Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/biaSUM0tsIeDyFwfaqfKhU0MJuI.roa
File: biaSUM0tsIeDyFwfaqfKhU0MJuI.roa (raw, json)
Hash identifier: 96WHWMwEvzPM4YoHMljlSa6xAvYqeckDM2XFH/UNGMM=
Subject key identifier: 6E:26:92:50:CD:2D:B0:87:83:C8:5C:1F:6A:A7:CA:85:4D:0C:26:E2
Certificate issuer: /CN=901f648dce927fe41833f86d575160b0bc5130a2
Certificate serial: 019422FBB157463FC3F97F0A0E7FD076EE79
Authority key identifier: 90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/biaSUM0tsIeDyFwfaqfKhU0MJuI.roa
Signing time: Wed 01 Jan 2025 17:48:27 +0000
ROA not before: Wed 01 Jan 2025 17:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210227
IP address blocks: 193.56.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b1:57:46:3f:c3:f9:7f:0a:0e:7f:d0:76:ee:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901f648dce927fe41833f86d575160b0bc5130a2
Validity
Not Before: Jan 1 17:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e269250cd2db08783c85c1f6aa7ca854d0c26e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:d3:35:7e:15:dd:be:58:6d:af:c0:01:f4:
81:f0:d5:a6:19:da:54:14:b1:cd:d9:4e:11:91:06:
c6:f4:5c:d5:6d:4b:24:ae:04:d7:e2:f8:09:9b:b4:
96:30:4f:7b:6f:23:f9:36:d5:0b:32:0e:92:71:28:
c2:54:ee:9d:c8:dc:9a:d1:11:07:b3:64:6e:3e:29:
85:a2:c4:c3:c2:9e:1d:f5:05:f2:ab:dd:73:59:24:
b8:c5:0e:2f:38:10:ad:94:a4:a2:29:d3:20:ab:0a:
d9:1e:9f:b7:90:3d:6b:34:5f:b2:a3:59:8b:27:99:
47:be:fc:d1:a3:ea:a7:c7:b9:ce:db:3b:85:84:12:
47:a5:f2:e0:59:f0:f8:ce:97:a8:e5:fb:7d:a4:7b:
e5:44:36:eb:30:3b:84:e3:ba:9c:43:76:ee:10:07:
75:b3:a6:61:e5:78:6c:13:e0:8c:74:00:83:e5:f4:
21:ad:7c:1a:dd:e2:20:b3:c9:19:41:ed:1a:fc:b9:
a7:59:3c:0f:0c:e8:b0:6c:88:17:63:34:b6:88:0c:
98:5a:be:10:f5:29:e3:e0:ca:27:46:15:f8:00:21:
19:94:ab:55:98:c6:a8:e9:e6:f9:a7:be:4d:ec:f1:
10:41:9d:7e:dc:a5:d9:03:74:49:41:21:8b:ec:55:
2e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:26:92:50:CD:2D:B0:87:83:C8:5C:1F:6A:A7:CA:85:4D:0C:26:E2
X509v3 Authority Key Identifier:
keyid:90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/biaSUM0tsIeDyFwfaqfKhU0MJuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.76.0/24
Signature Algorithm: sha256WithRSAEncryption
56:65:97:27:a3:ce:c2:43:0b:2b:5d:ff:8b:98:8a:90:0d:c7:
9a:3a:cc:77:aa:a5:65:02:c8:d0:26:b9:c9:74:33:9b:25:b4:
e3:d4:12:15:d0:0d:a0:52:21:84:b4:5b:12:9f:03:ca:2e:13:
12:07:23:15:28:dd:5c:76:cb:6f:41:ad:ec:e6:88:31:9f:37:
5a:51:1d:19:c4:12:3a:a7:02:4c:32:ed:5a:fc:5f:c3:03:30:
9e:77:85:f2:96:51:6d:61:6e:3d:9a:d6:f4:b7:a3:46:89:bf:
b6:2c:66:bd:bf:62:34:c2:1f:e8:c5:87:97:54:77:ea:f0:af:
25:94:cc:bc:d5:78:b2:4e:8c:12:b4:81:31:40:02:bd:c5:1a:
da:ec:83:49:4e:8e:4f:8f:5a:ab:23:d8:c1:d9:6b:40:30:ff:
ef:32:df:2c:71:8e:9d:4a:95:21:75:3c:3e:09:07:93:f1:f0:
bf:ef:3a:ba:c4:9b:68:51:34:07:42:eb:09:dd:4d:23:d6:a6:
e7:74:66:3d:78:f1:ac:14:a5:df:a0:eb:3c:3f:2f:d7:d0:0e:
b2:b9:60:a1:56:d6:68:41:61:95:fa:f2:2a:cf:b2:45:81:1f:
7d:3a:15:06:5b:9b:2c:f9:e3:12:6a:70:25:c3:37:33:52:1d:
8e:61:d5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:09:51 2025 by rpki-client