Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/aqZglDYGnEsB53FUZu6hOgHFRNI.roa
File: aqZglDYGnEsB53FUZu6hOgHFRNI.roa (raw, json)
Hash identifier: PiTo1HXxs70zjyTF54PbMNKhREuF1Fd5QySzyhgibes=
Subject key identifier: 6A:A6:60:94:36:06:9C:4B:01:E7:71:54:66:EE:A1:3A:01:C5:44:D2
Certificate issuer: /CN=3bce3d474a775ce4776371632bc196ca1f4ec23b
Certificate serial: 019420D62E05CFFE7308683DC8D65F60F0BB
Authority key identifier: 3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/aqZglDYGnEsB53FUZu6hOgHFRNI.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29278
IP address blocks: 193.17.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2e:05:cf:fe:73:08:68:3d:c8:d6:5f:60:f0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce3d474a775ce4776371632bc196ca1f4ec23b
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6aa6609436069c4b01e7715466eea13a01c544d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:3c:dc:ae:2c:cc:68:0a:a0:6f:58:03:15:
9e:cc:30:f5:e3:59:86:ef:c4:31:c1:cb:14:21:7e:
9c:c2:df:11:98:ef:83:c3:35:92:b6:77:e9:50:73:
ca:fe:0b:85:b6:74:14:08:53:ec:bc:b3:18:8d:1e:
fa:2b:4c:77:3b:b2:e3:98:4a:69:ac:10:8b:78:84:
6f:7e:8a:bc:d7:7f:c8:f6:a6:f5:24:83:5e:3f:a4:
41:74:06:ea:db:95:e6:e7:17:e7:4e:67:ea:27:b8:
fb:8c:45:bc:99:17:6b:67:f0:1c:3c:39:61:97:00:
56:db:0c:a4:05:b4:19:d3:3e:97:8d:04:09:f6:ff:
67:bd:86:5e:7e:51:a0:dd:3b:ce:a5:1c:fd:e9:da:
52:6e:ee:4c:86:19:6b:9e:0f:9d:26:38:58:36:bf:
3c:1a:28:14:b9:f7:4a:cf:44:7e:73:ab:91:8c:44:
db:96:10:f5:b4:63:fb:ca:2a:37:fb:80:5b:3b:88:
e2:9c:c4:d5:34:02:18:48:7f:11:70:dd:55:f2:20:
70:e1:ec:1c:d0:cf:66:eb:15:c5:83:e4:c2:2e:48:
c0:61:23:9e:fe:70:99:f8:df:8f:9e:a2:ed:88:63:
61:03:d5:9a:b5:d6:95:53:64:79:3b:ab:b3:d1:a9:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A6:60:94:36:06:9C:4B:01:E7:71:54:66:EE:A1:3A:01:C5:44:D2
X509v3 Authority Key Identifier:
keyid:3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/aqZglDYGnEsB53FUZu6hOgHFRNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.175.0/24
Signature Algorithm: sha256WithRSAEncryption
26:82:82:04:65:cf:4f:49:66:d1:ef:d0:93:03:57:6e:fa:d6:
3b:43:cb:e1:df:9e:c1:9c:09:da:15:44:a0:e6:66:32:a2:d2:
c8:12:35:d5:0f:cb:d4:5e:10:3c:9a:39:ff:5e:02:00:13:48:
7a:df:e9:55:a2:44:c5:96:70:51:a8:b9:82:2d:e7:b9:98:1f:
c0:d0:d3:ea:71:a4:04:e9:e0:54:72:6d:f6:63:5a:0e:92:57:
0b:b5:80:cc:da:f1:77:fd:ea:ef:77:55:02:fd:6a:f2:e8:94:
a8:90:2e:59:15:c8:28:5a:6c:33:db:45:1b:a6:ab:be:e8:99:
72:6b:f4:c2:0e:0e:73:99:4d:f4:1a:49:71:aa:43:de:77:6a:
2a:cd:8b:8e:8a:72:f7:e7:de:0d:0b:3d:00:e3:dc:d6:7b:d9:
3d:1b:df:13:56:82:6b:9a:98:85:aa:76:c4:de:6f:92:c4:98:
5a:df:e9:e5:e0:5b:34:93:79:e4:8d:1a:f8:44:32:1e:a7:ad:
c7:92:4f:60:e0:51:76:7f:81:3f:b5:f9:81:c4:ea:7f:2a:7a:
9f:6e:4d:81:fb:91:df:78:6c:41:b0:9e:9f:9d:ea:12:3b:3a:
ba:ac:64:63:64:e6:44:b9:cf:63:ec:5a:f0:df:42:a3:b6:a8:
19:12:72:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:55:12 2025 by rpki-client