Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/sO327XoAur1DplfvgQUPrjYRerA.roa
File: sO327XoAur1DplfvgQUPrjYRerA.roa (raw, json)
Hash identifier: Y49ly/oM+VJ0V39d5VwjbL8ksFq63YJHHzGwktv4Jrw=
Subject key identifier: B0:ED:F6:ED:7A:00:BA:BD:43:A6:57:EF:81:05:0F:AE:36:11:7A:B0
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 019420D5A1535A48401B8C5C69B62FC0C02A
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/sO327XoAur1DplfvgQUPrjYRerA.roa
Signing time: Wed 01 Jan 2025 07:47:38 +0000
ROA not before: Wed 01 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47174
IP address blocks: 195.216.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a1:53:5a:48:40:1b:8c:5c:69:b6:2f:c0:c0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Jan 1 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0edf6ed7a00babd43a657ef81050fae36117ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:af:8c:12:ca:ad:1e:78:61:ee:b6:84:84:
e5:94:18:c8:b7:88:fb:29:c1:18:95:bc:d3:96:eb:
1b:46:7f:35:ee:8d:3f:33:5e:f4:68:8d:e0:ad:73:
c8:6b:d9:f2:5c:72:9d:d9:b2:79:ae:15:04:49:45:
f7:5b:c1:9e:0a:eb:85:dd:d2:2f:8b:d0:26:52:5e:
9a:5d:29:38:8b:74:ae:22:79:f0:d1:e8:21:2b:ff:
66:80:78:1e:d6:7a:a9:d8:29:82:a1:40:e1:b9:05:
9b:7f:81:37:17:e8:96:9c:7b:91:5f:49:6b:1f:78:
2b:46:75:d5:63:f4:32:96:ae:f6:70:c4:89:c3:12:
6b:8b:14:02:d3:da:ac:ce:2f:ac:61:51:e8:a2:8b:
e5:fc:56:47:1a:9e:d9:c8:ae:9a:3a:26:e8:da:f1:
29:69:b4:2d:c5:53:c4:fc:6f:49:5e:bc:a3:e1:27:
66:c8:59:a3:7f:16:7f:79:d5:ef:4c:6d:17:01:2b:
98:7c:28:d0:79:ec:33:1c:3e:10:fd:86:fc:12:07:
eb:ea:af:61:d9:4e:27:c9:d8:8d:28:15:ec:c6:12:
b6:e2:f0:19:de:ba:fd:6e:65:86:7e:04:20:97:0e:
8d:98:94:93:fa:fb:1b:cf:ef:bd:df:14:6e:b3:9f:
91:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:ED:F6:ED:7A:00:BA:BD:43:A6:57:EF:81:05:0F:AE:36:11:7A:B0
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/sO327XoAur1DplfvgQUPrjYRerA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:94:61:72:4c:c4:aa:1e:63:04:c4:3e:d9:0d:87:d0:38:93:
4c:c7:26:cc:58:5f:09:69:9e:8a:62:b7:e2:07:af:05:c4:39:
82:80:e1:ae:2e:af:9e:42:6c:4c:f8:d8:69:a4:f7:46:ff:5d:
ce:1f:3a:9b:fd:a7:58:db:c1:72:0d:88:3d:b1:6a:7f:c4:08:
7f:a2:ab:0a:ab:97:e2:e8:f9:ec:fc:6e:2c:6e:ed:da:c1:17:
8f:d4:c6:f0:70:c8:19:fa:cb:c9:8d:81:47:0b:3b:c9:c9:9c:
01:68:34:83:66:c1:29:c5:96:66:3c:87:f8:a5:16:e4:42:18:
05:94:4e:47:f0:aa:14:b4:8c:d8:a3:5c:d4:12:4d:2d:f1:4b:
b9:f0:6e:b7:af:d0:45:44:05:83:c8:0b:06:63:2c:56:4e:40:
c1:61:26:1c:f1:3b:d1:b0:41:de:75:b0:e1:f5:2f:2d:af:b8:
fb:27:96:cd:ba:d3:57:23:e7:b7:b2:3b:7e:13:ee:c9:c4:a4:
47:8e:54:28:64:c4:4c:4e:a7:07:af:84:f0:4d:a2:fc:e9:81:
d7:a8:1d:72:fe:cd:78:2d:e7:74:c1:75:bd:2a:ca:f1:38:5b:
e8:3b:f0:54:30:6f:2a:54:11:2a:9d:1e:c0:25:7c:d7:db:61:
94:23:32:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:34:46 2025 by rpki-client