Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/9Gc0nLgQOtGtRNM7UIaRIs_ONW8.roa
File: 9Gc0nLgQOtGtRNM7UIaRIs_ONW8.roa (raw, json)
Hash identifier: 7XUr33w/Uy5ddx5EoTNZGUbNED5TJtOlZQk+2e6Mxi8=
Subject key identifier: F4:67:34:9C:B8:10:3A:D1:AD:44:D3:3B:50:86:91:22:CF:CE:35:6F
Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Certificate serial: 019427481EA94E49A77DDED03CE34AFE8111
Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/9Gc0nLgQOtGtRNM7UIaRIs_ONW8.roa
Signing time: Thu 02 Jan 2025 13:50:25 +0000
ROA not before: Thu 02 Jan 2025 13:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15924
IP address blocks: 193.35.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1e:a9:4e:49:a7:7d:de:d0:3c:e3:4a:fe:81:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f467349cb8103ad1ad44d33b50869122cfce356f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:20:c3:88:33:e0:86:0d:94:4b:2b:87:cd:aa:
f9:6e:62:eb:c8:2d:d4:90:ec:73:bf:31:df:ac:18:
15:52:e4:e2:10:44:fa:92:fb:64:51:b5:0c:89:a4:
b8:7d:2e:37:e5:a5:ec:af:a9:99:ef:52:1d:16:de:
17:ea:ad:62:73:0f:e4:c5:4d:2c:58:44:0f:8e:d5:
0a:81:46:00:3c:f7:12:5c:f5:79:9b:3a:72:a9:bc:
c6:b7:bf:89:1e:08:db:2b:02:2e:e6:d4:ff:7a:80:
c2:35:2a:34:04:15:b0:8f:90:84:20:31:9a:6d:9b:
2a:2f:0c:66:b1:85:a8:63:68:69:ad:57:da:8e:bc:
e4:a2:69:ba:16:6a:ea:f3:0a:c6:7c:ce:28:26:cd:
10:e1:13:06:bd:c4:6d:d1:01:10:ab:b1:fe:52:f9:
d6:46:d5:33:ed:bf:bf:79:ca:25:4d:57:63:1b:77:
d6:a3:8d:a8:22:23:dc:11:e5:df:92:f2:0f:8b:c2:
3c:93:dc:c6:dc:8b:f1:18:e1:af:ed:b2:58:56:2e:
64:cf:bc:e4:66:d7:1d:9e:ae:b5:03:e4:3f:06:76:
4d:0c:90:15:81:55:19:ff:84:b1:1a:14:50:ad:ff:
9b:cf:1d:bf:bf:f2:a3:c8:c0:ce:b4:a8:e9:03:6e:
b3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:67:34:9C:B8:10:3A:D1:AD:44:D3:3B:50:86:91:22:CF:CE:35:6F
X509v3 Authority Key Identifier:
keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/9Gc0nLgQOtGtRNM7UIaRIs_ONW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.200.0/22
Signature Algorithm: sha256WithRSAEncryption
64:82:4d:8b:eb:c8:9d:c5:36:28:91:52:59:95:3c:5d:5f:40:
03:e7:a1:f5:b8:6e:ba:41:a3:2e:4e:23:e5:e3:ab:4e:34:2d:
90:1c:8a:4b:59:60:85:7f:8d:d1:fd:32:5c:a9:2a:60:d6:ec:
19:56:a7:06:06:86:f8:a0:5a:61:71:87:74:d8:d7:fd:cd:67:
c1:50:cc:b0:76:3f:9d:4e:70:48:61:cb:d0:e4:95:51:2c:47:
07:81:5b:3d:a6:9a:dc:98:4a:32:26:60:69:a3:f6:b2:69:41:
7d:7c:8e:ff:7f:d6:bf:4c:27:8b:a5:bb:55:d1:b2:91:a3:98:
e4:2c:80:93:e3:38:be:56:0c:48:f2:8d:75:03:a6:47:66:6b:
27:cb:06:bd:09:30:e6:49:a4:e6:a4:88:73:a2:6c:80:36:72:
f6:c0:3c:f8:8b:c3:f9:4a:25:bc:6e:7f:fb:3c:b3:25:b8:8c:
4e:2c:56:e7:55:d4:b0:58:cf:6c:50:66:0d:4d:4a:4d:d3:7b:
1d:6d:9d:98:0e:46:89:59:c9:df:e7:47:7d:7e:ca:d2:74:3b:
8d:a2:65:3f:a3:51:9c:25:a2:14:0a:63:b8:06:e6:23:b3:65:
3e:e4:89:9d:68:91:71:28:c5:01:21:e2:81:3a:6a:ff:ba:85:
6e:de:2f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:12:03 2025 by rpki-client