Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/pSmbhIOz_v9DcZ6BjkBTv88tPZ4.roa
File: pSmbhIOz_v9DcZ6BjkBTv88tPZ4.roa (raw, json)
Hash identifier: 1vOAxGM5C9HFgFv3tm1lOiYWc4bRDbFQtmaO7PV8kkc=
Subject key identifier: A5:29:9B:84:83:B3:FE:FF:43:71:9E:81:8E:40:53:BF:CF:2D:3D:9E
Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial: 01942747BA8222824B306FF0329C28860030
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/pSmbhIOz_v9DcZ6BjkBTv88tPZ4.roa
Signing time: Thu 02 Jan 2025 13:49:59 +0000
ROA not before: Thu 02 Jan 2025 13:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34022
IP address blocks: 193.17.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ba:82:22:82:4b:30:6f:f0:32:9c:28:86:00:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Validity
Not Before: Jan 2 13:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5299b8483b3feff43719e818e4053bfcf2d3d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c2:6f:9c:ca:ba:78:80:b3:b6:d9:26:9c:49:
ef:5f:ca:44:d2:c5:23:da:23:50:b8:02:e8:b8:c9:
6a:58:e9:a0:9e:d7:68:ed:5a:e9:6a:fb:b6:9f:10:
26:26:b8:6c:95:66:d9:de:77:f1:19:d5:0e:e0:9e:
c1:33:49:0a:6b:c9:68:1b:96:c0:9c:85:65:22:7d:
73:bf:01:af:d8:39:63:1b:0d:47:ae:72:92:0b:7d:
5c:88:3a:a3:58:dc:7d:13:e6:3b:33:8d:1e:4f:e9:
54:86:c7:e8:ef:6c:81:f5:4e:2f:7b:b3:1f:5a:a0:
62:ce:36:87:06:96:6a:66:4f:12:cd:5e:77:a1:2a:
a3:09:a3:3b:65:2f:91:d8:38:60:65:52:3d:1d:1f:
7d:f8:c8:3d:ff:d1:4c:70:6c:a9:e5:c3:d6:ee:70:
c0:ec:ab:fc:81:cc:a0:5c:60:07:d1:7a:e0:77:a1:
35:c4:bf:04:79:31:5f:47:12:dd:9a:fa:59:92:e2:
6c:b4:f3:5f:35:fc:20:20:e5:cc:17:56:84:4b:f5:
0a:4f:5d:88:8f:82:94:87:c1:24:83:49:38:dc:1f:
7f:c0:4d:50:dc:71:24:73:41:ea:11:dc:ba:1a:48:
91:60:df:ac:87:42:bb:77:0b:30:c1:39:b7:9a:8d:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:29:9B:84:83:B3:FE:FF:43:71:9E:81:8E:40:53:BF:CF:2D:3D:9E
X509v3 Authority Key Identifier:
keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/pSmbhIOz_v9DcZ6BjkBTv88tPZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.195.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c0:65:88:4f:bf:fd:84:d6:b5:c4:17:b4:7b:5c:23:65:f9:
b1:09:9c:ab:04:ca:a2:46:da:05:65:97:83:9a:17:ef:15:71:
71:54:49:6b:93:d6:47:ef:07:27:85:6d:04:73:45:3a:f8:a8:
e7:de:25:36:63:a2:4d:a1:09:cd:34:f8:8a:b5:ba:1a:41:b9:
a7:6c:21:54:49:8d:7c:4e:da:44:02:98:2f:ca:88:8d:09:d5:
11:ad:97:57:12:4f:ed:66:df:42:fa:d2:0e:62:83:f3:99:52:
86:7b:d5:bd:33:ee:fd:3b:0c:50:c6:45:32:ca:db:48:38:e0:
ee:93:bd:78:42:ca:0a:60:49:5e:4a:aa:10:ee:fd:3e:04:91:
9a:11:3d:de:83:aa:fa:06:2c:d2:65:08:e5:4a:da:8a:95:55:
9f:67:3b:2d:3d:28:66:c2:28:2a:7b:73:4c:b3:9d:3a:09:b4:
b1:08:b7:1a:af:d1:6a:00:29:e8:25:6f:f9:0d:69:0e:03:f0:
17:0e:e3:6a:c3:7a:4c:c6:0a:36:d8:42:29:02:1d:da:1f:89:
8e:ae:18:4d:ed:73:c5:5e:91:68:be:86:43:4c:6b:e9:37:16:
e4:e6:2e:dd:c8:d9:b3:01:c7:66:e5:06:ad:f0:fc:fa:7a:f0:
85:d4:eb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:05:00 2025 by rpki-client