Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/0ISUdIwuZLNqVWNNfjNPjkkfb0A.roa
File: 0ISUdIwuZLNqVWNNfjNPjkkfb0A.roa (raw, json)
Hash identifier: X8YDNwD9PGK+IazmDttNRD5zMBvc8bSCuQ7N4xzf1ko=
Subject key identifier: D0:84:94:74:8C:2E:64:B3:6A:55:63:4D:7E:33:4F:8E:49:1F:6F:40
Certificate issuer: /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Certificate serial: 0194221FDC5DE1CAB1B86ECD9F045DD19FBB
Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/0ISUdIwuZLNqVWNNfjNPjkkfb0A.roa
Signing time: Wed 01 Jan 2025 13:48:20 +0000
ROA not before: Wed 01 Jan 2025 13:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31276
IP address blocks: 193.24.236.0/22 maxlen: 22
194.147.128.0/22 maxlen: 22
2a07:ea80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:dc:5d:e1:ca:b1:b8:6e:cd:9f:04:5d:d1:9f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Validity
Not Before: Jan 1 13:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d08494748c2e64b36a55634d7e334f8e491f6f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:c6:b3:12:ed:d7:ff:e4:23:63:ca:8e:b1:
eb:7e:a8:2a:f1:b6:f4:11:93:bf:08:f1:b0:86:62:
9a:dc:da:81:cd:3a:40:0b:35:ae:30:90:c1:ef:17:
4e:f7:1d:33:c4:ec:18:a3:58:c8:1a:4d:66:06:29:
89:16:2c:49:ad:af:06:6c:36:84:f0:f2:cb:b8:c4:
98:72:57:5f:40:e2:55:df:94:a7:c9:4a:b1:69:c5:
a8:4a:b8:46:95:ea:86:09:fb:35:62:8a:50:38:4a:
b6:55:83:46:20:1f:4a:80:fe:65:66:9a:5a:6c:f2:
0a:2e:9f:ae:6e:cd:5a:9e:79:e3:c8:de:25:b2:b2:
95:0c:8a:10:bb:37:50:9d:12:b5:b5:84:d8:60:28:
b7:00:bf:0f:7f:0b:19:cf:9b:a9:32:81:7e:fb:26:
08:47:98:31:cb:06:56:05:ef:0e:42:03:3d:fe:1d:
2b:39:f8:08:37:e1:21:26:39:7e:2f:30:69:d3:13:
fa:7d:5d:a5:4d:68:37:62:bd:18:52:51:96:bf:63:
6b:23:d7:3b:3a:72:bd:b7:81:67:c1:26:2d:13:a4:
5c:ad:fd:fa:e1:27:ef:37:80:98:7e:45:93:c6:31:
25:23:19:fc:e5:02:6b:05:f7:9d:1d:f2:97:4b:4b:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:84:94:74:8C:2E:64:B3:6A:55:63:4D:7E:33:4F:8E:49:1F:6F:40
X509v3 Authority Key Identifier:
keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/0ISUdIwuZLNqVWNNfjNPjkkfb0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.236.0/22
194.147.128.0/22
IPv6:
2a07:ea80::/29
Signature Algorithm: sha256WithRSAEncryption
30:f4:a3:07:68:6a:42:28:46:b0:37:61:ef:b5:84:d5:46:1d:
fc:e7:50:7d:7e:5e:e2:c8:a4:f9:3c:fd:21:94:2f:33:67:f4:
23:10:11:38:46:31:62:0c:ff:e3:23:8a:1c:4f:c0:15:4e:32:
91:ab:e9:c9:ae:c0:f5:88:95:21:08:55:f3:4f:87:05:46:5f:
37:a0:24:02:2b:53:04:d6:5a:7b:3b:0d:66:d9:f9:53:cd:d8:
8e:56:03:8b:a8:68:c9:15:47:48:37:61:3a:14:2c:53:17:8c:
ce:ef:e3:b1:f4:0b:6a:c1:c1:f4:f4:d1:b8:08:b9:84:21:06:
19:db:b0:bb:ad:06:9b:62:b1:1e:55:6c:49:cc:74:55:93:e3:
92:f6:d1:12:ea:5f:a5:0b:ea:ff:81:af:b9:35:73:e7:42:c5:
f2:55:60:18:cc:97:86:3e:a5:4b:15:27:44:42:fa:84:8d:e7:
f0:f2:6d:96:5e:fe:d7:54:72:43:18:9e:8a:c9:d4:a7:f6:29:
33:66:08:19:5e:98:96:d1:aa:6f:03:06:52:81:b4:84:0e:bd:
8a:ec:ab:71:d0:e9:f8:a8:66:c0:ff:ac:b0:1f:12:46:74:9a:
b8:bb:94:32:f0:bb:21:4e:91:9c:6f:8c:14:1b:31:15:a1:c3:
ed:0d:cd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:35 2025 by rpki-client