Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/Pdk1L9w3iAsdUTSgBaCMpP43Lfc.roa
File: Pdk1L9w3iAsdUTSgBaCMpP43Lfc.roa (raw, json)
Hash identifier: l+PHwAcEJ9+JdHW+J9w4HmPhehTBZx7nVK+BVTGzJcs=
Subject key identifier: 3D:D9:35:2F:DC:37:88:0B:1D:51:34:A0:05:A0:8C:A4:FE:37:2D:F7
Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial: 01942521832A56BCD5474BE9862DA519DB1E
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/Pdk1L9w3iAsdUTSgBaCMpP43Lfc.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197177
IP address blocks: 193.23.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:83:2a:56:bc:d5:47:4b:e9:86:2d:a5:19:db:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3dd9352fdc37880b1d5134a005a08ca4fe372df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:fb:ab:45:cb:7f:b0:82:b2:64:0b:53:b8:
50:b9:91:36:99:65:aa:52:fe:74:88:47:e2:c2:02:
19:c3:6a:a6:60:f1:32:f0:71:c2:11:da:8d:f5:24:
4c:d2:d7:0c:19:0f:b2:42:54:86:0e:c8:9a:a2:0b:
d8:06:4a:aa:6a:e3:82:a6:da:74:07:0f:51:2b:63:
e9:f2:b8:f5:af:f9:dd:6c:24:08:a6:3e:c1:e2:67:
0d:d2:71:f2:cc:4a:6f:78:b9:2b:71:66:fa:3b:50:
35:db:62:33:2c:b9:b5:a8:0f:d0:4f:ff:07:78:a6:
0c:16:a8:f4:ac:0d:12:cf:67:6a:53:7a:de:d3:01:
63:19:b2:6b:d0:f2:9b:fb:2b:df:05:5d:7f:3f:7f:
67:61:f8:d9:74:c0:6a:3b:2d:51:b3:da:9b:05:10:
74:e3:6f:13:f1:14:93:f9:2b:05:7b:cb:fa:0e:1c:
5e:41:cb:dc:b2:f5:92:08:b6:f3:59:f0:0e:2b:cb:
13:ff:9b:18:4b:30:89:22:c6:27:73:8c:4c:1b:81:
a2:33:cc:16:52:32:45:03:a9:1a:6e:d3:20:0e:8b:
d6:e5:60:b0:c9:40:bd:1a:59:cf:4b:81:9b:40:37:
0c:7e:75:80:5a:c6:4b:f7:af:61:49:94:0f:61:71:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D9:35:2F:DC:37:88:0B:1D:51:34:A0:05:A0:8C:A4:FE:37:2D:F7
X509v3 Authority Key Identifier:
keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/Pdk1L9w3iAsdUTSgBaCMpP43Lfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.227.0/24
Signature Algorithm: sha256WithRSAEncryption
86:fa:1d:e4:4b:69:a6:13:25:6b:9a:dc:fa:b3:d1:ef:ab:f5:
e9:38:84:3b:62:39:9c:65:97:68:29:6d:29:82:a7:52:3c:60:
b5:2d:25:8d:3e:00:39:8e:bc:3b:47:b1:32:06:a8:ea:a7:bc:
c0:af:c6:f3:00:61:61:f8:ec:26:d6:16:d7:ae:a1:e3:45:87:
a5:9e:7f:87:7d:65:4a:dd:5c:64:61:67:33:24:3e:ad:ec:a0:
1f:74:83:40:90:4e:b4:a1:a2:e6:5b:8a:dd:e3:4a:8c:06:c7:
77:f4:bf:a4:66:c0:0b:2b:7c:dc:33:1e:46:bd:30:51:68:c9:
e6:af:93:f0:f2:36:35:72:23:2d:79:65:4a:67:a7:5a:06:5d:
68:4f:a4:92:49:ff:86:81:fe:df:35:10:84:f8:48:a8:8e:37:
41:37:cf:2a:dd:42:3c:cd:63:ea:c3:33:37:55:5f:1a:02:13:
11:ee:5d:bc:cc:dc:e1:a5:e4:62:40:1f:6e:f9:bc:50:1e:41:
13:23:e3:69:07:11:18:81:f1:a6:25:9e:d1:0d:e4:9e:7c:34:
a6:d5:d7:b9:cd:db:51:7c:d2:28:62:08:21:66:d1:32:34:ae:
c3:ee:1d:a8:8d:c6:bf:41:a0:48:8f:0f:2c:52:f9:d8:27:28:
63:a7:6d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:44:11 2025 by rpki-client