Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/DkUOS-7Geo49d0Nh-2-IQuK04LY.roa
File: DkUOS-7Geo49d0Nh-2-IQuK04LY.roa (raw, json)
Hash identifier: U+IaFC9jrzPW5vZBo+Ho3GIYBe2Y+qIpZI+pYfAAT+8=
Subject key identifier: 0E:45:0E:4B:EE:C6:7A:8E:3D:77:43:61:FB:6F:88:42:E2:B4:E0:B6
Certificate issuer: /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Certificate serial: 0194228DFC0EAE232ECBB74FD392B4D9F6FF
Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/DkUOS-7Geo49d0Nh-2-IQuK04LY.roa
Signing time: Wed 01 Jan 2025 15:48:37 +0000
ROA not before: Wed 01 Jan 2025 15:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47474
IP address blocks: 193.110.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:fc:0e:ae:23:2e:cb:b7:4f:d3:92:b4:d9:f6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Validity
Not Before: Jan 1 15:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e450e4beec67a8e3d774361fb6f8842e2b4e0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:9c:6c:7f:c5:99:3d:20:f8:f3:c5:cc:d6:
a4:69:3d:e4:fa:93:b4:c3:16:be:45:60:e8:e0:ff:
80:d5:0a:ef:45:83:23:69:06:4c:63:2a:8e:a5:b1:
f5:63:89:eb:12:92:6f:57:8c:0c:c8:02:71:23:47:
c4:6e:75:ad:3e:ca:22:2f:31:0d:69:bf:3a:a2:db:
0f:ca:8b:db:77:e8:82:19:b6:8f:36:3f:02:09:61:
5c:45:62:b0:ab:51:2d:b9:fc:19:49:cf:27:73:24:
88:f2:b8:91:44:04:e2:45:81:2e:fd:79:9b:e1:54:
83:a2:1c:04:36:90:46:66:f9:c9:7d:d7:a8:3c:c8:
f7:64:43:92:76:cc:8d:23:ac:ed:ed:5b:9b:6b:66:
a7:0a:00:b5:c6:eb:73:47:d1:4c:cb:a8:a9:43:2c:
aa:0c:9c:7f:cb:1d:a1:52:3f:cd:05:45:9d:5a:58:
e1:23:5c:99:3a:5a:f6:fc:75:31:98:e1:6a:5c:98:
ec:66:5f:c5:6e:b8:b3:06:cf:9f:2e:f2:b4:a0:7f:
9c:4f:36:c9:98:1f:8f:ac:72:c1:47:2e:e5:1d:88:
d7:ff:d4:0b:55:08:c1:e9:1f:e7:3c:ea:e7:92:07:
c9:ba:c3:3c:8a:3d:9c:33:18:fe:2f:96:ea:7d:8b:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:45:0E:4B:EE:C6:7A:8E:3D:77:43:61:FB:6F:88:42:E2:B4:E0:B6
X509v3 Authority Key Identifier:
keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/DkUOS-7Geo49d0Nh-2-IQuK04LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.240.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:2f:aa:e5:d3:c7:75:bd:a0:4d:77:17:91:cf:f4:19:6e:fb:
de:b7:c6:da:47:4a:a5:e2:22:40:f2:37:29:ce:07:55:01:43:
b9:71:22:89:5e:54:bb:16:58:00:87:68:bf:b6:2d:f4:b1:d1:
32:2d:e6:ce:4b:1c:1a:9a:65:52:a9:4e:5c:cd:ff:90:dc:09:
78:64:41:84:f9:f3:f0:51:62:9b:ae:d5:12:f3:e6:26:ee:ec:
b6:98:91:7e:26:02:ee:b7:b9:5b:f8:3b:bc:69:39:6b:1a:f2:
6d:22:b0:fd:44:4d:bb:13:d9:7b:3f:67:ff:90:48:d5:68:b0:
e8:13:64:af:9e:07:fb:bb:66:52:fa:e0:a4:7a:f2:d1:81:12:
1d:8a:fa:1f:42:23:96:0f:12:68:8a:f0:71:4b:e6:1e:a5:4f:
9d:36:66:cc:46:a7:cd:97:37:65:4e:a2:f5:74:e8:73:cd:79:
df:53:5e:b6:03:c5:13:d7:6f:d6:da:ac:c5:69:1f:07:f4:e3:
bc:7f:87:a8:e7:f4:c3:6f:61:28:3a:55:f1:1a:18:bb:f2:8f:
31:f4:a7:18:c7:da:2c:ed:f1:6c:5f:45:b3:98:f2:68:06:ff:
c7:93:8e:45:92:70:c8:f4:fa:9b:af:96:eb:14:7d:a5:84:e1:
d2:cf:aa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:22:03 2025 by rpki-client