Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/Da6dAF-NGphy1zgRhDQ05RyQ1mQ.roa
File: Da6dAF-NGphy1zgRhDQ05RyQ1mQ.roa (raw, json)
Hash identifier: R5La2aCfCSDGzXotldIBaostZmuzpfxF11D1+dvqQ6Q=
Subject key identifier: 0D:AE:9D:00:5F:8D:1A:98:72:D7:38:11:84:34:34:E5:1C:90:D6:64
Certificate issuer: /CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
Certificate serial: 019428274D037DF93571AC40D512853AE75E
Authority key identifier: 19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/Da6dAF-NGphy1zgRhDQ05RyQ1mQ.roa
Signing time: Thu 02 Jan 2025 17:54:11 +0000
ROA not before: Thu 02 Jan 2025 17:54:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12439
IP address blocks: 193.41.245.0/24 maxlen: 24
193.41.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:4d:03:7d:f9:35:71:ac:40:d5:12:85:3a:e7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
Validity
Not Before: Jan 2 17:54:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dae9d005f8d1a9872d73811843434e51c90d664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:60:4a:44:fc:85:2c:72:46:45:d0:57:f9:
8e:fa:c5:8d:5b:a0:b7:f5:52:69:c4:3c:2b:0d:ab:
88:2e:02:23:9e:60:4c:ac:a6:6f:b4:c5:b4:44:97:
d5:34:cd:07:4a:81:a7:f3:e1:d2:58:8d:7d:64:41:
fc:3e:c1:24:ce:4d:67:d2:72:0e:18:87:13:82:a0:
74:a8:ad:b1:fa:7e:c8:fe:f6:c2:ca:9f:07:75:53:
f0:ac:7a:77:3b:a2:6f:af:2b:6c:dd:f1:10:33:d7:
79:49:4b:3c:ae:fc:ba:c8:99:ff:50:d1:2f:2f:42:
77:38:d9:e1:99:f9:e8:54:d9:18:a0:c7:43:64:e2:
7a:d6:11:ef:e2:24:66:ae:0a:86:c4:a8:16:eb:a6:
82:c6:08:ae:e7:74:23:20:e4:4a:77:1d:8e:27:56:
c8:bf:72:93:8b:87:47:04:97:7a:e9:60:88:5c:be:
02:cc:e8:fd:e8:6c:21:f3:ef:67:85:ea:50:02:0e:
ee:13:75:1e:3a:59:ae:72:e1:c3:7f:52:eb:d1:8c:
8f:47:fe:d5:4c:08:5c:1f:a6:50:4a:e2:99:53:63:
01:ef:07:f6:d0:dc:a7:19:ff:6b:38:f3:26:09:61:
f2:b1:b7:66:b8:fe:36:71:6d:09:a8:b0:d8:f1:fa:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AE:9D:00:5F:8D:1A:98:72:D7:38:11:84:34:34:E5:1C:90:D6:64
X509v3 Authority Key Identifier:
keyid:19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/Da6dAF-NGphy1zgRhDQ05RyQ1mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.245.0/24
193.41.247.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:89:90:eb:d5:bc:85:18:9f:c7:44:4f:9f:c6:65:36:1b:16:
4c:a4:4c:7c:8f:c8:fd:28:8b:13:28:52:12:b9:b7:90:f7:ca:
fa:e1:fa:b4:79:71:cf:92:93:c9:4a:18:17:9a:eb:c5:22:3c:
c7:95:44:04:b9:96:9e:02:e6:14:d6:87:be:5e:41:f6:b9:d1:
33:7b:e8:a8:bd:83:46:7b:e8:42:bf:6b:42:27:33:07:82:52:
d4:80:da:16:da:9e:a0:d1:a7:c3:b9:5c:94:65:25:65:5a:59:
08:49:b0:7b:8a:3d:30:cb:70:3e:1a:94:84:cf:51:00:d2:18:
f9:84:4a:8b:29:ff:9d:c9:63:09:63:58:df:f0:e3:a6:fe:7b:
78:5b:63:3f:79:f0:c9:dc:b2:b6:9c:6c:42:bd:6f:74:ea:82:
06:ba:30:a2:d3:43:8b:7d:b8:ad:1e:7d:fb:8f:61:16:6b:21:
6a:49:48:0b:75:8e:22:45:00:69:fc:89:40:0e:5a:48:87:d8:
cc:91:73:58:27:a1:b9:e7:f4:e0:90:22:3c:a8:7c:03:7f:ef:
53:b4:bf:c7:32:dd:87:d3:ab:f2:cb:62:92:4d:bd:e1:6f:82:
c1:af:f1:17:4e:a6:36:18:24:4a:ce:03:0a:0d:c4:6d:c7:a2:
b6:f2:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:51:33 2025 by rpki-client