Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/aAOgx1Ep0O9ts33PDFAvITsVd3A.roa
File: aAOgx1Ep0O9ts33PDFAvITsVd3A.roa (raw, json)
Hash identifier: ztOFWm+dTJZa1671YtrvwaHCfWHjo8X63L1Exz6NaMI=
Subject key identifier: 68:03:A0:C7:51:29:D0:EF:6D:B3:7D:CF:0C:50:2F:21:3B:15:77:70
Certificate issuer: /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Certificate serial: 0194221FF3418D9B3118A8D65ACE14566DC3
Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/aAOgx1Ep0O9ts33PDFAvITsVd3A.roa
Signing time: Wed 01 Jan 2025 13:48:26 +0000
ROA not before: Wed 01 Jan 2025 13:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 192.124.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f3:41:8d:9b:31:18:a8:d6:5a:ce:14:56:6d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Validity
Not Before: Jan 1 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6803a0c75129d0ef6db37dcf0c502f213b157770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:73:4b:da:a1:8a:54:82:31:21:56:47:de:99:
87:ec:9d:66:ac:66:74:fd:bc:50:b6:0a:a1:25:d3:
4c:98:6a:ea:32:2c:06:86:ff:f5:33:c1:f2:b5:78:
df:a2:6a:19:cd:91:0d:fa:30:19:ec:8b:96:ea:ea:
77:e7:7a:61:51:2f:ef:ca:2d:13:8d:d6:0d:df:57:
3d:37:cb:e3:d0:17:a4:51:c5:c4:4b:69:79:89:77:
4b:cc:78:b6:0d:d3:a9:33:c5:34:fc:f9:64:c9:8e:
5d:f6:5b:99:84:93:2f:d4:85:1b:42:6e:57:2d:96:
16:e3:08:37:d8:b3:c6:92:4d:e1:dd:37:cb:78:5c:
d9:8d:e2:44:f7:55:4d:22:59:a9:78:fc:27:3e:e9:
c3:27:c1:bf:b6:64:b7:b4:9e:98:c7:c5:5d:0f:60:
45:47:bb:6e:b0:a7:6d:e9:6d:de:89:ef:9f:ec:5b:
51:30:2c:fe:4c:9f:9e:0c:ff:1f:7b:dc:66:81:61:
ad:1c:95:c6:16:37:12:3b:0a:25:1d:d3:af:60:3d:
36:6b:0f:77:41:7d:05:a2:d1:8a:b4:aa:bf:4e:6a:
7c:1c:c2:8b:68:13:54:d1:03:5c:05:44:57:bd:47:
83:48:d2:b5:6c:ac:cf:56:d4:b6:cf:30:31:89:41:
0d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:03:A0:C7:51:29:D0:EF:6D:B3:7D:CF:0C:50:2F:21:3B:15:77:70
X509v3 Authority Key Identifier:
keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/aAOgx1Ep0O9ts33PDFAvITsVd3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.254.0/24
Signature Algorithm: sha256WithRSAEncryption
15:64:c5:a8:55:af:5e:ac:b5:03:f4:82:74:aa:af:98:fd:f0:
ff:cd:aa:c5:7d:f0:da:ec:2b:43:61:9c:69:dc:f6:72:b3:c3:
69:0c:82:ce:00:3a:ef:2f:cc:ab:51:26:2e:c4:85:62:a6:d5:
c3:6b:6c:a9:27:47:ac:85:ab:df:d3:e1:33:f6:e5:75:1a:80:
c0:2d:54:b7:56:07:90:68:da:c8:37:f8:79:c7:84:ae:c0:41:
49:49:2d:a1:e3:b3:dc:26:5d:f4:7e:b2:04:c9:1a:8e:1d:3a:
09:98:fc:70:e2:d0:10:26:b3:4c:c6:7c:a2:6c:56:c1:68:c4:
4e:a7:8c:5c:21:11:c2:93:7f:7d:fc:ad:ac:19:76:00:d1:bd:
45:b2:21:6f:75:8c:0b:0f:42:0c:a5:79:a9:80:f5:3a:6f:e5:
8d:f0:5e:d3:38:38:ba:24:92:f7:40:b3:46:4a:34:c8:83:d2:
84:b2:ad:cc:7e:cb:cb:27:63:fd:96:24:23:eb:fb:61:f9:f7:
06:ad:30:d7:71:c6:bb:c5:1e:a8:64:16:2c:41:15:f4:c1:21:
a5:96:0c:a4:05:bc:b4:8d:b2:61:dc:58:f0:bf:9c:c5:29:d9:
88:04:79:96:58:5f:f6:e4:52:52:69:2f:4b:76:8e:d3:55:6c:
14:ec:72:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:20:01 2025 by rpki-client