Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/1teQs2-Gqr9Ttken-kpobex52GM.roa
File: 1teQs2-Gqr9Ttken-kpobex52GM.roa (raw, json)
Hash identifier: JwKmhVt10f03COhT0AoYFXxwUVkj2YdwV7qznRh2SmM=
Subject key identifier: D6:D7:90:B3:6F:86:AA:BF:53:B6:47:A7:FA:4A:68:6D:EC:79:D8:63
Certificate issuer: /CN=0c10137944e887ad07569ed4d412846732d0af70
Certificate serial: 019427B54EC4448A39A09CCBE5AA0A201896
Authority key identifier: 0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/1teQs2-Gqr9Ttken-kpobex52GM.roa
Signing time: Thu 02 Jan 2025 15:49:41 +0000
ROA not before: Thu 02 Jan 2025 15:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9163
IP address blocks: 213.208.52.0/24 maxlen: 24
213.208.53.0/24 maxlen: 24
213.208.54.0/24 maxlen: 24
213.208.55.0/24 maxlen: 24
213.208.56.0/24 maxlen: 24
213.208.57.0/24 maxlen: 24
213.208.58.0/24 maxlen: 24
213.208.59.0/24 maxlen: 24
213.208.60.0/24 maxlen: 24
213.208.61.0/24 maxlen: 24
213.208.62.0/24 maxlen: 24
213.208.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:4e:c4:44:8a:39:a0:9c:cb:e5:aa:0a:20:18:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c10137944e887ad07569ed4d412846732d0af70
Validity
Not Before: Jan 2 15:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6d790b36f86aabf53b647a7fa4a686dec79d863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:96:e9:92:40:10:af:4f:3f:7d:35:bb:c8:
68:d6:52:4a:d6:be:65:d7:fa:0e:84:7c:2f:77:77:
0e:58:ae:fb:2d:09:c5:25:6c:c6:1b:d6:97:a0:cf:
ce:7f:ab:8f:8f:b8:71:2b:3d:84:b0:fa:72:bb:ef:
b6:83:5d:42:e5:21:76:45:62:3b:99:23:96:f0:6f:
7e:81:03:e9:bd:b7:86:78:b3:a5:9f:81:72:0d:b6:
47:b8:6e:67:6b:5b:dd:68:5a:3e:33:ea:fd:f0:09:
10:30:1b:8f:f2:da:55:6e:17:5f:29:ca:2b:06:b5:
63:da:3b:d8:21:7f:7e:f3:01:4b:d2:f8:b9:88:be:
cc:16:71:70:cb:5d:d7:a6:7f:08:1b:61:77:90:57:
7d:23:0a:1c:00:ab:34:c8:01:25:47:94:76:30:75:
21:7c:bd:18:3a:ad:fa:39:22:2f:77:5f:3a:00:e1:
b3:7a:18:56:5b:20:1f:b9:90:28:19:a5:37:72:bc:
2a:2c:b9:2c:c3:d8:bd:25:47:7c:9d:7a:7e:3f:c6:
a5:f8:bf:31:47:d1:47:d1:61:a3:55:64:5e:f9:03:
16:5e:a1:eb:b3:c9:8d:6e:80:bb:31:33:18:31:a2:
86:21:41:d0:25:0f:56:44:df:c6:88:5b:af:9c:df:
ad:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D7:90:B3:6F:86:AA:BF:53:B6:47:A7:FA:4A:68:6D:EC:79:D8:63
X509v3 Authority Key Identifier:
keyid:0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/1teQs2-Gqr9Ttken-kpobex52GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.208.52.0-213.208.63.255
Signature Algorithm: sha256WithRSAEncryption
96:42:7f:8f:b9:d7:b9:3d:24:d1:0d:b3:e2:88:02:28:f1:ee:
63:57:06:5a:bf:dc:05:f3:2d:7f:85:47:bc:d7:89:f6:d3:77:
e3:72:77:02:68:ce:06:1f:11:a7:6c:36:ca:9a:cb:dd:11:70:
95:b8:ca:b1:06:da:e1:29:da:e8:d6:e3:62:ca:c9:44:1e:44:
75:74:4b:b1:6f:f6:8f:2a:b4:3c:b9:15:c2:9f:7a:db:c3:5c:
b4:19:bd:96:0d:a4:68:ef:ac:8f:9d:92:90:0f:45:38:0c:fc:
73:aa:ee:02:17:71:1d:7c:f8:93:1d:17:7d:1a:90:7f:45:89:
2c:00:a0:3f:ee:1d:78:4e:57:36:4b:7c:6f:95:33:31:15:16:
1b:cf:bb:91:c3:e9:f6:31:d2:cc:c4:59:ab:82:e3:83:99:06:
0a:5d:89:f2:8e:24:6b:4b:12:1a:65:20:8f:3d:23:88:47:5b:
c6:20:09:95:3b:5c:c4:c8:cf:ec:cc:6a:34:40:36:b9:13:e5:
e0:76:5f:a4:53:51:91:2e:35:02:09:48:ab:0a:2d:c8:58:13:
72:bc:26:57:2b:7a:ac:67:fe:e0:56:5f:3a:fc:b5:cd:90:e1:
cc:e5:c1:0d:99:9d:ca:d0:99:82:f9:c8:10:ab:dd:b1:5a:8d:
b9:36:89:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:52:54 2025 by rpki-client