Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/xpUZ10Vu1qa-MopSRwLh2bfxYj8.roa
File: xpUZ10Vu1qa-MopSRwLh2bfxYj8.roa (raw, json)
Hash identifier: NYjloxspB8LHVTP8CX0ABP6kH8QfTSSMPoocxQ4vWls=
Subject key identifier: C6:95:19:D7:45:6E:D6:A6:BE:32:8A:52:47:02:E1:D9:B7:F1:62:3F
Certificate issuer: /CN=b092425ab7d66bab711fbaa22757377807834159
Certificate serial: 019422FC1ED64046488C2FF8E3E808EA05AB
Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/xpUZ10Vu1qa-MopSRwLh2bfxYj8.roa
Signing time: Wed 01 Jan 2025 17:48:55 +0000
ROA not before: Wed 01 Jan 2025 17:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44410
IP address blocks: 193.3.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1e:d6:40:46:48:8c:2f:f8:e3:e8:08:ea:05:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b092425ab7d66bab711fbaa22757377807834159
Validity
Not Before: Jan 1 17:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c69519d7456ed6a6be328a524702e1d9b7f1623f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:1c:78:0b:af:a5:bc:c7:e4:4f:9c:f5:b0:
ba:d7:11:e8:5e:0c:bf:51:13:60:ca:d9:5f:20:07:
02:ee:4d:04:59:09:73:ae:6f:66:6c:fa:24:04:32:
a1:80:2b:a5:c6:93:ed:b1:f3:09:8f:71:c0:40:ae:
95:2f:df:f4:77:40:18:2c:af:5f:d1:7a:ed:16:20:
a9:c5:d4:0a:d2:63:04:53:5f:2d:a4:75:2e:f2:c9:
30:8b:aa:74:82:cd:22:6e:01:02:a5:43:87:00:08:
61:43:56:a0:c9:21:30:37:11:48:b1:67:d7:46:4c:
09:f3:e1:7b:8c:90:28:0c:5c:f3:da:70:13:a1:03:
d2:33:57:88:d3:9e:62:32:8a:43:27:39:70:17:33:
2a:84:25:f6:96:1b:56:91:6f:dd:53:cb:87:df:31:
8d:5c:98:9f:05:e7:87:e6:90:91:b9:36:2d:c1:74:
4a:5e:18:ad:7a:5b:d4:39:a4:ef:d9:9d:b0:aa:a7:
91:89:c4:78:be:0f:f1:d3:c5:c9:0b:33:cd:0c:df:
32:a7:82:f7:c5:01:ad:cc:44:5b:ff:6c:99:e7:38:
0e:88:11:cb:cb:46:e6:56:17:c7:dd:d3:22:be:cb:
9f:15:7a:d6:50:8d:31:8b:39:60:f8:29:fc:d5:8c:
3e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:95:19:D7:45:6E:D6:A6:BE:32:8A:52:47:02:E1:D9:B7:F1:62:3F
X509v3 Authority Key Identifier:
keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/xpUZ10Vu1qa-MopSRwLh2bfxYj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.255.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a2:2e:23:c3:94:c1:44:51:9c:1c:76:96:d1:d6:be:5b:a0:
c1:bf:7d:08:f9:8a:15:48:62:84:dd:53:6f:f5:f7:4b:32:24:
9c:4a:5a:86:43:c1:77:6c:34:6a:c2:17:73:c1:0e:ab:e9:de:
f3:46:e7:36:29:9e:df:ef:c0:53:68:37:63:6d:d8:c9:23:ed:
83:6a:24:5a:d3:14:f5:f7:f1:3c:ec:ae:6e:ae:28:b2:1d:07:
66:e8:4b:67:46:b8:fe:4d:c9:f3:85:7c:7c:24:a7:24:3a:87:
36:c6:3b:73:7a:54:84:1e:a0:e8:3b:6a:1c:1c:85:54:7e:fd:
ec:5a:c6:c3:d3:eb:b3:c0:fc:8c:e0:70:7a:3c:f1:48:0b:71:
d7:47:2f:a1:52:b2:f9:38:af:06:8b:e5:dd:d4:b0:88:99:92:
c2:f5:ef:0f:63:f0:e0:67:49:32:44:2c:f8:29:4b:5c:d5:aa:
3c:52:15:ea:e5:b7:41:d5:3b:c1:45:d9:ed:e3:09:d4:5e:bb:
34:30:e2:8f:1b:6b:f6:d4:40:5f:c5:4a:fc:83:cf:3a:79:79:
a8:6d:92:ab:49:71:39:df:83:65:fe:e0:65:98:37:4a:cd:ec:
a0:0b:9d:8e:09:dd:7f:92:43:49:31:35:4f:27:76:12:50:3b:
d6:aa:c7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:01:33 2025 by rpki-client