Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/T-DcnAmlcMePQv6bt_1HUJGUDFs.roa
File: T-DcnAmlcMePQv6bt_1HUJGUDFs.roa (raw, json)
Hash identifier: jsvsotQxthUCKKbNVxc16O+y+azMWL7s6yd1PzEZeOs=
Subject key identifier: 4F:E0:DC:9C:09:A5:70:C7:8F:42:FE:9B:B7:FD:47:50:91:94:0C:5B
Certificate issuer: /CN=3f296fe945a23180753f67f7748e6f299d2e672a
Certificate serial: 0194236A3284BFB9E493D3E1EA4F78CB7022
Authority key identifier: 3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/T-DcnAmlcMePQv6bt_1HUJGUDFs.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205826
IP address blocks: 193.19.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:32:84:bf:b9:e4:93:d3:e1:ea:4f:78:cb:70:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f296fe945a23180753f67f7748e6f299d2e672a
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fe0dc9c09a570c78f42fe9bb7fd475091940c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:88:20:83:62:49:40:1e:1e:af:9c:bc:6b:
d4:f4:d7:bc:d4:b4:3d:bd:10:76:69:3f:60:4f:64:
b7:bc:e8:f3:c5:bd:fe:6c:5f:00:6e:76:a1:96:4b:
c7:93:14:5d:22:a3:cc:29:50:05:2e:e7:2a:70:eb:
0b:c2:9b:06:05:b3:34:e3:e7:0e:7d:0e:db:7d:d7:
a0:fd:f2:3d:c3:c5:74:5d:94:ba:67:4b:37:13:3d:
72:fc:eb:a1:7f:20:6e:e4:5b:55:78:d2:2f:0d:f5:
21:f8:40:79:b4:0b:f9:ed:a5:16:7f:8c:e1:36:27:
c8:59:35:ff:62:45:50:a1:dd:7e:9f:11:fb:74:2b:
c0:95:84:8b:e8:18:60:b4:c5:1e:5c:37:7a:dd:ab:
50:17:4e:91:89:e9:6f:7a:8d:23:f7:3a:39:57:a1:
f5:7b:cc:0a:a5:8d:09:17:50:99:d9:e4:d4:fd:16:
8e:c8:f5:a5:5e:c9:d6:4a:ff:c3:68:27:55:ad:9d:
7a:14:f2:43:a7:c1:61:60:64:8f:9f:2a:5f:75:a1:
09:33:6d:00:40:08:4f:db:80:64:61:70:a1:df:dc:
b3:28:57:a8:d4:69:41:42:73:c6:bb:f9:e0:37:fe:
0e:7c:e6:31:66:0f:8e:e2:43:2a:c9:42:70:27:fd:
9f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E0:DC:9C:09:A5:70:C7:8F:42:FE:9B:B7:FD:47:50:91:94:0C:5B
X509v3 Authority Key Identifier:
keyid:3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/T-DcnAmlcMePQv6bt_1HUJGUDFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.188.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:75:74:9b:c9:a7:9c:ab:e2:51:b9:53:9d:ac:5e:14:ea:37:
48:b6:3e:92:8b:55:c4:c8:4c:26:71:b5:6a:be:ec:c2:87:db:
2e:96:52:d4:89:15:6a:9e:74:5e:84:7e:01:9c:b3:b1:37:6e:
f4:ec:05:c5:f3:7c:7d:13:3e:71:35:08:f0:98:77:4f:ab:1c:
3a:5c:77:d3:15:dc:94:c8:04:dd:2e:62:8b:20:17:ad:fd:3a:
41:63:01:ea:12:09:09:6b:5d:69:4f:3e:35:92:c7:69:dc:a3:
5b:e9:36:b7:27:28:33:6b:ac:4e:14:bc:3d:89:c7:12:5d:7c:
4c:ac:6b:f0:4d:ac:99:de:56:a7:56:56:49:3b:66:0a:72:c7:
70:8e:ce:45:1b:f6:69:8f:1a:2b:e4:1c:a2:db:a1:a1:b3:8f:
11:01:20:66:78:57:60:9e:e0:34:43:25:f0:9c:af:73:2c:fc:
bd:36:55:c2:c8:72:5a:4c:a1:58:25:a1:9f:f8:6d:3f:c1:a6:
36:9a:71:77:b3:fd:6c:9e:0e:43:49:69:96:6f:68:c0:a9:98:
c6:a9:fe:6f:74:85:80:16:75:34:5d:30:e6:14:78:88:6c:25:
83:b5:7d:d6:1d:dd:73:6c:99:7e:b4:cf:8b:45:d6:8f:63:b7:
5e:c5:fb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:41:22 2025 by rpki-client