Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/CsQE55nTjZVIgwx6w1u3-dRgYa0.roa
File: CsQE55nTjZVIgwx6w1u3-dRgYa0.roa (raw, json)
Hash identifier: a95d3t9ywYxS9eXqUsbBAK9yU2vbYzv8cxs097vsyiA=
Subject key identifier: 0A:C4:04:E7:99:D3:8D:95:48:83:0C:7A:C3:5B:B7:F9:D4:60:61:AD
Certificate issuer: /CN=7edbf83aff434512c503712f22291602f55bff48
Certificate serial: 019427B5DDF5D72263E173CB769CDE2586E1
Authority key identifier: 7E:DB:F8:3A:FF:43:45:12:C5:03:71:2F:22:29:16:02:F5:5B:FF:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/CsQE55nTjZVIgwx6w1u3-dRgYa0.roa
Signing time: Thu 02 Jan 2025 15:50:17 +0000
ROA not before: Thu 02 Jan 2025 15:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 193.30.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:dd:f5:d7:22:63:e1:73:cb:76:9c:de:25:86:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7edbf83aff434512c503712f22291602f55bff48
Validity
Not Before: Jan 2 15:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ac404e799d38d9548830c7ac35bb7f9d46061ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:88:c9:99:bb:5f:0e:6d:bc:c9:13:93:50:
54:cc:85:75:e8:c9:bc:00:f3:37:12:a4:b5:2a:cd:
1b:96:fd:12:4f:04:8d:32:a1:4a:e0:0d:32:00:10:
9c:40:5d:3c:1e:98:86:06:5c:63:ad:db:ce:17:5a:
fb:c7:1c:0b:03:53:cb:eb:c7:6a:65:74:35:10:5a:
f0:f5:32:95:11:2a:6d:24:37:98:1e:ce:c0:71:e4:
7c:19:aa:93:9f:66:60:82:1d:9e:ef:1a:6f:73:78:
a3:fe:31:26:0d:b8:32:f2:ce:d8:0f:82:43:d5:15:
99:03:c3:b9:9d:06:bd:dc:10:c9:87:04:3d:80:21:
5b:39:58:1c:ad:3e:c5:cd:07:f0:6b:ff:86:7a:8e:
ce:05:4c:63:e9:cb:f5:60:dd:cc:14:61:f1:77:3b:
15:73:89:d1:b4:19:72:cc:67:ed:e3:fb:d5:e0:c3:
67:a3:47:76:33:52:6d:22:f5:78:cf:ce:3b:ac:39:
0f:56:4a:f1:63:01:78:24:c0:70:34:0e:03:d1:26:
5a:54:23:4d:a0:3d:7f:e4:c8:ac:50:ae:c0:0c:87:
fd:be:5f:ee:50:ec:f9:a1:7f:38:d1:46:38:05:c4:
50:ef:ad:b7:b2:dd:00:5d:f6:88:9e:0b:85:a0:ff:
48:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C4:04:E7:99:D3:8D:95:48:83:0C:7A:C3:5B:B7:F9:D4:60:61:AD
X509v3 Authority Key Identifier:
keyid:7E:DB:F8:3A:FF:43:45:12:C5:03:71:2F:22:29:16:02:F5:5B:FF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/CsQE55nTjZVIgwx6w1u3-dRgYa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.112.0/24
Signature Algorithm: sha256WithRSAEncryption
77:06:6b:86:bd:44:4a:6a:34:98:43:f4:25:eb:b6:49:3e:90:
8a:60:7a:55:75:ec:90:30:b0:d6:35:d5:86:b0:43:6a:63:95:
c0:b6:11:90:eb:13:74:25:53:24:5f:cf:2f:44:c8:5f:5d:90:
bd:ed:ef:82:54:b7:53:63:60:8b:95:0e:82:1c:2f:50:fd:6a:
11:6b:16:eb:6c:58:d1:fb:d7:b8:6e:9f:3b:76:33:8b:0f:8a:
4f:8b:66:10:cd:fb:f6:ee:71:11:a0:bd:01:b3:62:3e:a3:4f:
6d:f7:5f:9d:c6:c2:83:8a:54:8f:a1:dd:6a:ee:84:f2:ea:51:
6c:aa:75:5b:e5:f7:d0:4d:24:09:58:51:cd:84:35:41:e8:9e:
3f:4e:6f:c3:af:0a:15:51:5d:e9:3b:14:20:da:4c:07:d6:b1:
1e:49:d7:d6:0a:5a:a7:dd:76:78:0d:49:aa:a8:f2:20:03:d1:
1a:6b:9c:39:4b:e5:37:83:c9:42:41:5c:7c:59:b8:ee:b5:bb:
f4:aa:11:06:e3:2a:70:44:7d:5b:98:bc:6b:6f:b4:60:31:18:
c0:a2:a4:f7:24:62:ca:41:15:ef:25:c0:36:08:40:13:45:f5:
9a:25:10:9d:2d:25:e0:d0:e6:7a:55:c2:b2:3b:ac:e4:cf:bf:
d8:89:24:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:04:32 2025 by rpki-client