Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/9OV64ovHUmNf0EaeshTHfksxR_U.roa
File: 9OV64ovHUmNf0EaeshTHfksxR_U.roa (raw, json)
Hash identifier: t4wXlxDREcwrz5SXDxre6KC9coaQ3zJVUcsfwtnlKKs=
Subject key identifier: F4:E5:7A:E2:8B:C7:52:63:5F:D0:46:9E:B2:14:C7:7E:4B:31:47:F5
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA40B3E66F528A2DF7A7AD36309868
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/9OV64ovHUmNf0EaeshTHfksxR_U.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210713
IP address blocks: 93.115.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:40:b3:e6:6f:52:8a:2d:f7:a7:ad:36:30:98:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4e57ae28bc752635fd0469eb214c77e4b3147f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fb:4c:d2:55:b0:97:e8:0b:c1:2c:cc:04:2e:
00:bd:bc:9b:9b:ba:f3:d8:28:89:e1:b5:99:21:e1:
a7:89:48:12:d6:63:b1:1b:7b:59:d9:f0:c8:53:4f:
e5:46:8d:39:c4:75:ce:bc:5b:cd:c7:93:66:7e:cd:
d1:36:81:bc:f1:8d:32:69:60:2d:c9:f2:fb:be:00:
ed:33:5f:6e:f5:ca:52:30:99:f5:73:7e:8d:b2:2b:
74:54:d4:4c:35:62:d2:2e:5b:63:4b:96:b7:46:d1:
e8:35:91:e4:7a:b9:f4:b3:65:11:0b:37:ae:4f:01:
c4:7b:f7:08:01:a6:aa:ca:eb:43:7f:46:c8:c0:a0:
6e:4c:11:91:58:c2:45:d5:90:89:fd:66:5f:10:32:
f0:2d:1e:3b:4e:5f:99:90:a6:42:6e:24:ad:65:f4:
0e:25:43:81:a6:2c:f6:a9:8a:95:ac:11:66:7d:6e:
dc:3c:c8:8a:5d:c2:00:bb:ee:ff:15:ee:75:7c:8b:
2c:1a:98:49:50:09:de:d7:9a:bd:19:02:78:e4:79:
e1:28:f5:db:40:3c:ce:19:3f:6c:98:d8:d9:65:77:
2d:9d:1d:75:5a:a8:e4:4b:c9:33:8e:35:34:4e:14:
6d:b2:78:91:11:9f:b3:81:28:5a:11:79:70:f0:25:
a8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E5:7A:E2:8B:C7:52:63:5F:D0:46:9E:B2:14:C7:7E:4B:31:47:F5
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/9OV64ovHUmNf0EaeshTHfksxR_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.44.0/23
Signature Algorithm: sha256WithRSAEncryption
00:15:e0:5e:da:f3:87:d6:0b:b0:3d:c5:e3:5e:c1:d1:ff:2d:
51:3a:fc:68:cd:0d:23:25:2b:f7:d6:b1:f8:4c:f0:cf:e1:a3:
95:b9:25:74:9d:be:54:b1:06:ba:78:5c:95:06:4e:d7:0b:6f:
8b:03:da:89:dd:48:77:2d:d9:35:d6:30:51:95:8d:0b:54:1e:
d4:d2:99:6d:dd:34:ef:cb:a9:60:48:21:18:bb:30:50:41:f4:
49:0f:99:1a:72:f8:87:92:2f:9a:99:62:8d:e7:9a:91:e4:8f:
2a:78:3c:bd:9e:40:c3:cd:70:4e:ed:b0:02:44:ab:a1:13:e5:
ae:54:c5:f6:c0:4e:a2:83:3c:83:e0:6f:5c:04:b4:82:93:c0:
f0:44:06:cb:26:8f:86:71:90:b5:a8:1d:b1:6f:21:fc:cb:a2:
8e:bc:1f:8a:f0:89:85:b2:a1:d6:37:d9:11:ae:cd:d9:18:3a:
4d:bd:11:97:68:66:50:62:7f:83:9d:ef:a4:ad:ae:93:d8:de:
2e:a4:15:94:dd:71:f1:90:d0:29:dc:ff:ac:3c:13:99:a6:e4:
0f:44:86:52:b6:79:1c:ca:80:96:37:cb:8c:77:8a:aa:17:75:
6d:e8:54:71:d9:e4:ae:26:4c:63:2b:03:33:7b:da:49:2b:eb:
55:fa:b5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:58:15 2025 by rpki-client