Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/gBy9cD3j_tP--kqjiHxj-BEz2w8.roa
File: gBy9cD3j_tP--kqjiHxj-BEz2w8.roa (raw, json)
Hash identifier: GWls9v+X93Qb6tijazZ0OBt3/3oq/+caZQ2/zTy7cZA=
Subject key identifier: 80:1C:BD:70:3D:E3:FE:D3:FE:FA:4A:A3:88:7C:63:F8:11:33:DB:0F
Certificate issuer: /CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
Certificate serial: 0194221FEB7FDC3521F93C8A7FF9E48699AC
Authority key identifier: 85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/gBy9cD3j_tP--kqjiHxj-BEz2w8.roa
Signing time: Wed 01 Jan 2025 13:48:24 +0000
ROA not before: Wed 01 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216453
IP address blocks: 193.7.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:eb:7f:dc:35:21:f9:3c:8a:7f:f9:e4:86:99:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
Validity
Not Before: Jan 1 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=801cbd703de3fed3fefa4aa3887c63f81133db0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:5b:8a:42:e0:5b:32:53:1b:10:80:3f:ec:
30:e2:e3:f9:93:35:de:59:5a:f3:b9:86:a9:36:06:
a1:90:1a:b5:ce:43:55:d4:80:a1:db:89:03:24:19:
3d:0d:97:4b:1f:1e:61:18:90:f2:5c:53:bd:67:2c:
f2:62:1f:be:66:6e:17:30:98:ff:62:e5:ae:75:e6:
ec:7b:b5:f2:4d:2e:a4:a5:00:db:6c:68:72:94:99:
a6:d4:55:8e:a8:a2:08:0f:7b:c4:d0:b3:09:0b:8a:
c2:40:75:18:2b:41:00:7a:e7:1e:8d:0c:07:95:98:
b0:42:ff:ee:6c:fd:35:ed:8e:eb:cb:a2:cd:ba:d1:
06:f3:24:01:fe:88:07:41:57:88:46:4b:8b:92:ae:
45:ef:7f:2b:f8:cd:61:22:94:36:1b:da:f2:75:71:
5d:34:10:73:80:9a:ed:b6:32:69:29:39:e5:6d:5b:
72:b7:d6:01:f2:1a:e9:8b:83:ef:03:6d:f2:ed:1b:
12:92:2c:ab:15:3f:6e:93:71:b9:b0:4f:00:34:c4:
26:a1:a8:77:56:38:fb:4e:be:97:a2:d5:3d:90:89:
32:89:f2:b5:e7:c3:26:74:cc:bb:85:13:da:5f:86:
4d:48:fb:d4:74:9b:d6:68:07:06:fb:42:e8:e3:6f:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1C:BD:70:3D:E3:FE:D3:FE:FA:4A:A3:88:7C:63:F8:11:33:DB:0F
X509v3 Authority Key Identifier:
keyid:85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/gBy9cD3j_tP--kqjiHxj-BEz2w8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.7.209.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f7:85:3a:c5:0e:83:ea:7c:c9:58:1d:69:eb:87:9d:c7:0c:
d6:6a:4a:5e:02:15:5c:20:61:02:f2:1d:49:ed:53:b3:25:65:
3f:8c:79:e9:7c:46:55:29:60:bb:f8:46:3a:68:81:29:df:5d:
2e:84:52:4d:72:54:27:c8:b5:29:8b:2e:02:df:38:29:04:1b:
85:3a:25:1f:64:c5:46:8e:57:7d:44:d6:b4:4a:61:87:5d:df:
e6:b0:8b:8a:68:89:38:aa:c3:c6:21:3d:87:43:2d:7f:f2:d1:
a4:e3:3c:3c:8c:d6:cd:01:53:52:ca:cc:6d:3e:44:f1:21:d6:
3b:65:78:31:09:7f:25:86:9d:83:fa:88:19:2b:47:c7:79:80:
67:96:cf:9d:34:af:cf:a8:71:4b:23:c7:16:a4:08:32:c8:d9:
45:c3:13:b0:92:fd:16:e4:25:71:8b:26:33:50:7e:7d:7e:57:
02:0c:b7:a8:99:42:de:13:10:63:19:f0:70:7e:5f:d9:79:b2:
04:40:52:aa:e0:6c:d4:32:a4:df:ab:ee:ec:7e:9e:d0:53:8b:
c7:4b:99:cb:db:71:30:85:99:93:df:31:4a:1f:6b:dd:66:fd:
85:87:11:ea:c6:52:2e:57:a8:c7:e5:6f:63:45:6a:60:15:87:
b7:b7:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:58:17 2025 by rpki-client