Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/T_vGm-YR8rSAG_LKyG-LL0j3jZY.roa
File: T_vGm-YR8rSAG_LKyG-LL0j3jZY.roa (raw, json)
Hash identifier: ctLCD3mPPm9ORV/MIVYXQC7GReMvIOdcov6IyRw8Un0=
Subject key identifier: 4F:FB:C6:9B:E6:11:F2:B4:80:1B:F2:CA:C8:6F:8B:2F:48:F7:8D:96
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01941FFA81F6ACF3CA4334E849F20A33A296
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/T_vGm-YR8rSAG_LKyG-LL0j3jZY.roa
Signing time: Wed 01 Jan 2025 03:48:18 +0000
ROA not before: Wed 01 Jan 2025 03:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62315
IP address blocks: 193.32.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:81:f6:ac:f3:ca:43:34:e8:49:f2:0a:33:a2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 1 03:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ffbc69be611f2b4801bf2cac86f8b2f48f78d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:b6:9e:ee:fa:c2:47:de:53:88:4e:2c:a1:
3e:44:80:6f:63:fe:eb:ed:31:4b:2c:99:13:a4:63:
e7:23:71:cd:bc:0f:cb:d9:9d:d5:51:92:bb:dd:0d:
a1:1c:9e:82:0a:3f:74:3b:9c:01:dc:69:2e:c1:fe:
88:95:e2:3e:61:30:d3:04:bb:f9:f0:f3:a6:e3:35:
f8:73:bb:b8:1a:01:53:db:05:c4:44:c1:c1:4b:de:
74:2e:76:28:0d:7c:3c:6d:9e:32:5b:62:19:fd:91:
54:7b:b1:bc:04:69:cb:d7:f4:2a:66:0c:d8:ee:ef:
fc:ec:fb:d2:be:9b:0f:1b:ec:08:58:1c:9d:99:a8:
70:ac:92:26:b7:73:00:99:bf:8b:e6:2a:d5:71:6e:
92:d3:fc:b0:db:b4:ef:c2:3c:d9:e0:fd:87:0e:28:
56:28:88:64:aa:92:0f:05:48:d0:46:79:85:80:d7:
a5:36:ff:90:19:b5:72:83:ec:88:54:6f:80:a4:51:
cb:27:92:6b:8b:0e:d4:f6:4a:67:e3:1b:16:50:31:
8d:ff:2c:60:d3:54:c6:e6:36:f5:ff:57:3c:61:18:
96:a7:cb:a4:ee:aa:d2:d1:95:95:41:c4:72:17:57:
e9:e9:14:85:10:7a:1a:f1:64:f7:aa:c6:e5:af:a2:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FB:C6:9B:E6:11:F2:B4:80:1B:F2:CA:C8:6F:8B:2F:48:F7:8D:96
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/T_vGm-YR8rSAG_LKyG-LL0j3jZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.10.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b9:a0:8f:08:3d:72:22:b3:06:1d:31:60:71:a8:2f:70:e0:
e3:1d:ff:a8:9e:9e:de:55:13:bf:77:e3:96:4b:22:f1:f6:31:
71:c0:ff:d4:98:7b:df:15:3d:11:7c:40:f7:d5:8f:4d:ce:5c:
d2:ba:65:bd:83:ba:95:a8:5a:9d:00:77:6c:59:7f:54:39:9b:
68:dc:40:79:a3:7a:93:90:52:d0:d3:73:ee:22:84:47:69:7e:
75:7a:43:17:a1:4a:a4:85:00:a8:27:51:e5:35:1e:ea:9d:51:
fa:0c:b6:35:e3:6a:36:46:92:65:96:4a:78:b4:e5:45:6c:2d:
41:d4:33:9c:cf:13:38:03:9e:82:96:55:98:5d:c0:ea:dc:f5:
f2:9c:9b:bd:38:1f:61:34:f8:62:51:47:a3:e5:7f:cc:23:4e:
61:e7:38:59:c9:b0:cb:fd:aa:7b:3a:68:e3:5c:c6:d4:e6:48:
28:75:89:de:00:1b:01:10:37:9a:22:bc:7f:45:b2:87:bc:3f:
40:c5:ce:26:26:f0:5b:d7:eb:6a:9f:44:00:8e:ee:d5:ea:c9:
f6:a6:39:08:ea:19:db:50:47:58:f3:aa:0c:7d:5d:2a:24:e4:
ca:94:24:30:1a:61:ac:49:9a:73:6a:93:82:4a:cf:93:cc:83:
2e:48:ed:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:19:16 2025 by rpki-client