Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/tK6dqORitjCE9QSeqzn0Dd8QVZY.roa
File: tK6dqORitjCE9QSeqzn0Dd8QVZY.roa (raw, json)
Hash identifier: d9AZ6zPbtFV6hygn8HjICm+c22UNHE83e16IdW/3Zl4=
Subject key identifier: B4:AE:9D:A8:E4:62:B6:30:84:F5:04:9E:AB:39:F4:0D:DF:10:55:96
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 01942444C00A24835E89D2BEB9ED48F58D07
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/tK6dqORitjCE9QSeqzn0Dd8QVZY.roa
Signing time: Wed 01 Jan 2025 23:47:52 +0000
ROA not before: Wed 01 Jan 2025 23:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 193.57.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c0:0a:24:83:5e:89:d2:be:b9:ed:48:f5:8d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Jan 1 23:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4ae9da8e462b63084f5049eab39f40ddf105596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:8f:5b:5d:b9:f4:40:62:8a:77:dc:35:87:
27:51:01:52:8e:fb:dc:68:b3:7b:c8:4a:2c:26:28:
df:01:91:37:69:91:57:c5:eb:d8:9a:c9:0d:9d:3f:
17:f2:12:4e:29:f8:87:4c:3b:9f:cf:44:68:61:4f:
46:4a:e3:4c:a1:4a:1a:54:3e:b0:d3:2a:23:41:20:
20:53:d4:5c:91:32:3b:30:f9:60:dd:92:80:48:99:
c7:40:34:fa:76:50:18:c4:1b:4d:c3:a8:ad:f0:bb:
24:c2:43:1d:a6:e2:a5:16:18:a0:7a:96:ee:eb:25:
d1:90:9e:6a:88:23:7d:6b:b7:94:d9:0b:c4:d2:f5:
ae:f5:ef:ca:c0:f7:ec:93:19:ee:3a:56:fd:1d:fd:
63:25:c4:cc:8e:1b:d6:ee:19:3b:ca:68:d2:37:77:
23:57:ee:c8:27:1b:71:af:1c:8c:b8:03:e6:ed:88:
58:23:d7:a2:15:6c:83:93:22:60:a3:c0:08:8f:f3:
53:d1:e9:2b:9c:ce:0e:8d:95:cc:7a:d4:7b:b3:a4:
17:24:77:1c:1a:61:bd:f8:da:1c:71:21:61:9c:22:
99:c2:63:58:19:f0:3c:fc:fa:25:14:1d:04:5e:58:
47:2a:c2:0a:1b:cb:dc:11:86:7a:37:14:64:4c:b8:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AE:9D:A8:E4:62:B6:30:84:F5:04:9E:AB:39:F4:0D:DF:10:55:96
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/tK6dqORitjCE9QSeqzn0Dd8QVZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.105.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:be:44:63:6f:af:8b:00:b2:5a:1d:86:34:6d:6e:d6:5c:53:
ee:14:c8:1d:45:27:82:d9:77:a4:48:80:28:74:c4:e6:45:92:
47:00:1a:36:84:0a:bd:c7:66:99:8d:53:e7:a6:9d:9f:77:3d:
bd:0a:e7:12:22:ff:e0:d4:09:d6:19:62:c7:a1:0f:ac:4b:c8:
76:a0:39:48:af:75:d2:32:08:cf:f3:2a:2c:d5:77:02:e1:81:
8f:00:4a:bf:49:a3:84:89:de:44:5d:3b:ee:07:88:78:98:9f:
f6:84:78:31:1c:72:5b:7e:a6:90:c9:6a:69:ab:cc:67:51:a2:
3f:a1:8c:12:02:bd:5d:47:25:00:e0:30:96:80:aa:64:76:23:
4d:71:6e:40:dd:0b:6e:b2:4a:e3:9b:2d:f2:5b:f9:38:b4:f2:
fc:6d:6f:61:c0:b9:fe:82:c8:f1:1c:25:20:da:8f:11:3f:62:
bf:b0:40:3e:6b:2c:89:7b:88:f1:6f:9f:37:27:af:65:2b:e4:
14:a3:b4:02:4e:9d:df:b3:5a:77:8f:18:b0:14:6e:82:6c:ed:
9a:4c:d7:21:16:17:3b:a2:40:ae:79:87:b5:17:60:ea:4a:28:
94:62:10:75:06:db:ef:e9:b7:a8:20:e0:df:08:d3:0b:b3:ee:
2a:0e:20:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:23 2025 by rpki-client