Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/s_boRMsxilQWE8157RLOKzIWIJw.roa
File: s_boRMsxilQWE8157RLOKzIWIJw.roa (raw, json)
Hash identifier: VFxN5+gRgYJCBlCCrJNx1xL78Rg8kJ1C8LU6TrYm+VI=
Subject key identifier: B3:F6:E8:44:CB:31:8A:54:16:13:CD:79:ED:12:CE:2B:32:16:20:9C
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019424B29C89E681AD28C8CEBA2843E434BB
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/s_boRMsxilQWE8157RLOKzIWIJw.roa
Signing time: Thu 02 Jan 2025 01:47:52 +0000
ROA not before: Thu 02 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 213.18.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:9c:89:e6:81:ad:28:c8:ce:ba:28:43:e4:34:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jan 2 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3f6e844cb318a541613cd79ed12ce2b3216209c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:8a:d3:40:b2:89:36:e1:27:59:51:51:24:
22:af:ce:a3:f8:69:7c:05:2d:8c:03:c8:a7:34:d0:
e7:3d:50:60:b6:37:95:29:20:1f:70:9a:77:85:50:
63:68:66:72:b0:4a:d7:e9:cf:3f:e0:0f:bf:6d:ec:
e5:54:a4:ea:38:c4:aa:02:a0:4e:54:54:c0:07:41:
d6:ad:f0:47:cd:96:6b:6a:9c:6c:3b:06:f7:e3:45:
a7:fc:dd:b7:27:e5:68:26:97:87:65:56:21:ca:07:
dc:49:e1:e6:d3:1b:79:9f:32:73:74:e2:29:e4:39:
fa:d5:3e:18:46:af:8f:25:94:59:cf:bb:88:fd:3c:
91:3f:f2:3f:86:76:f9:ec:89:b4:9c:c1:91:4f:12:
b9:04:b7:f3:b9:22:35:c1:04:54:90:aa:cd:d0:c8:
b7:90:d6:a4:e5:eb:9c:97:f8:0e:a0:0a:dd:b6:3b:
76:c4:36:17:4f:d3:62:9f:07:89:d0:d4:84:f1:44:
ee:b1:9e:38:65:42:b0:66:2e:3e:1c:2f:8c:e3:30:
d2:12:d7:03:d9:22:ad:b2:b5:b4:53:fd:7b:88:7e:
c0:bc:84:6a:18:31:5a:1e:69:dc:0b:68:37:07:54:
3f:28:bf:f6:1c:89:6b:d0:03:34:60:16:cc:ba:c0:
c9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F6:E8:44:CB:31:8A:54:16:13:CD:79:ED:12:CE:2B:32:16:20:9C
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/s_boRMsxilQWE8157RLOKzIWIJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.192.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:8d:10:05:25:28:a9:3a:0b:d1:15:7e:d3:fa:d1:32:ad:9e:
43:3c:a0:a3:fe:49:5c:f2:64:26:af:36:cd:c5:55:9e:3f:c3:
21:96:6d:77:fe:4d:f3:42:c3:a4:5f:03:36:9b:f4:0b:71:f4:
47:6e:ab:66:78:f4:69:64:b3:51:78:57:e0:7c:60:57:2c:f0:
43:c5:53:84:5c:86:8f:aa:74:9d:bd:e5:63:cd:e7:3e:30:bd:
9c:a2:88:6d:11:29:fb:25:47:98:c5:58:cf:95:c7:79:27:89:
37:e1:ca:60:79:29:d1:f3:00:b5:c3:a6:d5:02:df:74:06:2a:
29:5e:ea:98:e5:91:0b:d3:8f:a8:4b:e0:39:53:22:75:96:7d:
fb:f8:68:e3:61:fd:41:e3:2b:a1:fc:a3:35:c8:f7:b0:16:21:
7a:38:0d:d7:62:62:11:7d:7c:5f:41:d8:9a:c6:0e:8c:b7:23:
f6:41:89:c0:43:4b:6f:3e:09:eb:83:52:ab:2c:f5:97:0e:2f:
89:4b:41:4b:58:6c:dc:11:3c:03:c1:7c:6e:72:85:23:bb:2f:
73:ac:57:92:af:17:3d:9e:39:22:fb:c2:01:a5:b0:33:08:df:
0b:cb:15:b7:95:30:36:c9:51:c1:23:49:a4:d2:ea:08:dc:a5:
6f:13:4b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:51:27 2025 by rpki-client