Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/59tRD3uqVaacfvjHXHYi92MaFhY.roa
File: 59tRD3uqVaacfvjHXHYi92MaFhY.roa (raw, json)
Hash identifier: ux9P4oihcogCzRuXGICOJuqp+Eh/j68654s9FrT8h3Q=
Subject key identifier: E7:DB:51:0F:7B:AA:55:A6:9C:7E:F8:C7:5C:76:22:F7:63:1A:16:16
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 019425FC62783A2A71F30C4DD1A3B4E1E58E
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/59tRD3uqVaacfvjHXHYi92MaFhY.roa
Signing time: Thu 02 Jan 2025 07:48:04 +0000
ROA not before: Thu 02 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39144
IP address blocks: 193.178.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:62:78:3a:2a:71:f3:0c:4d:d1:a3:b4:e1:e5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Jan 2 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7db510f7baa55a69c7ef8c75c7622f7631a1616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:20:22:02:b2:8d:0c:ee:65:7b:90:76:bf:29:
c6:ab:7a:77:0a:ff:07:ce:70:cf:89:45:c5:af:6c:
32:12:75:37:1c:8a:5e:43:46:4c:3c:1c:4d:10:54:
b5:c0:ee:e3:65:57:ec:7c:c3:0f:bf:66:c0:24:03:
83:f0:dd:56:d9:f6:c0:fa:42:60:98:28:48:d0:c3:
90:a8:7a:47:82:e6:04:30:4f:d9:2b:07:85:9d:28:
bc:dc:81:f5:0c:8b:93:8a:f3:05:61:33:5a:f7:6d:
e7:2a:2a:5e:c2:c6:83:4f:ac:65:75:17:88:82:67:
d6:ea:fa:36:0b:d1:f0:aa:13:89:09:b8:6c:9b:a5:
85:5e:9d:0f:d1:47:ef:37:0f:81:1e:a4:eb:07:18:
1c:6d:2b:92:b9:2f:9e:3f:7d:c4:0c:71:04:7d:10:
60:e1:27:46:94:7f:f5:cc:2e:cd:17:be:60:cf:26:
ed:19:bc:a8:7b:bc:26:d8:7b:cc:09:0a:09:02:01:
2b:43:fd:4e:b8:f8:93:93:e3:83:02:d1:58:ed:43:
e4:30:b2:bf:a4:8e:35:78:77:53:26:b9:a0:d7:e7:
8d:b9:ea:1b:65:e4:b5:af:dd:92:e6:34:f3:cf:04:
9e:f5:e5:46:c0:7a:c6:8d:f2:02:58:b7:d9:e8:01:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DB:51:0F:7B:AA:55:A6:9C:7E:F8:C7:5C:76:22:F7:63:1A:16:16
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/59tRD3uqVaacfvjHXHYi92MaFhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.33.0/24
Signature Algorithm: sha256WithRSAEncryption
13:6e:da:4e:6e:b0:54:09:4e:89:03:15:69:29:84:3a:fc:01:
0f:df:7d:fc:de:77:a4:4e:95:42:03:60:53:8c:f1:7f:c4:a5:
d8:fa:06:b0:5f:f7:12:82:d0:3d:ba:ab:2f:56:82:f2:02:83:
f9:b2:7f:b1:98:c3:7a:97:a9:1b:6b:02:42:4e:33:1d:d8:da:
71:8b:d7:e8:ce:6c:52:bd:82:40:7e:a1:80:df:02:70:41:4e:
8c:06:d0:0a:32:4f:b1:e8:67:04:2d:a0:a4:a4:06:7b:99:7e:
26:4e:7e:14:27:99:e0:3f:bb:e0:dd:3c:c3:c4:d2:39:dc:6e:
2d:01:23:ad:c5:3a:45:4f:75:8e:44:50:21:1e:a4:09:c1:2d:
f1:3b:c0:18:86:de:3b:fb:ea:36:23:13:bf:16:fc:75:e6:d0:
4a:33:be:0d:98:d7:d5:c2:95:07:83:bd:d0:94:57:86:bb:1b:
67:9e:35:93:b7:19:c7:b1:88:34:66:f2:40:d4:94:7b:27:5d:
64:7e:86:fe:6d:3e:5b:5e:9e:ef:17:cf:bf:3c:4f:03:ab:3a:
e6:6d:7e:78:97:5a:90:f2:68:5b:1a:fb:06:63:56:f1:2f:7d:
e5:cb:f5:fe:16:78:05:9f:30:46:61:56:e9:bf:6e:ff:68:cc:
e1:ad:2e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:16:19 2025 by rpki-client