Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/g1RkWavRHDLIMciTbQ2oPMtXKtc.roa
File: g1RkWavRHDLIMciTbQ2oPMtXKtc.roa (raw, json)
Hash identifier: +9+QsepfCqVXx8S9YRw8NNKDXd346R/NXG9imOdNPxY=
Subject key identifier: 83:54:64:59:AB:D1:1C:32:C8:31:C8:93:6D:0D:A8:3C:CB:57:2A:D7
Certificate issuer: /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Certificate serial: 0194ACAC15D167E61A9ACF6B58CBEE68FC7A
Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/g1RkWavRHDLIMciTbQ2oPMtXKtc.roa
Signing time: Tue 28 Jan 2025 11:29:06 +0000
ROA not before: Tue 28 Jan 2025 11:29:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29684
IP address blocks: 193.203.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:ac:15:d1:67:e6:1a:9a:cf:6b:58:cb:ee:68:fc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Validity
Not Before: Jan 28 11:29:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83546459abd11c32c831c8936d0da83ccb572ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:ee:81:3b:cd:29:2f:24:c3:1b:cd:88:41:
2e:b9:1d:59:be:9b:21:2b:08:a1:39:0e:d0:8e:18:
46:7c:54:9b:9c:70:ec:d5:5a:69:97:c5:05:d5:80:
1e:f2:1c:43:7e:a0:af:88:38:ac:0a:16:46:6a:16:
fe:ef:bb:f5:da:0f:7b:79:4e:ca:91:e3:8b:8e:62:
f3:81:81:0e:80:dd:d1:7c:2c:fb:4b:7d:c3:04:36:
6e:44:ed:15:c3:d6:62:17:1c:5a:22:d1:c4:94:31:
2b:98:58:99:01:e3:1f:62:e3:39:ff:63:85:57:3d:
f3:7f:47:73:4e:71:0d:08:d5:d1:c2:0a:7f:d6:bf:
d4:32:69:56:ff:a0:07:8b:76:79:83:18:6f:17:98:
81:b5:a4:4b:6a:74:72:1c:61:11:df:28:cd:07:17:
da:97:ea:84:84:17:bd:e8:44:7f:62:52:64:95:e7:
f9:53:b6:76:cc:36:04:46:2e:cf:e3:8c:87:43:c1:
04:d3:7a:69:25:d6:15:d9:70:35:76:9f:ba:33:dd:
57:e5:e1:20:0d:56:bc:47:c2:f2:c3:d9:ae:ba:56:
77:9d:f2:1e:fa:ac:16:bf:a5:4e:63:0f:04:16:ec:
0f:58:3f:5f:47:8f:8a:be:24:51:b5:cc:9b:9a:55:
8b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:54:64:59:AB:D1:1C:32:C8:31:C8:93:6D:0D:A8:3C:CB:57:2A:D7
X509v3 Authority Key Identifier:
keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/g1RkWavRHDLIMciTbQ2oPMtXKtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.111.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:d2:24:ab:f2:ed:1f:40:42:d6:e6:8d:04:c5:ae:4c:df:ca:
38:42:46:19:e9:e3:ff:5c:16:20:68:9b:c0:7d:47:1b:68:9b:
c3:62:b7:c2:16:f6:72:b4:e8:da:c5:d8:ff:f7:8c:d6:21:d1:
93:b0:26:4a:ab:17:16:12:9f:b3:ec:e6:b5:f2:79:f5:0b:9b:
49:92:4a:66:3c:27:a4:83:f2:70:a4:c1:55:46:9e:87:07:c4:
32:09:e9:19:1a:5f:23:97:5b:06:fd:23:03:de:46:92:94:af:
ed:f9:86:8d:f9:8b:ce:75:5d:89:01:3a:74:d4:87:74:30:94:
fe:0f:9a:55:37:62:e9:12:5d:44:74:df:55:6b:0a:2f:9d:ab:
b5:f8:01:1e:2e:73:cb:2b:29:ba:1b:08:38:65:6f:32:3d:1a:
d9:1e:93:1f:40:04:3e:cb:bc:9f:7e:73:89:86:d2:f4:2e:a9:
7e:91:c8:8c:dc:62:b9:e3:b7:de:ca:b4:6b:33:31:21:18:7c:
6b:d1:87:46:6d:96:bd:ed:4c:b2:a4:53:ae:3b:00:7d:a0:8e:
5d:fc:a8:e9:e8:4c:ff:23:63:b7:9e:c1:51:c0:48:ec:34:56:
2d:c0:43:8a:89:c3:f1:fc:21:3a:db:ef:18:46:c8:28:f8:be:
0a:d6:bb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:27:33 2025 by rpki-client