Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/1mDSvWCAPrTbdUwmp52_NsdaJps.roa
File: 1mDSvWCAPrTbdUwmp52_NsdaJps.roa (raw, json)
Hash identifier: FwQIJqtRB7XaFGpge2zOocq9MbKJo1suVWwULTT7sHA=
Subject key identifier: D6:60:D2:BD:60:80:3E:B4:DB:75:4C:26:A7:9D:BF:36:C7:5A:26:9B
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 019422FC45C0F9383BB7B1CCF122AEA382B2
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/1mDSvWCAPrTbdUwmp52_NsdaJps.roa
Signing time: Wed 01 Jan 2025 17:49:05 +0000
ROA not before: Wed 01 Jan 2025 17:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208065
IP address blocks: 193.8.40.0/23 maxlen: 23
193.8.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:45:c0:f9:38:3b:b7:b1:cc:f1:22:ae:a3:82:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Jan 1 17:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d660d2bd60803eb4db754c26a79dbf36c75a269b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:44:82:d4:f6:ad:4c:c7:b3:ef:7f:41:a6:
42:12:9c:b3:ec:11:42:7f:63:37:f3:c7:9e:3b:39:
34:80:25:82:15:29:e7:7d:1b:83:7f:59:e6:37:29:
08:00:62:b5:dc:d9:50:33:16:b3:29:0b:d3:22:59:
3d:81:f6:68:67:7e:9c:47:10:2c:6e:cb:3e:b6:43:
0a:0e:8d:63:f0:0d:98:0e:19:fd:52:32:c8:db:c8:
99:5d:68:90:de:d0:81:21:59:e6:95:b4:72:bc:cf:
17:b9:4a:bb:49:00:0a:55:c6:e8:d3:a4:34:63:c9:
28:07:c9:2b:ad:28:c4:c4:1c:35:fb:a7:c3:e8:1f:
e7:ed:63:ed:46:0b:ba:d3:c0:2a:ae:85:98:12:24:
8e:13:48:9b:0f:77:bc:dc:68:7b:42:36:c8:73:c1:
ef:75:fe:d2:71:9b:ba:4a:72:88:5e:14:0c:b7:16:
89:28:e8:f9:c7:49:20:fd:9e:67:9d:fa:12:a7:fa:
b9:d7:62:d9:2a:a6:53:00:b0:d0:af:60:82:73:86:
cf:c4:08:5e:9b:0e:20:4d:d1:be:5d:d8:a7:43:a8:
5a:d7:85:75:16:52:ff:cc:48:ee:f5:a7:38:c9:ce:
37:17:34:2e:0a:e1:2e:19:98:8d:1d:33:3c:0f:26:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:60:D2:BD:60:80:3E:B4:DB:75:4C:26:A7:9D:BF:36:C7:5A:26:9B
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/1mDSvWCAPrTbdUwmp52_NsdaJps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.40.0/23
193.8.44.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ce:b0:d3:12:2f:8d:ca:dc:c4:f0:87:aa:2b:75:59:d5:86:
b5:a4:79:12:4d:9c:83:6e:2f:c8:42:22:36:fd:02:c6:b1:33:
d3:79:31:ab:3a:bc:a6:ab:0c:84:7b:a6:1d:59:81:4d:c7:c2:
11:70:b2:74:b6:16:96:47:71:93:cc:14:27:26:4e:69:ed:8a:
09:86:5e:7d:1c:7f:b4:7a:e4:4c:ab:da:45:2b:23:c6:e5:2a:
09:dc:7b:de:e8:22:02:ee:8e:b2:aa:fd:42:38:32:3d:cf:09:
a3:ec:a5:a9:12:f8:33:1e:c4:95:97:44:aa:15:35:d0:4f:2a:
6b:a8:cb:e4:73:5d:58:23:bf:ef:d4:c3:c9:9b:c2:0f:0a:d8:
53:ad:02:dd:44:b4:fe:30:2a:04:08:ee:de:d3:ec:85:a5:7e:
75:e0:0c:83:a1:d8:21:13:04:4a:67:65:b5:b3:f3:67:c3:f7:
55:b1:8e:90:a8:cc:35:e1:d5:03:d2:ce:55:e9:57:1c:40:d4:
7c:2d:42:c8:4e:52:d7:0f:38:78:0d:d2:ab:4a:5d:3e:be:58:
ce:4b:c1:bd:9a:f1:2a:80:58:ca:28:4f:0a:6a:4a:91:04:d3:
6f:7a:e8:41:0f:87:1e:b5:4b:1a:bb:a2:42:18:75:06:da:53:
60:6c:d4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:32:12 2025 by rpki-client