Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/9qEL2pFi8GcNKTnAwY3D31I1-18.roa
File: 9qEL2pFi8GcNKTnAwY3D31I1-18.roa (raw, json)
Hash identifier: kRwBp+rZmhG6iafwWEWyexpHApyotJ76NYZuUZZ35QQ=
Subject key identifier: F6:A1:0B:DA:91:62:F0:67:0D:29:39:C0:C1:8D:C3:DF:52:35:FB:5F
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 019424B3A6DAF25C726384AB9E066EF72717
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/9qEL2pFi8GcNKTnAwY3D31I1-18.roa
Signing time: Thu 02 Jan 2025 01:49:00 +0000
ROA not before: Thu 02 Jan 2025 01:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39599
IP address blocks: 193.93.104.0/23 maxlen: 23
193.93.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a6:da:f2:5c:72:63:84:ab:9e:06:6e:f7:27:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6a10bda9162f0670d2939c0c18dc3df5235fb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8c:c2:e2:e0:e8:be:6b:a3:e7:b1:6a:82:15:
2c:a2:cc:8f:df:93:e4:72:f6:1e:91:f7:03:17:4b:
6d:a5:25:73:2e:9c:9b:c0:cf:e9:2a:e1:60:c9:ea:
a7:aa:22:30:c2:a8:9b:ec:28:ce:d6:c6:80:3e:f9:
6c:b4:1d:b9:11:34:a3:05:f2:00:6e:3f:14:bb:26:
b1:38:39:b4:6f:db:4c:c2:4d:81:b2:9d:1e:e5:ea:
8b:c2:6a:90:67:0d:42:f7:82:bf:a6:68:58:dd:33:
94:36:8f:67:23:f9:25:85:59:83:f4:7e:a8:71:81:
50:fa:ab:1d:52:2b:29:7c:d3:04:fe:dc:48:72:3b:
de:30:c9:3c:2a:77:65:8e:a7:63:6f:47:ce:99:55:
6d:61:3b:01:53:73:bd:7f:78:1b:cd:99:c2:93:2d:
e7:f9:7d:02:ad:6d:ec:c6:9b:c4:ab:4c:e1:7c:80:
42:8a:b3:01:b1:d9:61:9d:8f:84:fa:e6:8e:b9:a5:
24:c5:b6:cb:ac:69:da:a5:25:cd:22:d0:7e:94:6c:
3e:ac:7a:61:cb:bb:b8:27:3d:52:a8:01:bb:a0:43:
f7:f9:b0:7d:fe:95:d4:ac:30:1a:ca:0a:0c:f9:c5:
57:0c:80:32:95:8a:77:4b:30:4d:47:63:49:3c:cc:
a0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A1:0B:DA:91:62:F0:67:0D:29:39:C0:C1:8D:C3:DF:52:35:FB:5F
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/9qEL2pFi8GcNKTnAwY3D31I1-18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.104.0/22
Signature Algorithm: sha256WithRSAEncryption
97:7e:a1:a3:5c:77:eb:94:9a:a8:54:15:ca:bd:1e:db:17:ea:
0c:ec:85:57:21:79:47:20:1c:3f:84:4f:c5:58:1d:64:ab:cc:
00:66:72:70:b8:86:02:b4:8f:d1:48:ba:11:ee:5b:f3:6b:27:
78:62:e9:8a:03:16:eb:45:0d:ad:cd:2c:c2:d0:1a:ba:c6:9b:
ab:ef:d5:32:74:dd:80:66:0d:56:72:87:30:8e:fa:7b:5c:a4:
e8:b7:29:42:f2:a4:39:82:39:ce:31:8f:2a:67:e8:01:1a:97:
1a:bd:3e:1f:de:df:74:46:e1:7c:78:be:a8:86:3f:76:5c:81:
68:69:94:dc:68:4d:58:f3:43:8c:b4:2d:13:37:60:a1:cc:01:
dc:02:4e:b3:cf:1e:f9:f5:f4:da:4d:4a:f3:86:54:fc:3f:1f:
34:dc:1a:5e:d7:d2:78:2f:10:79:e9:c9:60:49:0a:6f:40:3a:
66:ee:8c:b4:3b:5d:cc:c9:13:fb:3b:a6:5d:fc:7b:3a:07:70:
b4:36:04:36:e6:df:86:a5:8e:6b:15:1f:b5:f7:db:ec:db:ca:
2b:61:21:b0:89:82:d9:39:b4:ec:8a:3f:db:65:17:88:ac:6e:
27:64:b4:4d:32:4a:e0:fc:0b:62:3b:26:82:91:c0:2d:d7:05:
f9:7c:25:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:40 2025 by rpki-client