Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/u7zHiSjsnFwFOa-a4a5i2VA8gFc.roa
File: u7zHiSjsnFwFOa-a4a5i2VA8gFc.roa (raw, json)
Hash identifier: GVFgF0gAIU+Ptj/IEQiwtzNx/eeTLFsX6erX9jxLBDU=
Subject key identifier: BB:BC:C7:89:28:EC:9C:5C:05:39:AF:9A:E1:AE:62:D9:50:3C:80:57
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 019427479A0ACC903806C705AA4FAE402E80
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/u7zHiSjsnFwFOa-a4a5i2VA8gFc.roa
Signing time: Thu 02 Jan 2025 13:49:51 +0000
ROA not before: Thu 02 Jan 2025 13:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10991
IP address blocks: 192.113.65.0/24 maxlen: 24
192.113.66.0/24 maxlen: 24
192.113.67.0/24 maxlen: 24
192.113.68.0/24 maxlen: 24
192.113.69.0/24 maxlen: 24
192.113.70.0/24 maxlen: 24
192.113.71.0/24 maxlen: 24
192.113.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9a:0a:cc:90:38:06:c7:05:aa:4f:ae:40:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Jan 2 13:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbbcc78928ec9c5c0539af9ae1ae62d9503c8057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:0a:fa:99:dc:0d:90:83:b3:29:c1:27:a2:
b4:5d:ba:7f:eb:53:6b:d4:03:7e:95:23:5d:18:fd:
f4:f6:82:eb:ed:f5:0e:49:0d:04:97:01:dd:93:fb:
47:eb:e8:a5:66:22:9a:97:eb:bb:7f:7d:e3:54:0a:
83:11:60:01:ec:35:c4:4d:2a:20:c1:e3:0a:73:89:
8d:15:50:48:50:b9:13:85:49:04:68:73:2b:6f:3b:
a9:7b:5a:6c:cb:ec:9f:ab:61:ae:2b:b3:32:55:97:
31:97:2b:54:a2:99:00:89:c5:e4:1b:f2:58:d0:f9:
a8:db:a2:7b:db:08:34:f9:1d:db:26:18:50:58:01:
60:53:21:8a:b0:ef:1d:c2:45:c7:a8:e7:f8:44:00:
e1:0f:a8:47:51:d7:5b:04:24:96:6b:1f:3c:2e:7c:
bf:8e:85:c3:2e:60:74:fb:2e:56:3f:21:54:c5:25:
76:3a:b7:8a:92:f9:6b:75:60:a2:50:62:54:cb:c2:
7e:7d:76:aa:f3:df:d7:ce:53:f1:71:86:9a:71:c3:
1b:56:c5:64:87:1a:5f:77:e7:27:45:fe:24:3b:c5:
7a:00:ce:80:9f:8a:23:f4:36:ad:73:08:d3:03:9e:
72:00:74:58:3b:7f:7c:45:fa:90:61:e4:71:0e:98:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BC:C7:89:28:EC:9C:5C:05:39:AF:9A:E1:AE:62:D9:50:3C:80:57
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/u7zHiSjsnFwFOa-a4a5i2VA8gFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.113.65.0-192.113.72.255
Signature Algorithm: sha256WithRSAEncryption
6b:3e:bb:0f:f5:e6:8d:37:9f:ca:51:03:78:57:ca:02:d1:e0:
e0:82:5e:01:d2:4e:95:eb:a5:f7:22:dc:04:bc:8e:5d:68:d2:
7c:c0:c2:8b:ae:75:23:86:b3:fa:d6:64:74:28:75:23:8c:48:
b2:ec:06:38:4b:86:e3:56:01:d2:dd:fa:1d:e1:39:8d:29:c5:
d5:b5:5f:2f:9f:28:b6:49:7c:c5:0e:5a:32:68:e0:b8:7b:1c:
1e:0b:80:ff:dc:43:05:80:53:99:74:ea:f9:05:97:ca:e1:8e:
3a:c4:3c:e6:43:4e:0d:e6:6e:02:c9:ad:7b:67:93:cc:08:42:
de:aa:f9:0b:90:56:95:3a:3d:27:1b:21:af:e7:9d:72:22:30:
28:c0:10:bd:55:ca:35:d3:b7:74:2f:2a:7e:93:86:a8:92:3d:
9d:21:79:eb:d2:9d:fd:7e:f7:9f:26:11:69:9e:dd:7e:bc:8b:
3c:ad:df:e4:ed:59:d6:c6:5c:a3:e5:37:34:7e:c3:20:b1:80:
02:d6:38:93:02:d3:01:ac:b8:7c:a1:bd:33:37:66:e0:9f:b9:
3e:37:60:d2:dd:33:85:0b:4c:84:d0:8b:70:3b:21:52:64:cc:
b0:b0:7f:65:e7:00:65:6c:21:a4:f1:e0:e8:d8:7d:49:52:bb:
01:58:ef:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:30:31 2025 by rpki-client