Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/DY21Bg3oUbtzm77wQkCwRHIkQQk.roa
File: DY21Bg3oUbtzm77wQkCwRHIkQQk.roa (raw, json)
Hash identifier: qZIMcnP47zIIcLpWesPleUJ2XdB9zCYyYyzYWyBj/nk=
Subject key identifier: 0D:8D:B5:06:0D:E8:51:BB:73:9B:BE:F0:42:40:B0:44:72:24:41:09
Certificate issuer: /CN=690a263249847cf97344742213644f929beaa997
Certificate serial: 019427484FE5E6F87BCC0EFBD2E5956A7CED
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/DY21Bg3oUbtzm77wQkCwRHIkQQk.roa
Signing time: Thu 02 Jan 2025 13:50:37 +0000
ROA not before: Thu 02 Jan 2025 13:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15969
IP address blocks: 195.110.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4f:e5:e6:f8:7b:cc:0e:fb:d2:e5:95:6a:7c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690a263249847cf97344742213644f929beaa997
Validity
Not Before: Jan 2 13:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d8db5060de851bb739bbef04240b04472244109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:d1:55:20:7c:4e:49:b1:81:a1:a9:7a:3d:
9d:d4:76:53:51:cf:99:7e:17:c6:96:87:2e:3f:10:
14:37:8f:4d:6e:11:14:df:8b:c1:ba:96:66:b5:08:
c6:eb:a4:cb:45:a3:4a:da:fd:90:fc:b5:28:41:99:
31:29:df:c6:5a:16:f2:1c:d6:bc:3a:85:9f:35:b7:
86:3c:b8:b8:fc:3c:79:e5:ce:dc:86:61:84:29:89:
55:00:af:d8:8f:8f:cc:46:73:37:5b:92:35:f4:79:
bc:26:3f:a6:ad:d2:70:8e:1e:fc:97:e2:8a:13:66:
f0:55:41:fc:b3:f7:09:9e:2a:e5:28:b8:3d:cd:2c:
06:81:70:3d:86:93:cb:17:c6:83:00:2a:61:f2:93:
c7:43:26:43:b9:58:d6:d4:f0:b5:29:f3:8d:18:69:
30:65:60:2c:2d:4d:78:f8:00:98:1f:15:4a:e8:3a:
69:75:33:16:7a:83:67:a8:30:99:c3:b4:f5:d8:be:
ba:72:0d:4e:fc:32:6d:d6:0f:6d:53:37:06:91:b5:
db:29:1b:21:25:21:65:95:40:59:bc:24:a9:86:87:
a2:58:fc:13:dd:1c:90:8c:87:0b:53:df:79:de:db:
6b:bb:37:0d:8a:db:fd:4c:0c:cc:df:c5:e8:e5:27:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8D:B5:06:0D:E8:51:BB:73:9B:BE:F0:42:40:B0:44:72:24:41:09
X509v3 Authority Key Identifier:
keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/DY21Bg3oUbtzm77wQkCwRHIkQQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.48.0/23
Signature Algorithm: sha256WithRSAEncryption
72:e3:cd:12:c5:9e:f3:99:29:e5:c4:e6:73:72:03:db:d5:4c:
7d:4a:38:4d:b1:2c:0c:db:49:44:b4:f0:ec:42:7a:21:97:40:
2b:69:f0:35:68:4c:53:dc:57:6a:03:14:b9:ed:c0:da:7a:0c:
14:26:0c:cf:62:28:8f:e2:c7:89:38:60:c2:0a:72:b5:69:35:
d4:a0:aa:24:d6:51:a1:4c:26:3d:59:a2:87:ae:cb:9f:03:e5:
de:ec:d2:67:3f:07:59:78:5f:b9:c8:f6:19:8c:f3:41:60:1b:
21:b0:e1:01:eb:81:eb:ca:c3:06:bd:cc:f2:49:5d:c3:3e:d0:
8a:51:4e:bd:d8:38:a1:0d:1b:af:e3:0f:02:d5:05:b9:f7:cf:
ff:07:4f:7b:b1:69:ca:51:95:3d:45:8c:5a:4b:fa:f2:d9:04:
14:78:91:91:40:88:a1:63:24:b0:de:13:24:fe:3f:86:3c:f1:
4e:bd:60:c4:1a:89:60:f9:fe:1a:db:f0:0a:0b:f7:e4:e9:78:
7e:83:1f:0a:61:4a:5d:2e:2e:cf:49:e8:0a:de:42:86:3c:62:
41:b7:24:1a:43:8e:de:51:56:40:9a:cc:bc:6f:b0:c7:32:a7:
5a:bd:ad:dc:8b:6f:c8:0a:a0:83:38:ce:c7:91:51:9b:0a:7a:
b7:b8:95:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:30 2025 by rpki-client