Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/0pSLjaK5jJNleu-R1-JaIUNyXTw.roa
File: 0pSLjaK5jJNleu-R1-JaIUNyXTw.roa (raw, json)
Hash identifier: du8WDP9/QiGqQOMX+ttIn10kEatb/Zs0qVgMPU5RqcE=
Subject key identifier: D2:94:8B:8D:A2:B9:8C:93:65:7A:EF:91:D7:E2:5A:21:43:72:5D:3C
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0194228DFA0B2C89D1910087EBBD60717865
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/0pSLjaK5jJNleu-R1-JaIUNyXTw.roa
Signing time: Wed 01 Jan 2025 15:48:37 +0000
ROA not before: Wed 01 Jan 2025 15:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 213.21.238.0/24 maxlen: 24
213.21.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:fa:0b:2c:89:d1:91:00:87:eb:bd:60:71:78:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 1 15:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2948b8da2b98c93657aef91d7e25a2143725d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:01:12:44:2c:40:33:f5:0c:d4:15:b9:38:
da:e8:1e:bf:25:57:43:f9:eb:2f:3b:e6:ac:d0:48:
34:da:2d:e6:7f:c7:0d:87:28:86:64:55:98:88:81:
42:52:65:7a:4d:b4:f6:d6:78:65:7d:8c:91:f3:77:
7a:a6:6b:16:43:c3:7b:11:6b:d5:2a:72:60:5f:36:
15:fd:94:42:65:89:17:9c:65:a4:2c:99:dc:ad:62:
3b:e0:b2:1f:51:80:98:96:9b:0b:33:b8:11:5e:44:
02:d1:f1:0a:40:4a:c7:e3:42:63:d3:49:30:da:ef:
d1:86:3a:3e:28:d2:ca:aa:ef:a0:eb:05:31:09:77:
21:ec:f0:b1:17:bb:fe:c6:1b:33:23:b4:b1:6c:bf:
f0:c3:81:37:a2:82:be:b6:86:40:b3:c8:67:e4:7c:
4e:a3:3f:fa:cf:d2:62:7a:db:b1:fb:02:7c:be:e2:
0e:ab:5c:93:dc:0d:37:47:65:81:c7:b1:31:83:57:
86:50:cd:eb:b3:75:1b:37:2d:86:86:a7:86:19:c1:
10:ef:54:ec:be:c1:b8:f1:47:63:d2:f2:06:00:2e:
21:09:55:93:34:f5:41:c3:75:2e:7f:9c:2e:e6:45:
cb:6d:de:a0:7a:90:bd:17:96:02:a7:c9:cd:08:11:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:94:8B:8D:A2:B9:8C:93:65:7A:EF:91:D7:E2:5A:21:43:72:5D:3C
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/0pSLjaK5jJNleu-R1-JaIUNyXTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.238.0/24
213.21.248.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:78:38:f3:76:d5:24:31:b6:2a:2c:5d:d7:84:6f:89:bb:86:
89:6f:eb:55:4f:8e:02:2e:2f:cf:99:a6:c7:c8:0d:2b:cd:05:
10:8f:be:25:8b:38:4a:b5:5d:17:c1:b9:99:43:40:55:e4:43:
50:94:c9:53:e6:69:23:3e:68:95:b2:30:67:da:7a:dd:db:2a:
61:98:83:06:6c:e2:5b:6d:ba:a6:90:64:b0:cd:30:72:44:86:
d9:cc:55:3b:1f:7d:31:2e:fa:69:41:52:3a:95:f9:4d:fc:67:
b8:9c:ab:87:da:bf:02:76:66:71:0e:ba:44:c7:17:fe:d6:77:
d4:c5:04:a6:84:a1:1e:4e:bc:ef:b4:2e:79:49:0b:d4:36:e2:
c9:d4:b6:06:62:dd:78:ed:e1:37:cb:47:21:79:46:15:0f:01:
b3:71:be:a3:5f:e3:7f:e8:c1:9c:79:93:b2:79:1f:93:68:60:
89:c4:ce:78:a4:b1:2d:4e:5a:9f:0d:b5:1d:4f:a9:fd:c4:9e:
c3:69:09:d6:cf:82:6f:44:38:48:d6:80:59:06:32:cc:f0:11:
d7:25:04:bf:83:4b:d9:79:ef:40:28:3d:b8:96:df:e5:3a:a3:
02:38:e0:7d:c6:9c:bb:9d:7c:85:af:8a:c8:4a:17:4b:bf:40:
4e:cd:de:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:13 2025 by rpki-client