Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/462bBm4iwjQVO5xQHm8PCwvYoHY.roa
File: 462bBm4iwjQVO5xQHm8PCwvYoHY.roa (raw, json)
Hash identifier: dqD+m/gujJ0eHtncIX933mchElI1Kz0NU3ueb9Vzn+Q=
Subject key identifier: E3:AD:9B:06:6E:22:C2:34:15:3B:9C:50:1E:6F:0F:0B:0B:D8:A0:76
Certificate issuer: /CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Certificate serial: 01942445925FBC6201671C8DB41A694C8A9C
Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/462bBm4iwjQVO5xQHm8PCwvYoHY.roa
Signing time: Wed 01 Jan 2025 23:48:46 +0000
ROA not before: Wed 01 Jan 2025 23:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47626
IP address blocks: 193.35.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:92:5f:bc:62:01:67:1c:8d:b4:1a:69:4c:8a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Validity
Not Before: Jan 1 23:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3ad9b066e22c234153b9c501e6f0f0b0bd8a076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:c7:fd:dd:f9:3c:9b:3d:01:b5:c7:20:4e:bc:
0b:56:62:95:ca:5e:95:91:cb:a9:c9:f3:7f:39:43:
21:9a:3f:28:63:d3:47:5c:d7:9f:e7:b0:36:04:89:
5d:fd:70:3e:03:94:07:1b:4b:15:49:ad:d0:c6:cc:
99:d7:ba:45:b1:b5:af:a2:a4:d0:b8:b0:48:1b:e9:
fe:cd:0b:fe:b8:e1:07:ad:7e:5e:f7:14:76:ea:09:
69:c1:9e:59:74:ee:f0:4e:9d:d4:d4:88:e6:94:14:
3c:8b:e6:1a:25:a3:d2:c9:39:a1:9f:ac:7f:00:f4:
87:b3:2a:72:ce:a5:53:80:b3:08:35:f3:21:54:f1:
de:29:70:40:be:d3:8c:43:0b:f3:4d:0d:c2:97:0e:
5f:fc:15:8f:72:46:a2:32:79:5c:cd:0c:7c:90:37:
de:7d:63:58:0d:c3:05:ed:6b:24:53:9c:e3:02:db:
9a:7c:67:9b:11:af:2c:a3:5d:a4:87:ee:92:4d:bd:
cb:20:87:df:b8:dd:90:12:e1:a2:a8:aa:0f:af:8f:
8f:e0:8a:78:13:f7:b1:b9:49:de:b9:af:ff:27:a9:
82:2b:8c:97:6d:1b:fb:c1:0f:44:98:8d:36:7b:2d:
92:fd:d8:eb:06:82:ad:5c:b5:4d:91:db:77:b9:79:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AD:9B:06:6E:22:C2:34:15:3B:9C:50:1E:6F:0F:0B:0B:D8:A0:76
X509v3 Authority Key Identifier:
keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/462bBm4iwjQVO5xQHm8PCwvYoHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.48.0/22
Signature Algorithm: sha256WithRSAEncryption
53:96:36:0a:e4:e7:c1:67:5f:f9:ea:b5:e7:46:ba:d3:15:b2:
ab:9a:10:b1:4e:e9:ad:e6:ca:af:36:41:05:2b:19:a2:8d:36:
5c:20:a4:ba:19:54:b4:60:31:c1:f1:a8:9f:3e:f0:7d:61:4a:
b0:56:74:51:90:bd:84:d6:36:11:b7:1c:51:58:b4:fa:7b:23:
77:3e:fa:70:dd:02:47:ae:bc:26:9e:ce:b3:e9:3b:39:b5:f9:
f9:89:e3:1e:6f:08:d3:60:a4:3b:1d:69:9c:e5:a2:1a:a9:94:
33:8b:b7:ba:17:b7:0f:4d:10:14:c5:16:f1:2a:4b:38:46:ad:
d2:0f:b5:2e:f4:dd:1b:99:d8:0a:53:28:4f:a4:11:95:47:af:
79:9f:51:f7:fe:23:fb:26:14:37:b5:a8:03:f6:17:5a:3e:46:
25:2d:5c:3e:41:c0:d6:4b:f8:c7:10:d6:72:b8:7f:d7:fc:ef:
7e:d2:ec:2a:38:7e:da:7d:7a:83:85:7a:ac:c0:9d:bc:f1:f9:
b0:28:f0:85:c2:7f:c3:e9:e3:ff:5a:5f:4a:2c:74:b4:d1:a1:
c4:38:4d:92:d1:82:18:bb:1e:17:23:c5:38:00:d4:89:14:92:
d0:0d:c1:64:31:68:25:78:72:28:b3:2c:e9:c9:ca:d1:84:ce:
99:8d:40:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:43:47 2025 by rpki-client