Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/ahfN64_p8VtI62YroQrVTvBrIO0.roa
File: ahfN64_p8VtI62YroQrVTvBrIO0.roa (raw, json)
Hash identifier: sZaDoXjnbfKoPFXFsVFkCxokaAJgn9I/0mc/e5HXWnI=
Subject key identifier: 6A:17:CD:EB:8F:E9:F1:5B:48:EB:66:2B:A1:0A:D5:4E:F0:6B:20:ED
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 0196106DBEEF0093B774DA185D5F934C6582
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/ahfN64_p8VtI62YroQrVTvBrIO0.roa
Signing time: Mon 07 Apr 2025 13:25:49 +0000
ROA not before: Mon 07 Apr 2025 13:25:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213459
IP address blocks: 193.164.128.0/24 maxlen: 24
217.11.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:6d:be:ef:00:93:b7:74:da:18:5d:5f:93:4c:65:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Apr 7 13:25:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a17cdeb8fe9f15b48eb662ba10ad54ef06b20ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b2:01:02:f8:05:c0:2c:e9:97:a6:9a:27:1a:
9b:a9:28:c4:07:38:27:26:d6:d7:f1:5f:c7:e6:6c:
58:ad:0f:ff:9f:12:db:1b:3e:26:61:f9:a3:1e:a2:
e8:a0:1b:47:83:02:32:54:f0:70:01:44:28:ed:a8:
40:21:41:bc:59:a9:b7:4d:19:5e:8b:c9:7f:8a:6f:
92:1a:21:23:dd:f5:9a:9d:6c:52:2b:9f:03:71:6e:
ec:0e:01:a4:f7:6a:78:0c:e9:5d:06:b6:76:62:29:
63:0c:91:16:28:11:50:15:77:af:3d:db:0a:b1:c4:
c1:03:c8:b1:9d:a5:5b:a1:2f:38:14:19:23:be:b9:
4c:b7:64:3f:1f:e6:bf:8f:cb:00:fe:e1:86:98:26:
fb:c8:83:9c:bc:13:1d:dd:c0:e3:b3:82:89:16:19:
29:ab:96:5c:71:67:2e:4a:ef:99:1d:58:d0:3c:be:
87:2a:df:e4:eb:d0:b9:26:05:82:04:50:92:01:74:
17:a7:0a:d0:2b:91:90:f2:ab:de:45:1e:27:43:87:
55:a7:e6:d2:5c:48:6f:ed:2a:10:e1:8c:91:3f:bd:
a3:0a:62:a1:94:5c:b3:14:82:fb:e8:83:4a:f1:3e:
a4:70:8f:57:a2:a4:e2:b6:39:cd:a1:f3:77:4c:6d:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:17:CD:EB:8F:E9:F1:5B:48:EB:66:2B:A1:0A:D5:4E:F0:6B:20:ED
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/ahfN64_p8VtI62YroQrVTvBrIO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.128.0/24
217.11.167.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:02:d4:35:d8:ef:53:4e:f0:52:ba:39:98:ff:c6:cf:17:e7:
07:53:2a:54:c7:90:17:cd:6a:dc:2f:70:d6:e9:92:0b:46:ec:
ba:a7:7a:66:5d:49:2b:49:f0:a0:f4:6a:b3:24:9c:45:db:26:
be:88:1a:32:ac:34:d6:f5:6b:77:8b:26:40:34:93:a8:33:74:
c9:1c:b8:8d:90:d1:db:76:aa:cc:62:85:96:47:a7:6b:fc:fe:
3d:c4:fd:88:c8:83:90:68:13:75:4f:92:55:0c:61:9d:80:b9:
8d:2c:5f:37:69:8b:11:c5:b3:ae:ed:de:48:a4:eb:5b:f0:10:
de:bb:0c:f1:b2:74:42:7b:37:6b:8c:c5:7d:a8:d7:b8:c3:3d:
a7:44:3d:e0:1c:ef:f1:2d:84:0e:d8:87:28:e5:26:df:65:f7:
08:46:1e:11:9c:85:b3:cf:08:e8:f3:b6:21:c4:50:4c:08:3a:
93:96:da:2d:3c:8f:c5:8d:c8:ee:b4:27:f3:4d:e1:b0:17:ca:
26:2c:db:d4:fc:c5:45:08:f8:24:e7:60:d8:4b:e1:50:c4:22:
d9:29:2d:d0:89:25:87:dc:4f:6f:56:e6:76:aa:0c:2b:0c:2f:
c5:1c:68:7a:e6:51:9c:dd:52:08:49:a8:50:05:6a:b3:c5:32:
3f:fa:ad:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:50:26 2025 by rpki-client