Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/5r48m6LwdUF-gCceLh7AqyrOiZ4.roa
File: 5r48m6LwdUF-gCceLh7AqyrOiZ4.roa (raw, json)
Hash identifier: no4HIwwmaMXS1bWboIJJAJUa6vaq1ilfDIOPMvTt0Gk=
Subject key identifier: E6:BE:3C:9B:A2:F0:75:41:7E:80:27:1E:2E:1E:C0:AB:2A:CE:89:9E
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 01942444A2006E2201DC7BEA35A2489BF76A
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/5r48m6LwdUF-gCceLh7AqyrOiZ4.roa
Signing time: Wed 01 Jan 2025 23:47:45 +0000
ROA not before: Wed 01 Jan 2025 23:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.105.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a2:00:6e:22:01:dc:7b:ea:35:a2:48:9b:f7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Jan 1 23:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6be3c9ba2f075417e80271e2e1ec0ab2ace899e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:7e:79:ac:2b:8b:ae:a3:07:c3:7e:97:5e:
bb:f8:aa:0a:72:71:ab:85:dd:df:8d:59:b5:1a:16:
25:37:e7:ff:dc:1a:7a:9f:f8:3b:57:b8:7a:f6:c6:
ee:4c:32:4b:c7:b9:5e:4c:70:2e:a3:a9:9e:16:2a:
1c:4a:26:aa:a2:94:48:d1:00:46:81:8b:38:9b:97:
00:c3:f9:5f:14:42:ac:47:42:c6:a8:16:26:a2:2e:
4e:9f:98:f2:aa:c8:09:0d:15:20:c5:0c:64:13:13:
75:f7:3b:72:0b:23:e4:8e:83:5e:b2:a0:e8:e6:7c:
03:99:23:38:85:47:2e:ba:8c:98:54:9b:5c:43:02:
6d:71:6f:41:c1:06:cd:35:57:a8:7d:07:94:3e:ae:
d3:f2:70:1a:98:64:fe:93:65:2b:2b:90:31:99:ee:
81:64:30:95:b9:d5:24:e7:c9:c4:98:61:87:53:29:
28:43:8f:62:0f:e3:3a:a5:fe:a6:50:e8:df:13:99:
bb:7f:71:87:9c:8c:c5:6d:6e:00:69:78:64:08:7e:
56:73:4b:69:eb:53:fd:0a:f3:34:79:89:07:7a:12:
59:ac:94:ad:d9:93:36:13:ed:80:98:e5:86:61:aa:
18:e5:23:ea:c4:81:ec:38:77:b8:2c:b5:72:0d:3e:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BE:3C:9B:A2:F0:75:41:7E:80:27:1E:2E:1E:C0:AB:2A:CE:89:9E
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/5r48m6LwdUF-gCceLh7AqyrOiZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.212.0/24
Signature Algorithm: sha256WithRSAEncryption
48:7c:91:2a:9f:c0:40:c7:9f:8f:31:e1:4b:0c:1a:37:9f:9e:
10:5c:60:84:9a:fb:2e:8a:8a:3a:64:38:91:59:55:33:d0:de:
85:98:90:6f:4b:5a:7b:1d:5f:94:08:03:a1:54:cb:c9:67:7e:
3e:ed:56:a5:ce:03:8a:67:83:e3:70:bd:0c:e7:85:03:12:4c:
38:f3:30:e7:e1:47:bd:97:1b:be:22:67:c0:47:d6:0b:1a:57:
e9:9d:96:97:7d:a6:85:61:96:fa:64:67:5e:79:c6:e6:7a:d0:
79:13:0f:5c:3f:ba:a2:05:5a:a0:7f:79:29:d5:29:27:3c:c5:
51:21:9a:cb:c4:d2:32:47:60:a7:f8:eb:8c:62:d8:14:26:d0:
ed:59:64:16:e9:22:f3:b1:b8:14:02:76:ba:55:3f:e8:7a:17:
3d:db:99:2f:6e:4b:48:7d:fa:57:23:6e:e5:e0:e8:d7:3d:81:
27:12:81:dc:23:e3:25:5a:73:9a:4c:fe:80:e9:c9:f2:73:8f:
51:91:36:b1:6b:da:e4:e4:49:0f:5c:ec:8d:74:d4:a5:8e:dd:
b2:7d:1c:f0:5e:22:7e:7f:c5:fd:98:c4:fa:ae:1f:48:9a:5d:
47:0b:1d:c9:ae:5c:2e:fd:ce:12:e6:30:ae:02:2a:1b:0e:35:
d9:34:6e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:30 2025 by rpki-client