Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/B3HRVDq17dmYEd_4fHtjlcnZx1I.roa
File: B3HRVDq17dmYEd_4fHtjlcnZx1I.roa (raw, json)
Hash identifier: bT7FTTeSzclYhdeU0fsaRQxAGT8mqDYR/4kWlCp4d8o=
Subject key identifier: 07:71:D1:54:3A:B5:ED:D9:98:11:DF:F8:7C:7B:63:95:C9:D9:C7:52
Certificate issuer: /CN=470c2c983b627169218571c6b82947aeeea5f7ce
Certificate serial: 019422202902F26271C5FFE01CA31DF40594
Authority key identifier: 47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/B3HRVDq17dmYEd_4fHtjlcnZx1I.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43341
IP address blocks: 193.26.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:29:02:f2:62:71:c5:ff:e0:1c:a3:1d:f4:05:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470c2c983b627169218571c6b82947aeeea5f7ce
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0771d1543ab5edd99811dff87c7b6395c9d9c752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:82:1f:c2:b6:76:19:5f:65:4b:55:75:94:
36:79:0e:27:d2:e9:89:27:3c:39:79:4b:a5:d1:2a:
a4:25:ae:fb:5b:ec:4d:6d:ff:c6:d9:d2:48:b2:c8:
cb:e7:b5:90:58:2e:b2:67:ae:ec:45:24:db:97:6f:
3a:e3:cd:b5:83:e5:ef:a2:86:9f:6b:88:20:70:36:
b2:92:53:50:6f:ec:02:c6:ab:16:e4:03:b1:96:95:
82:eb:47:b6:7d:d2:9a:ce:bf:75:99:95:ca:f2:b5:
49:b3:96:09:e9:47:d6:02:3d:d4:16:2b:ea:ab:96:
5b:e3:f2:26:3d:1a:58:c0:35:d6:6a:2a:d8:78:86:
c6:67:fd:3e:dd:eb:3a:e5:62:76:36:38:8c:32:62:
b2:cc:0f:e7:f4:b8:f5:d6:a3:a2:a3:3e:14:a4:a7:
a9:ed:db:64:ec:b0:e9:1e:20:f3:d5:91:77:aa:e0:
c7:4f:46:d9:d4:81:20:b1:0b:42:d4:fc:d0:67:ce:
ab:bd:02:3b:af:2f:a4:59:4b:7f:b5:fb:7b:f8:8c:
ec:0a:cd:16:98:24:fe:84:eb:b0:89:b2:b6:ab:d7:
54:68:6c:31:4a:3d:1e:dc:5b:a1:96:b1:27:9b:3c:
7d:d3:1e:4c:68:67:c9:c5:ff:9f:85:80:76:c1:0b:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:71:D1:54:3A:B5:ED:D9:98:11:DF:F8:7C:7B:63:95:C9:D9:C7:52
X509v3 Authority Key Identifier:
keyid:47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/B3HRVDq17dmYEd_4fHtjlcnZx1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.123.0/24
Signature Algorithm: sha256WithRSAEncryption
84:80:01:05:9c:6f:0f:32:e3:f5:ff:f2:f1:a5:a1:9e:77:e8:
27:fe:1a:12:50:81:8d:44:b6:3b:a2:e3:06:b2:2a:15:ad:c7:
42:4f:ac:ef:c3:b0:59:12:74:1c:b1:e3:18:01:95:7e:b5:fe:
13:bf:4a:47:2e:d6:71:8a:15:61:cd:d8:5e:c8:72:e9:44:09:
a9:e2:2d:8a:a3:07:c6:d9:06:30:0a:64:af:44:10:9e:75:82:
c7:18:ba:4f:13:8f:50:2c:6a:a7:b9:18:8d:4d:1c:09:22:3d:
0e:a4:0f:9d:90:1f:16:60:d2:f3:af:ce:01:74:3b:8b:41:a5:
27:bc:a1:34:b0:94:19:e4:be:c2:bd:63:c9:72:54:95:83:ea:
26:cd:e1:ba:96:b8:36:98:0c:4e:01:90:e0:df:e1:2d:3e:24:
56:f5:85:b0:63:45:43:4c:2a:eb:0f:78:c3:4b:73:36:e6:11:
96:45:aa:7b:e8:d7:dd:71:a6:c2:19:df:98:8b:f0:33:e5:52:
f0:4b:9a:6e:c2:e9:d7:8f:98:e6:3d:ae:fd:c0:a8:ce:8e:15:
3b:fe:c1:33:e8:cf:c7:ee:1a:16:00:0b:08:50:f3:88:7e:70:
59:d2:50:94:59:21:d3:50:a1:4c:6a:cd:94:99:6c:ca:a4:38:
fb:80:12:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:01:13 2025 by rpki-client