Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/apGrLeQXGFDnmjDGU5J1xhLa7ts.roa
File: apGrLeQXGFDnmjDGU5J1xhLa7ts.roa (raw, json)
Hash identifier: TvPWK0JX9FOtKwbjXZr2maaJZh4hwmSWvBJ0nfoejxE=
Subject key identifier: 6A:91:AB:2D:E4:17:18:50:E7:9A:30:C6:53:92:75:C6:12:DA:EE:DB
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 01942824059270D56D22EF2FE1A99D4465A7
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/apGrLeQXGFDnmjDGU5J1xhLa7ts.roa
Signing time: Thu 02 Jan 2025 17:50:36 +0000
ROA not before: Thu 02 Jan 2025 17:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199802
IP address blocks: 193.8.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:05:92:70:d5:6d:22:ef:2f:e1:a9:9d:44:65:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Jan 2 17:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a91ab2de4171850e79a30c6539275c612daeedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:a9:c4:34:02:bf:4e:2a:99:29:f6:7c:48:
70:f2:6d:9b:0d:70:e1:15:0e:a2:34:7c:7c:16:f2:
0c:43:b9:8d:84:0a:67:df:f3:94:f9:d7:47:13:44:
d5:b8:4a:31:35:a8:ae:92:be:db:31:17:35:30:c2:
93:8c:26:8f:c9:0d:ed:6c:3a:9a:66:b9:7a:3c:84:
fa:41:75:cc:e3:f3:e0:b9:69:3b:c7:0f:7e:ab:ae:
40:0e:d6:df:1d:cc:80:e7:45:78:81:0e:a1:b3:dc:
ea:2d:03:73:e8:1b:77:65:3b:22:3c:9b:2b:ed:4e:
e3:a1:0e:de:dc:93:b9:39:a8:a8:93:4d:ad:b9:31:
3b:81:4f:26:a9:60:38:bf:ab:ee:7d:cf:a2:fe:6f:
7c:2d:f9:34:ce:cf:05:ea:a7:1b:e2:15:2e:58:7d:
3f:77:35:20:1a:9b:35:ff:b8:04:62:1b:97:3d:e6:
eb:d6:69:93:8f:19:37:d6:d3:95:3c:48:45:bf:32:
13:19:4a:e1:98:05:34:c6:bc:09:7c:99:63:2f:4a:
b8:74:36:1c:1b:9a:83:29:1d:e4:b2:5f:be:cb:ed:
e0:68:6f:81:b3:e8:d2:c8:5f:6b:a4:1f:4a:34:12:
55:6b:9c:29:2f:d3:b9:09:ca:ab:2a:17:da:55:d8:
9a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:91:AB:2D:E4:17:18:50:E7:9A:30:C6:53:92:75:C6:12:DA:EE:DB
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/apGrLeQXGFDnmjDGU5J1xhLa7ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.174.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c7:1c:57:58:f3:f2:da:cd:ec:b3:f6:19:ed:07:5c:e7:10:
71:08:22:f5:75:bf:d2:a8:79:23:16:2d:a6:1d:3e:a6:90:45:
77:02:53:2f:a9:58:33:30:4d:75:d0:73:93:fb:36:34:c0:c7:
5c:1d:f6:3a:26:da:77:09:89:f3:16:27:3f:0a:c0:cb:38:7e:
b9:b7:12:8c:34:d2:6c:55:f9:9f:58:98:98:d7:78:a5:12:b6:
91:c3:26:c1:3b:fc:b8:64:c0:bc:77:a1:79:d3:b2:5f:47:1d:
34:ba:a9:37:66:fd:34:a1:f3:56:5a:10:f1:ac:a0:93:87:9c:
1b:d5:98:2b:5e:c8:90:37:6c:b1:ed:7c:24:46:9a:e8:cd:a6:
a3:a4:f9:70:dd:ca:5c:53:dc:b0:a4:bc:f2:09:2b:14:09:71:
57:31:3b:68:db:b3:fc:51:aa:a0:37:0e:21:36:2f:7e:b4:99:
f7:50:a8:a7:90:27:d7:80:7a:d7:21:cf:fb:c5:6a:16:27:1b:
40:0b:3d:39:40:14:1e:f6:92:d7:50:21:56:94:fb:4b:d1:f8:
90:ee:cc:9a:75:31:40:cc:54:26:75:e3:63:8a:67:ee:8b:2d:
fc:b3:67:f0:c7:93:03:29:8e:22:25:4c:93:71:c4:48:8a:08:
5d:c9:a3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:30 2025 by rpki-client