Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/Da3O9NdT4lSei8Y7CvkDIaDpzJM.roa
File: Da3O9NdT4lSei8Y7CvkDIaDpzJM.roa (raw, json)
Hash identifier: hrePu0JTxNPu0+eBuJ/EjFtZTApZ3mGXZCXxWWMuor0=
Subject key identifier: 0D:AD:CE:F4:D7:53:E2:54:9E:8B:C6:3B:0A:F9:03:21:A0:E9:CC:93
Certificate issuer: /CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Certificate serial: 0194282604BA15319DFA378FDDF07A7DF896
Authority key identifier: A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/Da3O9NdT4lSei8Y7CvkDIaDpzJM.roa
Signing time: Thu 02 Jan 2025 17:52:47 +0000
ROA not before: Thu 02 Jan 2025 17:52:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59441
IP address blocks: 193.162.129.0/24 maxlen: 24
2a11:1dc0::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:04:ba:15:31:9d:fa:37:8f:dd:f0:7a:7d:f8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Validity
Not Before: Jan 2 17:52:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dadcef4d753e2549e8bc63b0af90321a0e9cc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:9c:3e:c7:c4:99:9e:eb:b8:84:81:17:89:
ef:51:b7:63:89:d3:91:83:09:76:e9:3d:b9:14:69:
e0:45:17:75:9b:c0:52:43:ce:52:66:dd:c0:f1:9f:
9c:46:b1:6b:0c:64:7c:53:95:9e:59:af:91:f6:e9:
36:36:1d:e3:e4:71:e6:cc:ce:4f:f9:93:1d:b6:ee:
25:9c:a7:f7:13:16:de:28:70:80:31:bd:83:77:9f:
37:5b:25:54:23:b4:d2:d6:dd:27:ac:c3:08:34:85:
2d:93:32:cb:e7:6c:47:75:f2:38:5c:61:28:d0:be:
15:e1:95:93:35:cb:c7:b5:96:ec:66:50:18:c5:63:
76:70:fc:61:ed:2c:72:d1:d9:5e:9a:6a:29:25:43:
a1:d0:35:04:64:7f:73:24:d6:bb:26:db:93:31:b6:
c7:d4:bd:0d:04:98:b7:c6:ef:94:88:ff:4e:e6:02:
8d:bf:33:6a:7d:bd:67:aa:2b:ca:41:cb:9f:66:55:
4e:a2:ab:1a:01:8b:cb:d0:03:6a:c8:39:7c:d3:b8:
4b:15:e5:b6:a5:0f:ab:22:cd:df:d5:f2:97:9b:57:
7d:81:e7:f8:90:67:46:24:06:69:d5:ed:ab:1e:28:
c6:7b:c1:fc:76:af:c0:9b:17:88:f9:42:0c:53:19:
60:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AD:CE:F4:D7:53:E2:54:9E:8B:C6:3B:0A:F9:03:21:A0:E9:CC:93
X509v3 Authority Key Identifier:
keyid:A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/Da3O9NdT4lSei8Y7CvkDIaDpzJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.129.0/24
IPv6:
2a11:1dc0::/29
Signature Algorithm: sha256WithRSAEncryption
94:56:58:3f:c9:06:2d:60:8f:94:90:6e:91:0c:b7:97:e9:70:
c2:95:31:f5:72:32:f0:f4:74:7f:ba:ba:5c:c6:e4:23:03:c3:
e4:22:cb:cc:83:83:39:64:67:a3:29:11:8b:15:59:3f:a2:e0:
6d:ab:c6:2e:32:a2:5a:95:93:cd:73:d2:70:2a:b0:c1:11:cb:
b6:94:dd:c2:ec:da:78:fa:25:2a:f6:d5:5c:27:c5:48:c8:1d:
9d:8f:39:e8:9f:b6:ea:f5:bf:14:e7:00:e2:9c:22:17:7a:05:
ba:2a:0c:70:95:63:72:e9:85:9d:b1:3c:6d:0b:89:96:ca:33:
d9:f5:2c:f8:c0:0d:66:ac:0b:d0:c9:95:c6:2e:a8:7f:2e:d4:
56:0f:2d:da:7c:0d:95:a0:7e:86:a6:29:07:f6:9e:9a:56:73:
f5:f5:eb:f6:db:68:3f:0c:5d:12:a9:73:86:66:a9:88:8f:51:
b1:5b:04:9d:67:ca:23:b5:81:55:c3:ca:2b:38:0e:40:8f:32:
9d:03:57:92:17:01:8c:9d:dd:86:e5:37:91:af:b5:61:8f:d1:
aa:a7:a1:36:fa:c2:1b:90:30:52:68:f8:de:79:61:e6:43:95:
d4:39:ce:ac:57:de:13:f7:ce:99:2b:7d:ce:5d:82:53:55:76:
91:e5:03:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:29:44 2025 by rpki-client