Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/x0_V_asfztSp2_6YK6MZt_fACYU.roa
File: x0_V_asfztSp2_6YK6MZt_fACYU.roa (raw, json)
Hash identifier: gFs60QtpFwMnh9KBA4cwsowTM45NdniGhBygLWcOD1Q=
Subject key identifier: C7:4F:D5:FD:AB:1F:CE:D4:A9:DB:FE:98:2B:A3:19:B7:F7:C0:09:85
Certificate issuer: /CN=9aac0da35100668060d30f173d6102e182d1b9ea
Certificate serial: 0194258F7D3EB92B49B0725AFB14A3DA7716
Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/x0_V_asfztSp2_6YK6MZt_fACYU.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43430
IP address blocks: 193.46.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7d:3e:b9:2b:49:b0:72:5a:fb:14:a3:da:77:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c74fd5fdab1fced4a9dbfe982ba319b7f7c00985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:39:b4:4f:16:26:79:ab:0d:7b:19:35:79:
e3:d6:6d:c8:1a:bf:f6:9d:2f:10:c2:ac:b4:20:a1:
83:da:f3:6c:03:1f:44:63:54:1a:be:36:a1:33:57:
2d:96:21:fc:18:86:0e:61:91:95:2a:6a:0b:55:75:
04:7a:77:8c:a9:bc:f8:cb:c7:e8:1a:d2:41:49:ed:
7b:1a:bb:27:f2:da:aa:8c:72:fe:71:f1:d5:bb:78:
fb:26:2f:4b:9d:f1:05:c5:dd:9d:9c:ca:32:9e:62:
01:c8:85:66:9f:7d:1c:ae:c8:10:21:e7:58:e8:28:
87:64:4c:3b:c5:ef:a9:4e:94:68:2d:6b:25:eb:4b:
f6:7f:28:0c:d7:fb:94:bd:19:32:fc:5b:e8:64:79:
a6:2a:79:45:7d:07:5c:7a:5d:eb:b2:97:36:21:eb:
fb:78:0a:4b:51:68:fd:75:d4:ab:fb:ca:b6:fa:72:
9c:1c:57:37:5a:f1:3b:ad:5c:c8:9e:ea:4d:f6:d7:
6e:b8:f0:3c:1d:74:3b:93:99:53:f0:e6:1f:cb:2a:
f6:09:95:ce:25:7e:8c:d1:2a:a5:a0:e3:b3:0d:3f:
f6:b7:ae:77:83:9a:61:87:50:56:06:85:5f:52:52:
9c:06:61:d3:c0:94:04:c8:0d:ba:3b:78:cf:1f:d3:
15:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4F:D5:FD:AB:1F:CE:D4:A9:DB:FE:98:2B:A3:19:B7:F7:C0:09:85
X509v3 Authority Key Identifier:
keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/x0_V_asfztSp2_6YK6MZt_fACYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.71.0/24
Signature Algorithm: sha256WithRSAEncryption
54:eb:0f:37:48:89:77:49:d3:e6:1d:50:0e:aa:a0:39:19:c2:
31:05:0b:f2:62:ca:e0:75:3c:64:fb:82:94:3a:38:e8:bf:ee:
e9:f6:1f:1f:1f:4a:7b:0c:aa:2b:c5:f6:88:e1:25:9b:e4:13:
c8:a3:69:db:dc:f0:67:dd:e2:63:a5:a7:d4:66:bb:df:2c:8a:
82:bf:43:72:a8:7d:7e:5c:01:28:90:28:d7:2e:c4:0f:98:0d:
ce:7c:b2:56:36:2c:59:e5:19:61:1e:25:12:a9:20:de:61:52:
fb:2d:f6:ce:87:34:6c:ba:70:53:0e:96:c3:c4:b8:d7:b2:74:
d0:8e:3d:ee:83:84:72:5d:6c:bf:73:e1:b2:7e:a1:45:f7:ba:
f1:8c:da:e7:2f:cf:65:79:fc:c6:8f:24:47:f7:3a:12:97:c2:
d7:8b:91:b4:a9:25:43:9c:ab:72:44:2e:fc:2c:76:f8:6d:4c:
5e:dc:6f:c5:59:42:41:ae:e8:ef:cb:53:6d:cc:6c:51:17:2e:
bf:96:9f:d1:4c:c9:9c:10:a1:31:63:fd:05:69:0b:9f:32:df:
eb:fc:7d:73:99:eb:62:43:c4:24:d3:99:8e:ad:1d:e5:dd:fd:
ae:b0:b4:86:78:fb:59:19:0e:66:8f:c1:5b:21:1a:4d:3c:71:
47:48:a6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:08:00 2025 by rpki-client