Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/B36LiC0OjqZ3wtH6qzPHL39SDVM.roa
File: B36LiC0OjqZ3wtH6qzPHL39SDVM.roa (raw, json)
Hash identifier: lC3icrS9H534ILHm12EWgHNj+HzhQRDu9zX1M9oOdqc=
Subject key identifier: 07:7E:8B:88:2D:0E:8E:A6:77:C2:D1:FA:AB:33:C7:2F:7F:52:0D:53
Certificate issuer: /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Certificate serial: 01942068177A5E942AA51195D3B432C14C74
Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/B36LiC0OjqZ3wtH6qzPHL39SDVM.roa
Signing time: Wed 01 Jan 2025 05:48:00 +0000
ROA not before: Wed 01 Jan 2025 05:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5406
IP address blocks: 193.53.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:17:7a:5e:94:2a:a5:11:95:d3:b4:32:c1:4c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Validity
Not Before: Jan 1 05:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=077e8b882d0e8ea677c2d1faab33c72f7f520d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:bb:12:e7:43:af:95:e9:77:d8:b3:3f:c8:
63:4e:8a:b8:a7:ca:e7:9c:85:e6:fc:e9:b0:6e:17:
b5:98:6e:dd:c1:df:5a:32:a3:45:16:90:42:de:b5:
6f:1a:2f:3d:a6:75:83:7d:68:c1:0b:b5:d1:1d:ec:
97:d5:f4:0e:20:4a:26:73:79:54:a0:ed:98:62:ed:
c6:b9:f7:7b:84:73:82:a2:6a:a4:ad:74:bc:37:bc:
b9:77:95:8b:a7:71:27:8e:94:7c:a3:35:c8:05:7e:
11:a9:a2:b9:73:d1:0a:99:b6:15:c0:be:32:06:c4:
9c:1f:14:a0:84:87:87:e8:39:3f:78:56:14:59:59:
4e:96:0b:4f:c2:16:da:6f:5a:74:3c:d9:8f:c4:e2:
e0:db:1c:96:c5:23:42:79:7b:42:4d:6c:67:f6:54:
1c:45:2f:d6:41:6a:ff:ea:e9:8d:aa:cf:9a:79:b3:
ca:0b:41:b9:14:ae:2e:48:59:67:93:48:0e:08:88:
9f:06:82:2a:d3:1e:15:8a:d1:40:29:54:a7:5d:71:
c4:d8:01:6f:a1:10:40:19:69:b8:e5:5f:7a:ce:8c:
a7:9c:6a:63:2a:47:30:4d:4e:58:30:2f:9a:4f:24:
05:8c:49:3f:9f:fc:8e:89:ba:e3:3d:70:43:e1:31:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7E:8B:88:2D:0E:8E:A6:77:C2:D1:FA:AB:33:C7:2F:7F:52:0D:53
X509v3 Authority Key Identifier:
keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/B36LiC0OjqZ3wtH6qzPHL39SDVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.125.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:ab:25:2c:e8:45:b0:e7:32:21:ef:67:35:c5:65:0d:7f:e1:
92:9e:6e:7a:fe:a0:d8:5a:cc:ac:47:3f:80:b5:12:61:68:e3:
a9:b0:9f:b3:97:96:a5:27:02:ea:4c:df:b0:9a:04:96:98:37:
17:36:59:bf:36:9b:ee:df:f5:97:10:95:1b:f7:a0:32:8a:6d:
e4:24:e4:3c:87:2a:4b:c7:1f:ff:1f:c8:1f:e1:67:0a:8a:78:
21:04:fc:06:83:12:45:10:19:54:ad:70:43:69:6d:d1:d7:e2:
34:ba:f8:aa:e7:32:80:f8:23:59:fb:51:45:bb:15:6c:fa:77:
f3:9c:98:d2:6c:bb:38:78:00:00:c1:b5:85:9a:01:b4:38:80:
de:96:3c:f2:5e:e8:bd:1e:1e:32:dd:cb:6d:ce:76:dc:b0:c3:
cb:84:db:47:90:9b:f7:49:2a:c0:43:cb:9f:92:0a:b6:98:27:
dc:7d:1f:39:ab:42:db:fd:e5:8c:f1:32:35:79:29:32:d0:a6:
b6:0a:7e:16:7d:87:9b:0a:7a:b4:47:af:67:a0:3e:a8:27:74:
b0:b0:26:ee:5f:55:dc:88:86:ba:ef:fe:2a:1c:20:47:6a:5a:
bd:c1:a9:b5:d3:2f:9d:a4:a3:95:79:d5:e6:90:92:a5:00:55:
20:60:c1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:46 2025 by rpki-client