Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/o0lO65ar-rW4jL4W8sebNaso080.roa
File: o0lO65ar-rW4jL4W8sebNaso080.roa (raw, json)
Hash identifier: WWdJYnb/d9BssaNMXrRC81WhzrjAYNXMX5FXKx6MRRM=
Subject key identifier: A3:49:4E:EB:96:AB:FA:B5:B8:8C:BE:16:F2:C7:9B:35:AB:28:D3:CD
Certificate issuer: /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Certificate serial: 019423D6DA72A057177BA70C8FA450A9CCF2
Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/o0lO65ar-rW4jL4W8sebNaso080.roa
Signing time: Wed 01 Jan 2025 21:47:50 +0000
ROA not before: Wed 01 Jan 2025 21:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34397
IP address blocks: 193.194.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:da:72:a0:57:17:7b:a7:0c:8f:a4:50:a9:cc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Validity
Not Before: Jan 1 21:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3494eeb96abfab5b88cbe16f2c79b35ab28d3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:26:ab:d7:78:d5:9e:82:d2:ee:e8:f2:85:
71:ec:d7:1f:9d:ec:8c:1c:24:2f:57:0f:a4:5a:05:
e9:8e:9c:b2:1c:0b:19:16:c9:4c:04:47:a3:d7:f5:
90:44:33:d7:51:4f:83:2b:a8:7d:dc:cd:60:ea:7f:
34:4c:33:05:2c:c7:9f:f8:c1:ae:26:55:6c:de:fe:
fe:fe:3a:12:d0:21:d5:d3:2d:45:14:fc:a9:54:1c:
47:ae:2a:22:4e:e6:7f:d6:3d:3a:00:74:9e:92:f0:
30:34:21:15:94:fa:e4:27:d9:09:0d:12:3b:fa:5f:
98:39:1f:b3:22:09:54:79:03:f9:08:f9:9c:9e:4c:
2e:d0:63:39:92:92:6b:71:a1:a8:21:2a:56:66:04:
3c:87:17:a2:9f:7f:9f:a6:4a:3c:9e:42:43:d5:f3:
a9:80:6d:15:34:3a:c2:0e:d1:8f:d6:a6:0c:09:95:
01:4b:3d:a2:f5:66:7c:25:7f:2f:6a:de:0c:2e:16:
b4:82:ea:b3:2e:b5:40:60:93:ff:43:8b:11:7f:8f:
73:8a:36:eb:62:c7:5d:30:30:84:e6:56:9e:36:f3:
3a:1d:2f:3e:f6:76:c0:4a:2c:1b:c4:b9:87:5e:aa:
4b:b2:cb:3c:73:4a:c3:16:97:ba:2b:fd:50:a9:58:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:49:4E:EB:96:AB:FA:B5:B8:8C:BE:16:F2:C7:9B:35:AB:28:D3:CD
X509v3 Authority Key Identifier:
keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/o0lO65ar-rW4jL4W8sebNaso080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.122.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e2:aa:fe:29:56:95:72:1c:08:e6:0e:24:73:82:2c:40:25:
cf:9c:70:90:7d:5c:c2:18:c2:d9:6c:43:2a:c8:53:51:a6:26:
73:3a:ea:62:79:86:bc:eb:f3:a4:50:77:da:3f:ff:92:43:74:
1b:88:4a:42:16:ba:8e:06:15:50:86:27:bd:12:30:56:bb:c0:
5f:9a:19:b0:04:ec:ac:11:a2:99:e4:fa:1b:ae:f6:5a:00:f6:
97:3d:5d:c4:53:67:29:f1:00:b1:7f:86:53:d1:62:eb:99:63:
e4:59:3f:e1:65:35:99:9a:00:53:25:33:19:ac:cc:dc:0c:2b:
50:00:5a:16:5b:86:ed:34:83:77:33:25:e5:e7:6d:5e:43:34:
db:40:4a:d8:b7:6a:91:5b:c7:cb:1a:e1:0e:03:67:f7:a9:c1:
ff:f7:ec:e8:b6:ea:52:00:a5:f1:c7:04:2a:21:6f:43:7a:32:
8f:68:ce:da:9e:8c:37:9f:9f:d5:f9:91:86:43:e9:a5:d6:3f:
6a:f8:68:a9:cf:23:e9:44:a5:a3:a3:11:06:01:85:ff:f9:f7:
c2:74:3b:f3:6e:bb:2b:a1:0c:34:85:6f:98:76:df:1c:92:cc:
b0:98:cb:ce:95:6b:9b:14:40:b8:12:2a:46:33:06:b9:75:cd:
68:d1:52:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:39:37 2025 by rpki-client