Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/0Xw-5taoVNUPecPoG5bobjuIIc0.roa
File: 0Xw-5taoVNUPecPoG5bobjuIIc0.roa (raw, json)
Hash identifier: +uWkqdxHbLpuSBqT73af2/Y6rs7b1vl0IQ82rcCeayY=
Subject key identifier: D1:7C:3E:E6:D6:A8:54:D5:0F:79:C3:E8:1B:96:E8:6E:3B:88:21:CD
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 0194228DA8F42C797E50C6EBDD31CC549596
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/0Xw-5taoVNUPecPoG5bobjuIIc0.roa
Signing time: Wed 01 Jan 2025 15:48:16 +0000
ROA not before: Wed 01 Jan 2025 15:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1234
IP address blocks: 193.110.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a8:f4:2c:79:7e:50:c6:eb:dd:31:cc:54:95:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Jan 1 15:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d17c3ee6d6a854d50f79c3e81b96e86e3b8821cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c7:ad:11:17:02:ba:61:cf:cb:3c:e1:43:d6:
53:55:25:6d:23:13:b4:65:e2:4f:50:bd:4c:8d:f1:
38:17:8e:67:2d:80:d9:80:d2:f1:1f:ce:fb:39:e2:
18:fd:db:52:6d:d3:ec:79:6a:84:dd:b1:30:72:05:
5f:fc:b7:35:d8:51:62:9e:d2:82:2c:0d:aa:97:21:
85:f4:92:3f:7f:c5:c4:0f:cd:b3:be:f5:8d:50:66:
c5:86:3c:16:e1:4c:c7:ab:ab:98:d7:5a:02:53:7b:
88:e1:b0:5e:4b:d0:a2:8c:b5:3c:82:a9:25:5e:98:
e9:8a:9f:4b:54:26:28:d1:45:32:48:8a:be:28:bd:
e7:ad:4b:4a:f6:2f:2b:5d:e9:41:b9:e6:b6:9f:94:
36:29:80:d8:20:47:81:3d:a3:f3:af:06:53:e0:67:
9f:58:9f:5c:70:3e:f2:44:62:51:99:7c:e6:2a:89:
41:e5:78:5a:46:6f:b7:a9:6d:1c:e3:61:8c:ae:8d:
ba:25:b2:e5:51:93:81:f1:52:54:a9:83:82:e7:43:
cd:4c:17:6b:ab:b1:37:a0:1a:cf:cf:ea:b7:ce:99:
c5:46:79:9d:39:89:94:01:49:c0:a0:da:19:0e:59:
8d:11:79:c4:cd:d3:82:c4:aa:cf:26:e5:3d:f8:f1:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7C:3E:E6:D6:A8:54:D5:0F:79:C3:E8:1B:96:E8:6E:3B:88:21:CD
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/0Xw-5taoVNUPecPoG5bobjuIIc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.32.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:38:e9:29:3a:07:fa:bd:90:3a:2f:fb:7c:1d:21:c4:23:bc:
1b:3d:49:9e:c0:e3:86:c0:f7:37:59:1a:76:de:4d:30:b1:b4:
af:10:08:2b:54:39:6a:08:fe:c7:72:67:bd:b7:71:d9:0f:27:
d3:68:0f:b5:96:e0:61:2d:2a:c4:65:f9:f2:cd:d8:00:7f:ac:
5e:3c:c1:81:33:08:3e:0a:fa:b0:38:1a:6a:3e:a7:99:06:99:
00:93:4b:9f:3b:37:6d:73:88:ac:6a:a7:79:88:80:b0:bd:77:
b9:fe:df:fe:47:3b:65:0e:67:31:fc:df:fb:ac:8b:1d:15:b1:
c0:f3:fc:f0:84:84:23:c0:53:28:23:15:09:5e:d7:68:62:0a:
3a:61:b0:26:db:4a:de:ce:ac:8d:fe:b0:ca:5c:70:2a:b4:f6:
9b:ed:eb:04:97:04:30:fb:cc:f0:11:c0:6c:0c:24:72:d9:43:
12:3e:15:27:c0:46:2f:e7:06:16:22:eb:50:53:dd:91:b3:ee:
a4:dd:07:7c:6d:ee:23:25:ab:1d:b9:7c:19:c6:2e:ef:6d:28:
39:e5:a1:f3:69:25:76:88:14:8a:45:cb:48:bc:c0:dd:a4:2e:
7b:b9:75:37:d0:52:9c:db:8d:13:a8:3c:c0:06:db:10:e7:aa:
f1:c9:aa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:23:22 2025 by rpki-client