Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/0yK9CSc1iwH9Ha7iv7t9MQLBMSc.roa
File: 0yK9CSc1iwH9Ha7iv7t9MQLBMSc.roa (raw, json)
Hash identifier: rrGUPdLm/yz0jAaBzRKBfGiiUHE1bJZVAlwYqWnvc2g=
Subject key identifier: D3:22:BD:09:27:35:8B:01:FD:1D:AE:E2:BF:BB:7D:31:02:C1:31:27
Certificate issuer: /CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Certificate serial: 01942444AA047B134B0FE505AE4A91ED580D
Authority key identifier: C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/0yK9CSc1iwH9Ha7iv7t9MQLBMSc.roa
Signing time: Wed 01 Jan 2025 23:47:47 +0000
ROA not before: Wed 01 Jan 2025 23:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48584
IP address blocks: 193.68.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:aa:04:7b:13:4b:0f:e5:05:ae:4a:91:ed:58:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Validity
Not Before: Jan 1 23:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d322bd0927358b01fd1daee2bfbb7d3102c13127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:4b:86:7a:47:81:db:b3:7f:cc:48:1a:ec:
7f:09:c0:f3:4b:06:9a:e5:9e:04:84:34:aa:51:bb:
4d:92:7c:26:0b:db:cd:9b:e4:b6:23:63:3a:b6:94:
78:30:2a:15:8c:0a:c7:59:5c:48:d4:fa:c7:d1:3a:
a6:05:72:88:f5:ba:19:4e:98:9d:e2:ed:62:96:16:
56:d4:fb:70:a8:bc:7f:c0:bd:fc:12:77:33:45:63:
85:96:90:4e:a8:8c:33:29:bd:01:a0:ca:0c:86:65:
ee:d9:bb:3c:8b:a7:89:f8:dc:82:73:8c:26:0d:01:
49:2d:cb:f8:17:10:6c:ac:f1:3a:1b:0a:56:13:7d:
fe:03:30:71:93:43:15:c2:20:47:39:a4:5e:0e:cf:
09:5b:5b:c7:61:77:07:71:41:72:77:20:13:65:b5:
5e:0c:f6:04:3f:e8:36:4c:37:96:17:aa:e0:39:76:
e4:4e:0b:a4:6c:4c:53:45:78:c2:f4:39:f8:18:e0:
14:39:3a:4a:2a:a0:f4:f1:67:03:96:09:44:c1:f4:
ae:84:e9:1e:ba:43:fa:d8:84:5e:15:d3:d7:53:1e:
17:e4:de:ba:24:17:18:5a:b5:18:8f:54:0b:88:bf:
77:f9:35:8f:fd:42:10:dd:ac:40:df:26:77:04:c3:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:22:BD:09:27:35:8B:01:FD:1D:AE:E2:BF:BB:7D:31:02:C1:31:27
X509v3 Authority Key Identifier:
keyid:C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/0yK9CSc1iwH9Ha7iv7t9MQLBMSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.68.114.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:72:98:b0:07:89:10:b6:84:bb:97:26:ba:c4:66:f0:25:bf:
71:f5:e2:72:b1:3f:85:08:5d:5a:fe:7d:aa:18:50:ca:b4:a6:
84:84:02:c7:1c:ac:53:af:06:63:a6:eb:41:4c:11:35:f4:61:
cd:c5:d4:b5:1a:25:1e:15:f4:4f:27:14:2f:01:bd:57:2f:78:
e7:5e:c3:63:69:df:5d:4d:63:3f:2b:ac:5e:2d:74:c3:c1:24:
68:33:d1:1e:c3:4f:80:e7:e6:33:63:6f:ab:47:ce:e7:fa:db:
98:f6:d5:66:a6:8e:db:35:ec:d3:97:1b:26:a9:07:a0:49:f8:
7e:04:bc:11:54:1b:42:cb:28:60:d7:09:b1:c1:af:df:6e:de:
a2:f6:8a:c1:25:22:b2:57:d0:81:50:ea:db:ca:44:2e:04:ff:
1a:db:64:a1:83:d7:a2:68:51:c6:36:74:55:00:98:d4:53:6a:
09:2c:3b:3d:f7:fc:49:22:ad:16:22:fc:2a:35:91:a5:c3:ca:
43:60:38:8b:8c:08:a5:7b:0b:e1:10:84:4b:11:fd:72:4f:54:
95:26:b1:e8:85:e3:67:ac:8c:4b:23:2a:70:e1:df:38:31:71:
33:7e:b5:06:25:10:0c:cf:0e:04:07:da:f9:68:a3:1e:ab:67:
e5:3d:b6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:15:44 2025 by rpki-client