Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/s09aV916ePc245Z9GMH4Ts0cTn8.roa
File: s09aV916ePc245Z9GMH4Ts0cTn8.roa (raw, json)
Hash identifier: hdMuDE9zUjm2uLsuj9BEHmHlQ1AMBc0s6keoHZxmUYQ=
Subject key identifier: B3:4F:5A:57:DD:7A:78:F7:36:E3:96:7D:18:C1:F8:4E:CD:1C:4E:7F
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 01942143AE4A8DB04EC741B224D4515EF4F4
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/s09aV916ePc245Z9GMH4Ts0cTn8.roa
Signing time: Wed 01 Jan 2025 09:47:51 +0000
ROA not before: Wed 01 Jan 2025 09:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 193.39.32.0/20 maxlen: 20
193.193.96.0/20 maxlen: 20
212.43.160.0/19 maxlen: 19
213.147.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ae:4a:8d:b0:4e:c7:41:b2:24:d4:51:5e:f4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Jan 1 09:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b34f5a57dd7a78f736e3967d18c1f84ecd1c4e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:db:e9:ed:24:6c:8d:98:a5:f1:97:41:b8:
2f:69:b6:e0:97:9d:fc:80:38:ef:73:1a:ba:a4:3b:
62:93:6e:dc:65:4b:63:d1:c1:02:3d:78:9d:70:fb:
e5:6f:29:b6:6b:4b:7b:71:85:1e:14:2a:c3:90:ff:
6f:14:e2:11:bc:7a:04:56:9e:63:2c:d3:31:f5:87:
33:fa:93:07:48:bf:7e:bf:a5:69:77:0b:14:75:16:
b8:90:25:7d:ab:43:43:ff:05:5b:8f:34:70:17:ba:
05:7d:34:49:d4:09:23:36:59:b0:cb:31:cb:c1:f9:
e4:15:65:53:d9:c0:ae:8c:a1:16:33:1a:4e:df:c8:
ed:46:09:ce:5e:6b:f4:9f:9b:e1:ab:77:20:f1:65:
7e:b9:2b:71:b8:77:2d:c6:77:60:b5:4e:1b:30:b3:
5a:3b:8c:28:cd:ba:df:12:78:b2:c4:49:5d:2d:33:
40:a8:9f:ed:02:f6:e9:e1:ae:ea:a7:bb:68:02:f4:
2e:e8:20:81:57:f7:51:a0:af:dd:e8:49:81:43:81:
e7:53:7d:79:35:a2:b2:0b:8b:84:b5:d5:87:93:13:
3c:4e:c7:9f:2f:07:38:30:af:99:fa:af:d5:b1:f9:
d2:57:e4:63:11:b5:da:ca:54:f5:0a:ab:ef:12:1b:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4F:5A:57:DD:7A:78:F7:36:E3:96:7D:18:C1:F8:4E:CD:1C:4E:7F
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/s09aV916ePc245Z9GMH4Ts0cTn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.32.0/20
193.193.96.0/20
212.43.160.0/19
213.147.224.0/19
Signature Algorithm: sha256WithRSAEncryption
12:a9:1b:fb:04:f3:41:fe:0b:99:c2:3f:52:01:ab:78:cc:77:
d8:f9:e9:1a:68:43:d1:29:b6:ed:10:00:07:89:39:c3:08:3d:
1a:d6:30:fe:a4:67:c5:e9:2e:31:74:3e:ba:73:98:5d:4a:b7:
cc:6e:36:63:62:19:e8:d4:eb:43:2d:c3:2f:ee:ab:14:e1:53:
78:65:9a:08:27:f4:f5:f4:05:e0:a0:95:a1:e8:df:f1:88:66:
27:cf:e8:a5:75:c0:29:3b:c2:f1:80:ba:3e:e1:92:33:23:e2:
93:d6:f8:35:99:73:b9:27:99:b2:61:38:2f:cb:9b:16:81:2d:
e8:29:ba:ea:dd:42:d7:1d:af:2f:1d:25:43:a0:c6:fc:66:ec:
30:00:66:f7:8a:bc:9e:1c:ef:70:eb:7d:aa:bd:fb:c2:3e:09:
1e:6b:e5:fe:a7:b8:f3:69:1a:86:13:7a:a3:50:ea:09:a7:3e:
1b:2a:6c:8e:2a:51:03:03:9e:d1:19:98:7a:10:ee:ad:6b:6f:
60:81:30:5d:ef:20:91:94:67:bc:3d:f6:fe:16:6d:43:25:2a:
06:35:40:2e:99:b2:d0:44:74:36:f9:4f:d6:22:39:d7:be:75:
ea:32:2f:3a:29:df:42:21:64:bd:8d:8e:b7:d2:ec:37:a6:8b:
e5:ae:43:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:07 2025 by rpki-client