9:55:0B
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/RO9l6hoPRiEk5kvu-1wGIx3JVQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.195.0/24
Signature Algorithm: sha256WithRSAEncryption
43:67:17:8c:a5:5c:a5:0c:df:f8:99:57:c4:c8:c7:71:90:8b:
ed:dc:a9:7a:07:98:90:f7:ba:62:7c:ec:ba:e4:98:86:b8:eb:
e3:06:52:9d:42:63:fe:c5:9a:48:00:f5:82:38:c4:5e:5d:e8:
93:c7:4c:af:8c:54:53:43:f9:54:a1:fc:ea:1f:86:c6:3a:3d:
2a:87:35:4b:8b:93:c5:ef:49:23:c0:1b:77:66:27:10:76:6e:
1f:f7:86:3a:13:4a:4b:0c:e6:3c:f9:e1:d7:b2:58:a3:bb:3c:
36:11:7c:0e:81:bd:64:ec:08:a9:a6:fe:b5:c8:f3:03:c6:06:
15:2a:9b:da:88:bc:b8:7a:c3:30:8c:9e:6e:e6:a6:b0:4d:e9:
34:d4:fa:c2:68:df:df:d6:ba:19:2a:e2:a2:f0:3c:4b:ee:01:
a4:1f:8b:6c:ce:82:24:e6:c9:1e:1f:76:29:bd:20:33:0f:1c:
a2:f6:35:d1:78:03:c3:fd:a1:f2:27:7a:50:9f:9a:ab:29:fe:
78:14:e3:d7:a3:9a:7d:df:82:e8:d1:30:11:8d:89:ec:17:4f:
06:b2:a8:7e:b6:e1:2b:a7:b1:44:b8:f6:c5:a3:cb:41:5b:d0:
cc:92:4b:02:98:fc:8c:2d:76:a9:81:f0:43:6b:71:d1:2b:51:
4d:ef:1d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:18:00 2025 by rpki-client