Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/eDQ7Rqa20D_hI8gI5USdLHd-gF8.roa
File: eDQ7Rqa20D_hI8gI5USdLHd-gF8.roa (raw, json)
Hash identifier: r3EJNmKQgbbo4j5pe3uk2ZFcWeVkHRAZ7TxCivW3QgQ=
Subject key identifier: 78:34:3B:46:A6:B6:D0:3F:E1:23:C8:08:E5:44:9D:2C:77:7E:80:5F
Certificate issuer: /CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Certificate serial: 01942C9D4A4DE2829AB6D0DE3C3777299947
Authority key identifier: D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/eDQ7Rqa20D_hI8gI5USdLHd-gF8.roa
Signing time: Fri 03 Jan 2025 14:41:33 +0000
ROA not before: Fri 03 Jan 2025 14:41:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44246
IP address blocks: 193.34.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:9d:4a:4d:e2:82:9a:b6:d0:de:3c:37:77:29:99:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Validity
Not Before: Jan 3 14:41:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78343b46a6b6d03fe123c808e5449d2c777e805f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:e1:db:e0:0b:3b:20:b4:e3:46:8f:71:7f:
ab:6f:32:8e:e1:45:d7:58:a1:cd:5e:02:d9:a7:03:
3a:79:c5:04:f8:6b:19:7c:ba:89:49:a0:71:a2:59:
f2:02:9f:23:12:7f:11:93:03:b3:61:ea:94:12:32:
fd:2f:4d:a9:95:04:f5:40:89:d6:f0:66:4f:55:68:
d1:b0:37:75:e3:be:36:25:ae:fb:05:01:a2:fb:81:
0a:5d:e2:d5:69:1f:85:28:d3:77:6b:5f:8b:53:cc:
cb:f5:02:80:72:ac:88:74:d3:48:0a:09:56:dd:da:
5e:26:fa:e9:9a:6e:89:cd:c7:7c:a1:bb:39:e4:02:
22:56:74:0a:e2:63:ce:01:6e:fb:60:85:ad:52:ad:
79:5d:5a:a5:75:c1:bb:99:b3:46:96:b5:b8:a7:86:
1f:ce:4c:67:e8:f2:25:1e:94:b5:50:ea:ce:35:e2:
92:e8:1d:91:82:fe:53:4a:c3:80:0c:4f:f5:1c:2c:
f7:cd:ca:ec:c2:18:53:78:57:b0:9d:eb:22:a1:65:
98:b1:09:f0:8a:a5:d2:e6:4e:da:02:ee:76:b0:a0:
0d:12:21:73:38:7d:f7:58:07:d5:1f:1d:1d:db:d1:
e4:63:4d:37:ed:52:8f:2a:14:29:6f:8e:d8:18:68:
e8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:34:3B:46:A6:B6:D0:3F:E1:23:C8:08:E5:44:9D:2C:77:7E:80:5F
X509v3 Authority Key Identifier:
keyid:D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/eDQ7Rqa20D_hI8gI5USdLHd-gF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.84.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:f1:64:48:21:b6:6a:e2:fd:f7:c2:f0:69:2d:97:a8:de:1d:
56:c9:b8:41:0b:41:b1:71:42:47:9d:c1:41:68:ed:90:95:48:
51:19:bb:7a:48:32:3d:c7:ea:79:d5:1a:82:73:7b:71:9a:d6:
5a:df:5f:ac:eb:c6:cd:e0:63:4a:8c:f1:33:0f:d8:54:c7:a3:
1a:bd:19:3f:46:41:bb:af:6b:51:1e:cd:62:58:a9:05:bc:4c:
72:ad:fa:b9:dc:33:e3:5d:07:df:31:4a:f7:23:a0:df:6f:b4:
55:3d:6a:00:f4:a8:18:bc:03:5a:69:5f:90:79:67:da:df:06:
8f:0c:c1:8b:8e:1b:4d:dd:c2:00:54:f9:83:e1:b0:af:80:22:
5d:58:92:60:ab:38:e7:84:51:91:52:84:b4:40:af:a6:ff:2e:
2c:36:eb:52:25:9f:2f:43:a0:f0:8a:e9:25:38:da:4b:ed:c0:
55:2a:47:c7:f8:d7:fd:c7:74:e3:c4:95:b6:75:24:25:b8:2d:
60:d8:e8:e7:3c:5f:5d:0d:87:e4:56:3e:9b:53:b2:6f:67:51:
cf:5f:6c:d6:45:eb:0d:61:2d:da:27:da:fd:1d:38:d0:54:dd:
16:9b:55:84:9e:33:17:6f:d3:1a:a6:83:4c:d7:f2:61:ba:b8:
d4:f1:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:34:48 2025 by rpki-client