Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/RA-miC4KaEWvGjUqoItCz1hzspU.roa
File: RA-miC4KaEWvGjUqoItCz1hzspU.roa (raw, json)
Hash identifier: DKcOTeAksEASWtQOJrZNTefUx03eFEufr+NTo/mhLcw=
Subject key identifier: 44:0F:A6:88:2E:0A:68:45:AF:1A:35:2A:A0:8B:42:CF:58:73:B2:95
Certificate issuer: /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial: 0194222004D6EFCFB01D6E6EBC4E8FB1029D
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/RA-miC4KaEWvGjUqoItCz1hzspU.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 193.162.44.0/24 maxlen: 32
2a10:f0c0::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:04:d6:ef:cf:b0:1d:6e:6e:bc:4e:8f:b1:02:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=440fa6882e0a6845af1a352aa08b42cf5873b295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:9b:f5:d6:6e:0f:99:23:2c:9f:70:9a:58:
16:88:23:b3:a8:9c:12:c5:7a:ac:1d:b9:bf:5c:46:
67:b1:a9:57:a6:19:36:50:9d:9d:69:b8:3a:6d:fc:
e9:a6:38:ad:6f:d4:5a:d4:b2:98:d7:fd:e5:04:22:
4d:16:d5:cc:0b:2b:86:b8:dd:50:bb:38:12:a5:f6:
db:ef:07:3a:9b:37:1c:ab:77:1d:1b:21:c9:d1:03:
bb:93:b6:07:0d:bf:3c:92:9d:a9:78:c7:d9:5f:ec:
7a:9b:61:df:32:94:6f:be:8b:b1:35:d5:72:b6:f6:
c9:d6:a3:a0:d1:f4:55:49:5a:9d:2e:20:db:d5:0a:
a2:ee:16:76:10:c1:a0:45:59:fa:7c:f2:c6:7b:90:
80:5b:34:3c:b3:ce:b5:4e:a7:d4:3c:6c:fc:db:eb:
71:a2:3f:6e:65:f0:c3:a6:bc:58:a0:b4:f9:85:d6:
49:08:27:e4:cc:06:71:9d:ed:10:67:81:72:48:69:
4d:c3:4b:07:77:27:a3:df:68:d1:ec:a7:a9:f4:c6:
bd:e4:0c:f8:a7:4c:12:f7:b4:e4:73:df:c8:fd:5f:
6f:0b:ad:56:51:a8:61:23:3e:7a:a1:f4:64:31:58:
ab:30:aa:68:95:d9:17:e7:ba:3a:8a:70:a9:07:98:
f2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0F:A6:88:2E:0A:68:45:AF:1A:35:2A:A0:8B:42:CF:58:73:B2:95
X509v3 Authority Key Identifier:
keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/RA-miC4KaEWvGjUqoItCz1hzspU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.44.0/24
IPv6:
2a10:f0c0::/29
Signature Algorithm: sha256WithRSAEncryption
23:d7:a2:36:99:eb:7f:3f:7d:dd:1d:bd:bf:69:d2:d7:ac:ca:
3d:c7:ce:3d:bf:30:ab:c2:c4:ca:15:a9:9f:36:b9:69:60:a7:
34:b5:5a:8b:5e:c1:2e:0c:5b:52:94:f2:78:82:a7:26:df:b8:
35:a0:bb:e4:73:34:fb:ba:13:33:aa:99:5f:3a:c6:36:cd:b6:
b3:e7:98:04:b9:e2:58:85:89:df:a6:18:1e:36:ec:c5:5a:db:
88:da:88:46:25:8a:4b:6d:f1:c6:5e:31:de:71:c8:2e:50:75:
4c:67:7b:f2:7c:80:a6:7c:d6:ba:d1:1c:20:35:aa:f6:89:54:
c3:70:57:75:0f:31:e7:ea:ac:22:81:de:db:a0:24:d3:de:88:
ab:18:17:db:7a:54:f7:93:dd:91:23:6c:b6:f1:ec:77:8a:9b:
70:c8:dc:11:5c:84:44:0c:f9:46:d8:1e:3e:6b:0f:25:01:9e:
2a:5a:d3:61:f2:37:e2:b8:60:f8:1e:1e:c3:44:d5:f9:d5:e9:
e9:5b:8d:ef:1f:36:0f:8a:8a:bc:60:a5:cb:44:f6:71:d4:97:
fc:d7:36:bf:00:37:a6:59:88:3e:75:38:7e:cd:49:93:d8:16:
56:7d:93:0d:2f:2a:f2:bf:da:9d:c4:d8:0d:a6:0d:c3:06:1d:
fa:6d:8c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:17 2025 by rpki-client