Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/RCxUccFlj404n0PDXIwSW9a1Qu8.roa
File: RCxUccFlj404n0PDXIwSW9a1Qu8.roa (raw, json)
Hash identifier: Q9ghLq/JOpXpWGcxR9wqNLzzbYm0DOwnIjt6pVt6/x4=
Subject key identifier: 44:2C:54:71:C1:65:8F:8D:38:9F:43:C3:5C:8C:12:5B:D6:B5:42:EF
Certificate issuer: /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Certificate serial: 019421B1E28FF9BC6563AB57B355A65EFE03
Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/RCxUccFlj404n0PDXIwSW9a1Qu8.roa
Signing time: Wed 01 Jan 2025 11:48:13 +0000
ROA not before: Wed 01 Jan 2025 11:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197882
IP address blocks: 193.47.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e2:8f:f9:bc:65:63:ab:57:b3:55:a6:5e:fe:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Validity
Not Before: Jan 1 11:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=442c5471c1658f8d389f43c35c8c125bd6b542ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:1c:f3:55:45:6e:d2:5d:8c:c0:14:38:a9:
35:5f:37:de:00:45:28:7d:99:a0:f7:84:74:55:71:
9f:2a:74:6e:9a:07:1b:bd:37:c8:51:3a:82:9b:7a:
d4:2d:d0:73:cf:b0:11:c1:76:b0:dc:ae:c4:f0:78:
86:f2:4b:26:2c:53:3d:88:17:f3:bb:48:d6:76:73:
f7:16:83:a7:02:2d:20:93:41:4b:60:a6:d0:19:f0:
52:64:8d:c8:18:fd:c3:da:2b:2f:fb:95:2e:3b:fb:
28:f9:92:92:80:7e:7f:74:9b:25:d9:a7:a5:3f:c3:
d1:58:4a:5e:e7:1b:06:66:47:58:eb:e1:0c:22:86:
ac:7b:36:a5:88:f6:f6:73:50:27:c2:73:76:7c:7f:
64:c9:d5:57:e9:af:b4:58:35:c9:f1:ba:38:de:27:
86:9b:1a:b1:c3:e4:e2:70:8b:1b:df:ca:24:27:d2:
95:63:5e:5b:9b:45:a9:f1:43:86:a0:64:05:a1:7f:
8d:5a:62:87:02:0e:da:ab:04:9a:06:71:b1:6a:85:
2b:f4:bd:02:f3:29:46:2f:61:19:5f:5f:4b:a7:7c:
ca:56:76:1e:03:b6:44:6f:28:2f:2c:48:b1:d5:66:
fa:f7:7c:9c:97:39:c2:3b:29:e4:9f:da:73:4d:a2:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2C:54:71:C1:65:8F:8D:38:9F:43:C3:5C:8C:12:5B:D6:B5:42:EF
X509v3 Authority Key Identifier:
keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/RCxUccFlj404n0PDXIwSW9a1Qu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.189.0/24
Signature Algorithm: sha256WithRSAEncryption
09:91:c0:66:ab:47:b2:50:a4:46:fc:18:30:64:5e:6a:c6:60:
16:b2:7b:98:b2:77:4e:95:f7:25:4d:51:4a:76:ec:d5:74:41:
8a:29:1b:fb:c8:86:cf:be:cc:33:ff:eb:e0:4b:c5:77:1d:6e:
b7:51:49:ab:a5:03:95:57:90:c1:cb:7d:90:19:d0:5f:b6:aa:
4f:b4:2a:7b:84:f7:35:60:09:5e:21:1a:64:8b:76:14:71:6e:
79:d1:b9:ba:51:dc:aa:48:c4:c2:c0:b6:ea:8c:ce:7e:62:96:
86:b1:77:d3:60:6d:68:ce:7a:69:52:0a:b1:a5:18:07:0a:a3:
06:2b:f7:0a:29:0f:be:26:71:e5:dd:82:61:5c:fd:3d:7a:17:
8c:96:a4:bb:f2:48:43:33:1d:90:35:a8:2d:70:4c:ce:88:93:
9a:74:8f:4b:b9:dc:e5:f8:68:ef:45:81:cf:1f:7c:75:2e:69:
3a:fc:2c:f0:eb:99:1b:89:52:56:85:57:62:62:77:64:21:ba:
29:b4:e0:ec:a6:3b:5c:17:6e:1c:9f:e3:b2:00:14:18:bd:05:
56:84:a4:eb:d5:af:ca:41:3d:55:35:6d:3a:c5:08:c6:cf:26:
13:09:b4:4d:f7:2b:d9:57:e1:4f:40:0a:78:13:90:2d:2a:22:
0b:88:5a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:24 2025 by rpki-client