Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/37xCCUhytigOkbo8skkNphl6CDo.roa
File: 37xCCUhytigOkbo8skkNphl6CDo.roa (raw, json)
Hash identifier: EZZOllbO3rU0Aq71pT+LnxPWU1OR5RUdYC5xtbHlqV0=
Subject key identifier: DF:BC:42:09:48:72:B6:28:0E:91:BA:3C:B2:49:0D:A6:19:7A:08:3A
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 01942067D923A0CFA02A2E9A91BEBD8D9706
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/37xCCUhytigOkbo8skkNphl6CDo.roa
Signing time: Wed 01 Jan 2025 05:47:44 +0000
ROA not before: Wed 01 Jan 2025 05:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45000
IP address blocks: 193.0.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d9:23:a0:cf:a0:2a:2e:9a:91:be:bd:8d:97:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Jan 1 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfbc42094872b6280e91ba3cb2490da6197a083a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:76:ce:7b:fe:17:ff:e0:79:ab:ea:8d:57:64:
88:1a:a1:72:25:c1:b2:29:27:d2:bb:51:6e:0f:de:
2d:65:57:dc:08:36:73:9e:3c:b5:48:10:25:27:6e:
46:ed:91:bf:5c:0a:27:6a:f1:d9:8f:8c:5f:c6:8d:
97:c3:3a:d5:84:e9:9f:09:7b:a8:85:48:fe:a8:40:
3c:ca:76:9b:f2:93:da:f8:4a:65:98:41:82:ec:06:
2e:65:cf:c7:ba:19:44:1a:f4:6f:7d:95:3a:f5:1f:
43:63:c7:3b:54:b3:f8:a7:bc:ff:6d:8f:39:5e:1a:
3f:c3:58:1f:11:45:03:67:59:6e:ec:d2:9b:46:5a:
64:84:d7:9e:05:51:8b:66:a6:3b:78:93:27:93:fa:
90:ce:cc:4d:f3:50:74:b9:09:b7:f1:4e:25:e3:66:
77:e0:64:e5:52:46:5f:74:27:ea:3b:a0:5b:32:bc:
3e:7f:23:a2:32:07:bf:ff:df:ba:6f:5e:ca:a4:83:
72:b3:7f:fc:66:27:de:c0:0b:a9:63:01:99:77:b1:
8e:40:e6:06:34:b0:c5:f3:23:12:a1:04:f1:5b:72:
bf:78:ca:61:4d:84:a6:71:44:1f:8c:4c:69:dd:94:
e1:db:75:bd:63:54:5e:ee:b2:97:f3:a0:8e:e9:b6:
22:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BC:42:09:48:72:B6:28:0E:91:BA:3C:B2:49:0D:A6:19:7A:08:3A
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/37xCCUhytigOkbo8skkNphl6CDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.185.0/24
Signature Algorithm: sha256WithRSAEncryption
88:25:b3:70:88:64:ec:19:74:7e:28:4b:ed:d6:04:49:3c:67:
7f:e9:41:5a:99:78:13:1f:1d:50:02:21:65:a4:27:c8:97:46:
7d:7e:de:11:33:4b:99:e3:fe:f2:f7:8f:d9:3e:3e:39:8d:d2:
4f:94:f0:41:3a:79:0a:12:2b:57:b7:d8:e2:a6:cd:23:12:2c:
9b:18:9c:0e:c5:40:e4:1c:0d:02:0f:ec:d6:75:d8:1d:57:38:
49:a3:76:af:dd:0c:f8:99:c8:de:a5:be:6a:1f:3a:8c:50:98:
3d:00:56:4c:01:e3:81:2c:b9:16:d1:ab:17:9d:59:5b:2c:61:
c9:57:8d:c8:23:b0:d6:f6:db:c8:69:ad:70:e9:b8:8f:62:ac:
0b:a5:c5:a2:be:6a:b7:6b:13:98:30:d3:06:70:b9:6e:9c:0f:
27:1a:d2:75:af:19:39:a6:8b:51:c6:88:7e:4f:bf:b9:94:97:
7a:2d:8c:a6:30:ed:dd:cb:07:6d:f2:0a:f7:85:12:ea:fa:c6:
45:fd:d6:e4:d1:be:3a:7c:f3:5d:72:b8:21:99:2a:5c:13:bb:
ac:e2:92:d1:90:34:21:de:1a:0f:79:8b:a6:34:ab:6b:5a:5d:
9f:c8:f5:e5:a8:17:00:62:e0:58:80:a5:2c:dc:f9:7f:90:f3:
b1:40:be:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:19 2025 by rpki-client