Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/ai_A7AG70LoK-2voHZXOhAOVMf0.roa
File: ai_A7AG70LoK-2voHZXOhAOVMf0.roa (raw, json)
Hash identifier: hn2u5HU4dhrWeJ6INpgfQ8ZAf8MY3atf6SETHEmPiMU=
Subject key identifier: 6A:2F:C0:EC:01:BB:D0:BA:0A:FB:6B:E8:1D:95:CE:84:03:95:31:FD
Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial: 019425FCC34945C3997C1B17BEF7F2064ACD
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/ai_A7AG70LoK-2voHZXOhAOVMf0.roa
Signing time: Thu 02 Jan 2025 07:48:29 +0000
ROA not before: Thu 02 Jan 2025 07:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 193.36.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:c3:49:45:c3:99:7c:1b:17:be:f7:f2:06:4a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Validity
Not Before: Jan 2 07:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a2fc0ec01bbd0ba0afb6be81d95ce84039531fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:da:9d:9c:fe:8a:19:50:a7:b2:bf:67:df:
84:f5:93:79:65:e0:6e:9d:e4:00:e3:60:3c:11:d1:
4c:4f:1d:5a:0b:85:ea:6d:4b:80:73:c6:ab:02:a7:
26:3d:09:a9:04:06:a8:64:fa:fb:40:ec:6c:d2:6c:
38:09:db:56:c5:b5:e1:14:a2:db:f6:78:8d:65:a1:
bb:f3:3e:c7:9b:a2:8b:44:a5:ee:46:ab:8d:95:1a:
4b:2a:34:86:1f:a3:ab:14:22:47:ed:eb:40:2c:d0:
82:ff:a8:ac:52:15:11:5d:9b:ac:83:7b:eb:c1:c8:
73:fe:f1:ea:34:4d:f8:89:7f:59:31:f6:9b:02:0b:
d1:d4:61:1b:35:90:a5:66:33:28:64:03:1e:e6:ad:
e1:79:2e:23:b7:cb:6e:a5:57:fd:ae:3a:27:37:48:
34:30:d8:3a:3a:2f:fa:07:25:a4:66:af:a6:92:af:
e8:44:5b:f0:7b:ad:84:99:74:50:d1:43:ab:8d:6f:
0d:8f:02:11:1d:2a:46:fe:47:0a:ef:20:98:d6:87:
58:89:2d:b9:a9:bf:a4:58:08:eb:fd:b4:20:e4:d3:
14:40:9d:ac:83:42:25:98:a0:87:9f:2c:f0:47:f6:
8d:e5:e0:b4:54:f9:ec:2a:a9:85:aa:f0:82:b9:86:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2F:C0:EC:01:BB:D0:BA:0A:FB:6B:E8:1D:95:CE:84:03:95:31:FD
X509v3 Authority Key Identifier:
keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/ai_A7AG70LoK-2voHZXOhAOVMf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.227.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ad:5c:8e:76:5d:a5:86:bb:3b:a8:94:92:01:a5:a8:59:d6:
99:28:fb:5e:80:38:bb:aa:b3:ef:e5:d4:3b:0f:12:7f:9d:81:
ab:63:57:64:87:11:d1:ad:9b:dc:91:62:b8:84:12:29:1c:27:
c3:38:3f:0b:e0:1f:24:0e:82:8f:b6:ff:57:8b:39:c1:49:68:
f3:16:90:f0:aa:03:80:98:50:41:c4:21:de:cd:21:0b:09:f8:
b6:4a:06:41:19:de:51:ed:d6:3f:54:33:c6:f2:42:53:34:45:
6a:8d:d4:77:fa:dc:f4:c7:a4:e9:52:a3:42:eb:2b:d5:0d:01:
af:de:f4:65:bc:b2:c4:1a:3b:34:15:f5:f0:75:70:32:c9:d6:
2c:37:71:dc:61:09:61:16:d2:4d:ec:27:f8:ff:b6:b3:f4:79:
00:11:c7:f9:25:05:a2:e4:9e:08:4c:3a:4c:2a:4c:d1:ad:7d:
89:6e:6b:00:ee:5b:e2:35:6e:0f:11:47:96:a5:e3:47:7c:12:
9e:0a:85:5a:06:aa:84:98:28:9f:cf:98:f6:04:53:1d:fe:af:
8c:51:7a:08:0a:23:87:db:64:cf:d1:89:63:f3:b8:35:d5:13:
60:e2:65:65:0a:7a:f9:d1:dd:8e:71:01:6b:7c:91:e7:ab:e0:
09:b1:26:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:16:55 2025 by rpki-client