Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/AvcqCbLU9IeYKmCw3WGJQWXmG28.roa
File: AvcqCbLU9IeYKmCw3WGJQWXmG28.roa (raw, json)
Hash identifier: /7yETboJPz5IcxWS6MR6CkKHKNZg1KvC+Zyvk1bhENA=
Subject key identifier: 02:F7:2A:09:B2:D4:F4:87:98:2A:60:B0:DD:61:89:41:65:E6:1B:6F
Certificate issuer: /CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Certificate serial: 019421B21BB7D4CB53A0F67AFE5582BC5F1D
Authority key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/AvcqCbLU9IeYKmCw3WGJQWXmG28.roa
Signing time: Wed 01 Jan 2025 11:48:28 +0000
ROA not before: Wed 01 Jan 2025 11:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200930
IP address blocks: 193.58.180.0/24 maxlen: 24
193.58.181.0/24 maxlen: 24
193.58.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1b:b7:d4:cb:53:a0:f6:7a:fe:55:82:bc:5f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Validity
Not Before: Jan 1 11:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02f72a09b2d4f487982a60b0dd61894165e61b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9a:c7:df:df:36:d4:93:ec:d6:11:67:12:c1:
bc:62:79:b2:ac:7f:9f:ae:9b:39:9d:a1:b3:3d:cd:
df:f2:5a:72:87:fa:19:61:6e:5e:15:7a:4e:73:18:
c9:92:97:26:31:90:cf:dd:14:2a:dd:5c:9d:15:3b:
15:d5:5e:42:d7:0b:0e:26:6a:02:10:8a:f1:d5:7d:
b9:3b:99:1c:e4:83:01:e2:a0:fc:fa:75:3c:ab:cd:
56:c6:9b:c0:38:d4:0a:53:9d:b4:be:04:ff:43:21:
cb:6c:62:ad:28:00:83:30:1b:d4:ca:db:cc:d5:ed:
a9:c9:38:6f:05:6c:01:49:02:ad:1b:4a:51:38:d4:
f4:32:8d:50:71:2b:bc:79:f4:e2:d3:3b:45:f9:0b:
32:0e:69:8e:36:45:11:53:04:c2:f6:81:ca:83:e0:
06:ba:a5:7e:af:cf:ba:b3:78:3b:37:b1:be:3b:7a:
a8:da:c8:4e:40:c0:c7:a0:5a:3a:bf:ee:bf:52:91:
bc:e7:54:37:af:89:84:6d:85:49:aa:b6:57:74:d9:
23:fb:14:1e:d0:ab:66:17:77:13:71:11:90:6e:c1:
4e:22:df:1b:18:82:c9:db:84:15:a7:0d:29:22:96:
c9:b6:81:1c:fc:87:6e:e7:cc:e7:c1:2d:2a:75:3c:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F7:2A:09:B2:D4:F4:87:98:2A:60:B0:DD:61:89:41:65:E6:1B:6F
X509v3 Authority Key Identifier:
keyid:27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/AvcqCbLU9IeYKmCw3WGJQWXmG28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.180.0-193.58.182.255
Signature Algorithm: sha256WithRSAEncryption
aa:3c:93:27:34:79:ac:ed:bb:4e:a5:4c:15:36:f3:e3:2e:3a:
91:80:59:3a:a4:f6:f2:1f:27:f4:75:8b:43:cf:8d:0f:81:9e:
e0:26:5c:a3:7e:4a:a2:64:75:d9:b9:2a:2b:20:e4:83:45:6e:
cb:fe:38:ae:0a:fb:49:7d:01:44:c7:58:fc:88:e3:fc:92:ea:
43:5d:83:6b:c3:6d:ce:de:e4:c0:cd:fe:8b:33:97:6d:b4:6f:
76:7e:dd:c5:e6:bc:e3:50:ca:65:d3:77:f4:b3:bb:8c:c9:ee:
a4:1e:8f:76:5e:a2:b5:a7:8d:c5:6f:fb:c5:63:ce:78:e0:e9:
b1:cf:4e:fa:ef:ca:f1:b0:bc:2a:1b:05:84:ae:70:c2:90:96:
b8:a4:8e:89:2e:c6:2b:32:31:66:e6:36:44:71:fe:e2:41:d0:
4c:0a:dc:82:f4:00:fe:50:0b:3a:5d:56:8e:40:cb:bf:0b:1e:
12:6f:9d:3f:99:49:68:07:c9:7e:cd:7d:c6:e4:63:87:e0:8c:
9f:95:ac:47:1a:cb:45:61:f3:b1:1f:c0:74:35:6d:cc:15:e9:
d3:e9:d1:48:f4:cd:13:b9:63:2a:05:a7:be:1c:40:f0:99:58:
c2:90:5b:ec:85:13:90:c5:d2:86:01:2f:fd:17:d6:7b:dd:43:
a1:e9:5a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:10 2025 by rpki-client