Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/_6UZkqieR9kIkKZwwfKfkm35fd4.roa
File: _6UZkqieR9kIkKZwwfKfkm35fd4.roa (raw, json)
Hash identifier: TAVIhSh9eMt1b6339NxSWJ46JPMbHN7C8v9n3qx3ibk=
Subject key identifier: FF:A5:19:92:A8:9E:47:D9:08:90:A6:70:C1:F2:9F:92:6D:F9:7D:DE
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 01942444C0607BEBFDA7BC42DF65AD8C783D
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/_6UZkqieR9kIkKZwwfKfkm35fd4.roa
Signing time: Wed 01 Jan 2025 23:47:52 +0000
ROA not before: Wed 01 Jan 2025 23:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132335
IP address blocks: 188.208.140.0/24 maxlen: 24
188.208.141.0/24 maxlen: 24
188.241.62.0/24 maxlen: 24
188.241.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c0:60:7b:eb:fd:a7:bc:42:df:65:ad:8c:78:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: Jan 1 23:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffa51992a89e47d90890a670c1f29f926df97dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:45:95:23:38:73:17:6e:dc:af:a0:63:a2:a9:
36:2f:e3:2e:5f:73:19:4e:22:3b:33:68:45:40:dd:
81:10:26:e2:2a:10:79:aa:46:7b:b6:6c:7d:d6:f6:
38:65:a7:20:a4:f8:4b:f5:c3:f6:de:00:60:ed:22:
9c:d1:5c:31:0e:2f:a3:d7:dc:6f:4e:0e:64:04:87:
a1:7c:fc:cb:9e:a1:64:c5:37:10:ec:71:df:4a:71:
db:b3:7d:b2:70:f4:e4:48:28:cb:39:7c:f2:a3:96:
d9:40:41:62:5f:28:be:43:3b:f0:34:2b:95:06:ed:
3b:c9:66:e2:73:39:61:99:68:5b:5e:7c:c1:f7:00:
f0:f8:64:fc:4a:08:af:74:01:6d:ef:a7:a0:29:6e:
00:e3:c1:71:e3:de:cb:4d:a7:80:19:71:91:83:30:
77:45:00:74:2d:ce:71:12:e5:fd:78:76:e2:20:f9:
cc:94:d1:8e:82:9a:fb:ad:6d:fb:07:32:13:4f:24:
c3:b9:2c:0f:20:c3:79:8f:0a:b0:6c:26:4c:51:5d:
b7:24:b4:d1:69:d3:c0:92:be:e5:76:3b:6e:79:e9:
5e:42:e4:bc:a2:ae:4f:d2:f7:d0:55:cb:63:e2:72:
8c:3c:44:e3:69:cd:31:63:54:21:2f:8a:ee:f4:38:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A5:19:92:A8:9E:47:D9:08:90:A6:70:C1:F2:9F:92:6D:F9:7D:DE
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/_6UZkqieR9kIkKZwwfKfkm35fd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.140.0/23
188.241.62.0/23
Signature Algorithm: sha256WithRSAEncryption
56:02:b2:fe:ef:f0:6c:20:e3:f5:8f:b1:85:f8:51:c0:91:70:
ac:46:a6:b3:40:6f:cb:24:ef:e2:91:75:c4:b2:02:9b:42:78:
ec:37:8b:65:bf:4d:93:7a:e8:a9:99:23:d1:43:4a:81:8d:fe:
c6:f0:5f:59:46:26:14:45:df:79:2a:d8:ce:34:ca:65:f9:73:
81:8f:ea:cd:99:44:92:08:dd:0e:95:80:a1:21:6b:af:2b:9e:
eb:3f:1b:87:f5:9d:79:e7:58:41:58:6f:b9:9c:37:d1:fb:20:
89:2d:71:d2:bd:d0:cb:e5:64:85:64:82:66:10:40:e2:04:7f:
41:fa:9f:e9:82:1b:ac:a2:5e:1e:eb:fe:8d:81:b4:0e:d4:f4:
32:e1:4a:33:8a:53:a7:50:82:7f:2d:e2:61:91:78:1a:6a:22:
56:eb:62:74:c5:1c:2f:15:c4:00:79:f9:86:59:87:f3:1d:ac:
74:fb:8d:4d:82:80:d2:0b:0a:b1:70:01:8a:d1:1c:60:30:86:
97:78:cb:c4:a5:80:09:85:a0:aa:10:af:00:3e:93:39:64:19:
3d:19:3d:12:f1:c3:1c:52:07:75:04:ec:6c:b1:e5:69:72:df:
86:ae:45:70:42:97:88:15:b3:09:b9:d3:79:56:2e:c9:49:e2:
20:7c:c8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:01 2025 by rpki-client