Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/ssRyWeDCXopCvGWiQY8ruW0oDiQ.roa
File: ssRyWeDCXopCvGWiQY8ruW0oDiQ.roa (raw, json)
Hash identifier: 2AZtRMi6nv+D2sxR4SnvHBIVqRBNOJ+vabvqkW1Wzsg=
Subject key identifier: B2:C4:72:59:E0:C2:5E:8A:42:BC:65:A2:41:8F:2B:B9:6D:28:0E:24
Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial: 01942369953CC8D8BD93BA7D93F30BB52257
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/ssRyWeDCXopCvGWiQY8ruW0oDiQ.roa
Signing time: Wed 01 Jan 2025 19:48:29 +0000
ROA not before: Wed 01 Jan 2025 19:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 193.100.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:95:3c:c8:d8:bd:93:ba:7d:93:f3:0b:b5:22:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
Validity
Not Before: Jan 1 19:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2c47259e0c25e8a42bc65a2418f2bb96d280e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:ef:cc:96:3b:3b:7e:8a:dd:49:4d:d2:95:
55:f1:ff:cb:62:87:42:ac:b6:b4:f3:60:78:63:93:
71:48:85:11:4f:42:18:8a:0f:b7:c8:7b:20:4d:64:
42:93:42:1e:2b:9d:5f:2a:8f:1d:5f:6e:ce:82:b7:
7a:d1:26:53:a9:6b:00:dd:8d:96:84:57:1c:ba:55:
38:da:c0:fa:97:55:80:06:1d:14:dd:4a:2e:7e:bd:
00:74:7f:41:a4:5c:19:15:26:b5:c6:70:71:90:24:
57:09:11:55:a8:f6:18:47:52:98:cb:a4:ed:4c:b9:
ea:34:35:b5:fd:31:58:88:4b:99:7c:de:f7:ef:d9:
eb:05:bf:b0:6e:95:f5:85:13:81:48:16:41:fe:0c:
07:9b:51:c3:59:75:63:f6:7d:b5:97:04:1e:9b:39:
02:70:1e:22:ea:aa:8c:e2:61:ef:09:ea:7b:ae:0e:
f3:56:87:f8:f4:ac:a1:fe:9a:4b:09:ca:d0:d4:95:
73:b5:53:93:7a:7d:e8:e0:bd:ff:db:5f:0a:51:24:
20:e4:00:be:84:9b:a6:15:b6:3c:bd:e2:7e:68:40:
1b:e0:6c:0d:26:a2:b6:00:36:bd:c5:d6:23:a4:b7:
79:63:1d:7d:1e:7d:e2:82:aa:a6:e2:86:01:68:3c:
52:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C4:72:59:E0:C2:5E:8A:42:BC:65:A2:41:8F:2B:B9:6D:28:0E:24
X509v3 Authority Key Identifier:
keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/ssRyWeDCXopCvGWiQY8ruW0oDiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.100.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:52:5e:a5:c3:26:a2:ab:ae:a7:3b:8a:da:2b:3c:da:41:3e:
3a:8f:f6:d5:ae:d1:0e:5c:a5:24:1a:48:75:59:7a:64:4b:59:
a0:70:1f:08:cc:65:65:f6:e3:52:30:ca:03:72:ce:c2:aa:9f:
20:b2:c9:cd:3c:26:f8:99:0d:5e:da:29:1f:e9:ad:93:4c:9e:
c0:a1:67:d9:8e:ae:db:65:8b:c5:36:6e:5e:1b:56:ba:48:d4:
4d:23:a2:04:bf:f7:2a:a4:39:6c:1f:f9:48:99:5f:9d:40:e6:
da:c1:76:77:2c:cb:78:f1:29:04:bc:9f:13:46:1a:96:02:a2:
f7:17:ab:a6:ec:5d:e2:96:77:0f:31:5d:1a:af:4c:bd:f2:10:
d4:18:81:70:01:78:b7:b0:df:2b:94:d6:57:d6:fa:84:1c:82:
83:51:c3:6a:5e:fd:3f:13:86:3d:ea:05:fa:55:ff:51:6b:c7:
09:7d:ed:99:d8:74:5b:b9:f0:b3:10:bd:bd:7b:ed:d2:f3:69:
23:7e:64:2f:db:b3:d0:ee:ea:98:b2:2c:d6:bc:1f:4f:79:31:
85:0c:0d:9f:17:e6:9c:b5:5f:9b:42:1c:78:86:a8:30:78:37:
ce:9c:b2:e6:7a:01:dc:57:92:ab:00:10:e7:c2:ac:3e:0f:c3:
de:55:54:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:14:27 2025 by rpki-client