Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/abknUv3T7rts3ssSLjO_9zGCj5A.roa
File: abknUv3T7rts3ssSLjO_9zGCj5A.roa (raw, json)
Hash identifier: ZduEHW/sDPXFbLZot8EAZU2ihlH8afniaTCGOengHk4=
Subject key identifier: 69:B9:27:52:FD:D3:EE:BB:6C:DE:CB:12:2E:33:BF:F7:31:82:8F:90
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 0194244497ACBA031F4DFB44F560A6BC44AD
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/abknUv3T7rts3ssSLjO_9zGCj5A.roa
Signing time: Wed 01 Jan 2025 23:47:42 +0000
ROA not before: Wed 01 Jan 2025 23:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28853
IP address blocks: 193.138.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:97:ac:ba:03:1f:4d:fb:44:f5:60:a6:bc:44:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69b92752fdd3eebb6cdecb122e33bff731828f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:d9:15:10:2e:b2:00:5c:d6:3a:83:c9:15:
cb:02:27:94:d6:05:c0:2f:a9:c6:22:1b:b3:b7:2c:
5f:c3:8c:6b:96:f2:16:48:11:84:54:98:68:6b:75:
6c:3b:d4:7c:b7:e4:82:16:f2:21:bb:b0:34:33:e3:
82:9b:f2:ba:22:c1:aa:14:57:f0:b9:f7:76:e1:e1:
6c:a7:37:ba:23:59:0d:49:08:d0:3d:f6:3e:e9:d0:
7e:83:23:88:d0:1a:0a:2e:e9:67:5f:dc:11:61:6e:
5a:8f:a1:e7:f2:88:31:6d:e5:8f:b8:1d:17:95:6b:
d5:31:24:01:c5:90:81:de:e2:90:34:39:21:35:95:
5c:c6:2e:a6:d3:51:8b:ab:44:dd:53:37:b6:05:c6:
1a:14:9c:50:03:35:c5:aa:69:a0:8d:8e:df:81:49:
42:f5:76:ab:11:5e:85:9b:91:67:3e:81:70:60:a7:
47:7a:f9:d2:18:ed:e3:69:9e:46:49:6b:d1:27:44:
16:76:fc:df:27:1d:e6:34:3a:c8:07:fa:8e:c0:a7:
0f:46:f1:a8:81:b4:86:63:03:a2:e7:20:f4:57:3c:
a1:49:9c:f2:8f:84:ee:47:3c:03:be:84:77:b0:d0:
30:35:12:72:6b:30:2c:cc:79:24:bc:63:4d:1d:fa:
8f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B9:27:52:FD:D3:EE:BB:6C:DE:CB:12:2E:33:BF:F7:31:82:8F:90
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/abknUv3T7rts3ssSLjO_9zGCj5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.103.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ec:81:68:ab:1e:81:0c:90:a2:2b:f2:11:04:9c:3b:a6:29:
c9:9b:3d:fb:50:ee:fc:ef:8c:17:bf:f1:d7:76:e8:16:b3:46:
ca:8f:36:fe:be:14:07:91:06:38:ec:14:d2:ba:90:99:7a:bd:
84:95:a9:8e:4a:f1:1c:ba:5c:61:2f:92:9e:95:d5:93:1b:6f:
d5:87:58:9b:a8:2d:83:87:0c:be:d8:33:63:67:18:d7:3a:e4:
51:50:93:04:10:97:7d:ed:02:a0:c7:de:d1:1c:0c:63:24:a8:
a3:00:d7:30:24:95:6e:d8:be:cb:96:d2:63:df:10:b0:a7:db:
27:c2:aa:94:cb:bc:6f:45:67:78:91:5f:fa:63:fe:fe:c5:3a:
42:96:f5:d0:3b:5d:b8:5a:0c:12:f5:c9:37:13:d9:e0:c6:4e:
d3:d8:53:4c:d8:f3:8a:3b:d6:bf:7d:0a:17:b2:61:42:b5:0b:
d8:f4:c9:cf:56:4a:de:f9:2d:bb:24:d2:2c:0c:de:2a:97:d6:
5e:dc:05:cb:76:08:5e:12:3c:1e:79:ed:e4:03:2e:62:f6:81:
1f:4c:5f:63:8c:44:fa:6b:b8:5f:75:d9:b6:7a:72:4e:e1:09:
73:de:dc:2a:9d:04:bd:f0:89:6a:31:ef:d5:81:8e:44:5d:5e:
ad:cf:7c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:02 2025 by rpki-client