Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/BR7Kxw4uDHIJjtWZxBN3yY39MEc.roa
File: BR7Kxw4uDHIJjtWZxBN3yY39MEc.roa (raw, json)
Hash identifier: NNnpY2dCMdRRtPAK+Xc47po5O7wykSonQcaPlzT/ALM=
Subject key identifier: 05:1E:CA:C7:0E:2E:0C:72:09:8E:D5:99:C4:13:77:C9:8D:FD:30:47
Certificate issuer: /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Certificate serial: 019423D6E0674C7643F9957E3C9661D8F37C
Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/BR7Kxw4uDHIJjtWZxBN3yY39MEc.roa
Signing time: Wed 01 Jan 2025 21:47:52 +0000
ROA not before: Wed 01 Jan 2025 21:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12965
IP address blocks: 193.178.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e0:67:4c:76:43:f9:95:7e:3c:96:61:d8:f3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Validity
Not Before: Jan 1 21:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=051ecac70e2e0c72098ed599c41377c98dfd3047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:a7:1b:91:0c:eb:fe:5e:fc:c6:c9:40:2b:
15:d6:c2:fe:fb:39:d4:fc:de:5e:85:9d:5a:dd:d3:
f1:3c:ed:3a:07:3b:24:28:9a:db:48:3d:a0:25:b7:
e9:86:64:c9:78:98:71:ac:13:f3:36:7c:d0:97:ac:
56:4f:54:44:3c:a8:7b:2f:c0:7b:94:ac:e2:cc:98:
24:1f:e3:69:5e:11:50:a9:20:d1:51:16:26:83:ab:
9f:2c:12:69:46:8b:43:b7:9e:a4:c3:87:d5:03:83:
9a:81:9a:ae:61:e0:5c:c7:52:01:df:05:72:4f:42:
fd:5e:9f:a1:42:81:3f:44:8b:e7:33:84:cf:e8:02:
1b:91:1b:d1:9b:89:40:0f:65:b7:91:ff:03:72:64:
df:a2:d2:92:8b:7d:a5:94:98:34:83:bf:9c:89:f1:
83:a5:77:56:75:97:8e:be:29:ed:50:94:2c:da:a4:
f5:0f:3c:3a:dc:2e:cd:34:0e:35:53:9c:41:53:f8:
1a:30:23:29:de:e7:71:b7:27:c2:21:dc:5a:6d:d7:
e2:79:a6:de:4c:67:20:70:86:46:ec:5e:42:23:38:
55:a3:c3:8d:f2:6b:b4:28:23:de:bd:27:5c:05:a1:
73:5c:78:4f:ca:71:2a:a0:c3:53:9c:92:29:68:7a:
d2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1E:CA:C7:0E:2E:0C:72:09:8E:D5:99:C4:13:77:C9:8D:FD:30:47
X509v3 Authority Key Identifier:
keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/BR7Kxw4uDHIJjtWZxBN3yY39MEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.150.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:61:5c:e9:dd:80:20:97:0b:42:8f:ed:63:40:a7:52:e5:f8:
52:f6:c1:94:19:9a:ea:60:78:28:2a:9e:5c:2b:bf:21:89:ea:
fc:e0:ef:56:d9:f3:9b:82:2f:9e:8f:5a:c9:83:62:93:ae:be:
0c:e4:aa:a4:f7:67:8e:c1:bb:32:e4:a5:09:17:a3:b5:dd:a3:
0b:26:10:80:e8:9b:cd:55:fc:08:97:30:0d:9c:14:5f:3e:9b:
9a:a2:b4:fc:95:d1:54:0e:54:f7:fc:3d:f4:eb:0a:12:27:91:
79:85:d7:15:57:23:68:11:46:7d:8c:76:8b:b8:5a:ed:51:25:
0b:3b:bd:91:93:7c:e3:0a:83:12:24:d7:60:03:3a:b8:42:1d:
05:17:06:db:be:25:30:ea:25:09:e9:07:af:67:59:83:08:49:
98:29:63:bf:d1:49:51:7d:22:b4:5c:f0:b4:6f:97:70:03:6c:
4d:83:04:13:50:8a:16:e5:3b:5d:2f:40:b5:80:30:38:4f:25:
96:a3:f0:47:bb:ff:59:48:24:50:4f:20:99:87:97:27:f9:e3:
4a:5d:39:44:be:7e:f9:1b:d5:0c:a3:db:e8:de:f1:bc:ab:03:
53:5e:26:8f:61:5f:95:5f:5b:d2:68:3d:51:2b:ea:eb:65:4a:
fa:97:da:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:58 2025 by rpki-client