Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/o0yqbcUGmuXiLS-K2hUnWBovg7k.roa
File: o0yqbcUGmuXiLS-K2hUnWBovg7k.roa (raw, json)
Hash identifier: uQlsB1ZpKLfh7MiBG0QLqlWeEhVfwTmSH778FQW6DwE=
Subject key identifier: A3:4C:AA:6D:C5:06:9A:E5:E2:2D:2F:8A:DA:15:27:58:1A:2F:83:B9
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01942825CC1CDFA53FF54A1F7A422393A728
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/o0yqbcUGmuXiLS-K2hUnWBovg7k.roa
Signing time: Thu 02 Jan 2025 17:52:33 +0000
ROA not before: Thu 02 Jan 2025 17:52:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212452
IP address blocks: 188.93.241.176/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:cc:1c:df:a5:3f:f5:4a:1f:7a:42:23:93:a7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 17:52:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a34caa6dc5069ae5e22d2f8ada1527581a2f83b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:67:43:d4:db:a7:d0:7b:d0:40:fa:bc:b5:a5:
e8:20:4d:23:6e:41:85:1c:c6:9c:ca:3e:6f:cf:fe:
5a:d3:12:ed:00:d6:a9:50:17:31:eb:eb:06:de:2d:
7f:57:9d:4d:00:f1:7b:f9:c3:f1:ed:3a:d9:36:8b:
b9:e4:35:07:cd:da:94:64:3a:f2:d3:58:c2:6e:00:
c8:06:c3:18:ab:28:aa:df:20:1f:7f:d8:fd:f2:76:
fd:cd:5f:62:7f:cb:ce:ff:3d:b8:59:67:20:ca:28:
dc:cb:19:ee:a2:b8:a2:a8:7f:65:61:91:e0:c4:a2:
75:fa:c3:d6:5c:49:4d:29:66:47:31:51:df:2b:be:
17:14:f5:17:bb:a2:e0:54:ca:4f:2b:42:b5:ea:fa:
6f:03:e3:4b:bd:8d:a2:e6:31:cc:2e:9e:7b:8f:3c:
7f:75:c5:a4:d9:1c:0a:04:8f:1e:db:83:21:ce:ba:
f6:9e:93:48:fa:95:0c:ea:92:49:da:bf:e3:d8:28:
6f:10:0e:f7:63:17:bc:27:45:ad:bc:3f:b0:64:cc:
76:47:01:3c:60:8b:d9:ae:50:f1:37:ae:6c:2c:96:
c8:fe:1e:c9:84:15:b4:35:4e:5c:72:a1:6c:74:be:
8a:7d:09:ce:40:13:a0:18:98:53:2b:b0:ec:5f:b9:
52:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4C:AA:6D:C5:06:9A:E5:E2:2D:2F:8A:DA:15:27:58:1A:2F:83:B9
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/o0yqbcUGmuXiLS-K2hUnWBovg7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.241.176/28
Signature Algorithm: sha256WithRSAEncryption
24:ad:37:ee:9b:12:db:fd:01:06:1f:0e:ee:87:c0:68:e2:96:
68:7e:16:a9:0c:c3:ef:81:28:bd:06:25:0e:d8:54:9b:41:6c:
21:ed:16:44:1d:f8:86:97:c9:a5:a2:e7:af:e9:9e:7b:8f:83:
18:93:f0:ea:f7:cb:5d:e1:da:ac:ea:81:c9:4f:f2:3b:c7:9c:
c2:76:34:72:a4:e1:6a:3e:5a:2b:a3:71:78:70:24:1c:ca:56:
58:b6:c2:65:16:62:9c:b3:98:cf:68:f6:bf:55:88:f1:4a:70:
94:68:8c:21:2e:0d:a9:66:a5:9c:00:fe:54:38:bd:40:f9:bd:
29:82:b9:9e:b5:69:ad:28:f5:c3:c0:14:18:bd:a3:c2:86:12:
18:d3:36:40:77:77:a1:9c:e8:26:37:5d:e4:e7:12:85:00:18:
51:3b:83:5e:6c:6f:b1:75:75:c8:8d:46:4a:9d:df:b6:82:59:
7b:24:38:8a:3c:6b:30:86:f7:a3:3f:1b:73:fd:67:e9:3f:47:
2a:75:c3:a0:37:49:23:b1:c4:f5:4a:15:dd:85:b8:d3:75:eb:
90:06:cd:79:1b:f2:0b:ce:08:35:ac:05:10:ba:a0:3c:6b:4d:
be:58:e0:cf:dc:12:bc:cc:a6:53:54:a5:7c:c4:9d:f8:f5:48:
52:89:be:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:57:12 2025 by rpki-client