Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/bEVHApOn0r9XsLJdbdbwUXqgXEw.roa
File: bEVHApOn0r9XsLJdbdbwUXqgXEw.roa (raw, json)
Hash identifier: qWKLpKiQad99pQrG7nvehg6OeSlW2Um9FXa5bCKFb3U=
Subject key identifier: 6C:45:47:02:93:A7:D2:BF:57:B0:B2:5D:6D:D6:F0:51:7A:A0:5C:4C
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5B1DC7E30765EB98EF751ED203247
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/bEVHApOn0r9XsLJdbdbwUXqgXEw.roa
Signing time: Wed 01 Jan 2025 07:47:43 +0000
ROA not before: Wed 01 Jan 2025 07:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41951
IP address blocks: 193.252.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b1:dc:7e:30:76:5e:b9:8e:f7:51:ed:20:32:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c45470293a7d2bf57b0b25d6dd6f0517aa05c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:19:d3:bc:83:1a:22:b4:a8:0f:65:74:d9:
bb:9a:c6:4b:ab:6b:f9:df:78:97:90:ba:79:22:5e:
e5:e2:e4:ff:8d:ea:b6:b7:f1:8a:3c:8f:00:05:58:
00:2f:1d:e3:db:86:ad:89:a0:a1:ec:a7:ca:67:33:
f8:18:4f:37:68:5e:9c:d7:ba:9b:62:ae:e1:a5:12:
7e:c2:a0:9c:e9:9e:6c:09:55:01:dd:56:7f:e1:34:
f9:1a:49:92:09:91:ac:04:86:60:4b:6e:30:4a:2e:
ea:56:70:4b:90:28:55:6e:e3:7c:08:a3:d7:0b:16:
f5:58:ac:3b:93:39:66:c9:3e:52:ae:32:31:26:83:
69:9d:38:43:89:27:28:2a:d4:0a:85:09:13:f9:7d:
73:5b:e5:d5:2d:f6:d7:e4:2f:bb:8f:a9:9a:38:b6:
8e:05:84:5b:72:6d:74:3d:29:55:8e:15:bd:d3:fa:
9d:4e:5e:9f:d9:9d:35:9f:bb:3a:2f:f8:b3:49:17:
16:9a:f8:f1:5a:2f:ff:c7:4f:54:fc:de:e8:5d:49:
a0:84:a1:e4:c7:07:11:5e:be:68:ca:1c:e3:3b:0a:
99:66:dc:ec:38:76:e9:69:30:17:18:4e:52:71:ae:
41:8b:3f:f9:23:ff:2b:9d:ab:bb:1c:c2:31:a2:6a:
e4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:45:47:02:93:A7:D2:BF:57:B0:B2:5D:6D:D6:F0:51:7A:A0:5C:4C
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/bEVHApOn0r9XsLJdbdbwUXqgXEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.252.16.0/23
Signature Algorithm: sha256WithRSAEncryption
42:72:ab:97:92:95:2a:c2:2a:48:c6:5b:c0:05:59:58:1f:52:
4c:5f:e3:31:11:55:fb:f4:34:0f:98:74:6f:e3:0d:e4:ab:45:
fd:d7:18:8e:08:b0:ad:e6:95:a6:0e:a2:54:7b:bf:2f:35:a4:
00:59:d4:92:1d:21:f8:32:95:b5:3b:29:83:1d:05:cf:50:2e:
1d:69:50:ec:78:03:6b:06:61:c4:ed:71:63:39:25:5c:a5:60:
6d:22:f9:a0:a4:aa:d6:4f:d1:59:7a:26:33:9f:08:75:04:b4:
62:51:44:4d:3b:c9:58:2a:c1:9b:93:8f:92:43:f9:5b:7e:0a:
07:21:5f:4e:b4:d1:0e:79:58:b3:2f:ea:c9:a8:bb:eb:03:52:
c9:0a:db:40:37:00:12:a0:cf:ad:d2:69:bd:41:c1:91:56:15:
4a:5f:ac:df:b2:c1:d7:b1:91:dc:19:f2:99:dd:d1:ea:38:3e:
7f:d6:9a:ce:8a:8a:7d:d6:88:fd:45:64:68:7f:7b:6e:ed:fd:
78:ed:64:2f:d6:32:70:0d:dd:bb:f2:22:68:f2:e8:f5:84:57:
fc:03:f6:40:de:6f:ca:f3:cf:f0:a4:31:44:50:05:76:b1:11:
30:2d:3d:35:58:89:c9:a8:93:9e:bb:0d:35:c2:70:a9:97:4d:
19:0e:ad:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:12:46 2025 by rpki-client