Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/acPi59o4wVVZeOHU9oZPjllUUps.roa
File: acPi59o4wVVZeOHU9oZPjllUUps.roa (raw, json)
Hash identifier: 2eL6nS+2lKDaqtTyfOHATxdmfyiGwQat9I945o86VvI=
Subject key identifier: 69:C3:E2:E7:DA:38:C1:55:59:78:E1:D4:F6:86:4F:8E:59:54:52:9B
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0195130004284A613915C18B28F6AB039625
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/acPi59o4wVVZeOHU9oZPjllUUps.roa
Signing time: Mon 17 Feb 2025 08:22:02 +0000
ROA not before: Mon 17 Feb 2025 08:22:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49419
IP address blocks: 193.235.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:00:04:28:4a:61:39:15:c1:8b:28:f6:ab:03:96:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 17 08:22:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69c3e2e7da38c1555978e1d4f6864f8e5954529b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ea:47:02:4a:16:a3:44:99:8e:f5:b4:14:e8:
8f:38:d4:02:ae:bc:4c:bd:b9:56:0e:be:a6:34:9e:
cf:e0:c8:ca:65:67:6a:a9:ea:bf:f5:fd:aa:c5:7f:
40:dc:30:8f:f3:34:f0:43:1d:bd:b3:54:04:05:c1:
fa:1b:fc:f2:14:6c:df:4a:ff:38:fc:31:77:49:35:
c7:fe:62:67:72:80:3f:ac:76:e7:9d:4a:8c:23:9a:
31:b5:8f:89:3c:60:4e:8a:26:4d:0b:b9:75:a9:16:
c1:18:e8:aa:d6:d7:9e:b0:e1:c6:1c:f0:55:17:fc:
34:30:52:71:dd:5a:9b:68:30:4d:2e:88:1e:06:76:
29:e7:4e:36:ff:b9:22:e9:45:8e:56:37:28:23:92:
5e:6b:0e:35:ce:05:0a:8e:8c:94:e9:ed:a4:db:aa:
2d:18:c8:16:cd:a7:ed:cd:5d:f1:7b:1e:e3:94:51:
76:ad:e4:51:6e:f0:ad:86:df:ad:d0:68:3d:08:5c:
a8:da:c9:42:53:29:80:32:16:37:5f:d9:34:95:0b:
6e:8b:c1:26:14:ea:41:e5:2a:bb:85:c7:ae:22:d0:
8c:6b:2f:46:d3:a1:74:47:1b:e5:cf:cb:57:4d:a7:
a1:8a:d1:9e:d4:2d:74:36:4a:c2:e3:01:4e:34:b9:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C3:E2:E7:DA:38:C1:55:59:78:E1:D4:F6:86:4F:8E:59:54:52:9B
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/acPi59o4wVVZeOHU9oZPjllUUps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.154.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c7:aa:35:ae:33:95:bf:8f:e6:3b:08:69:16:c5:47:ea:fe:
73:d5:75:3f:80:0a:0f:b4:00:3e:a2:37:70:32:36:32:73:07:
02:96:39:f0:cd:61:16:52:30:2a:1a:19:63:d5:13:ba:75:ff:
66:c8:ab:e5:4e:8e:fd:23:9c:8d:ae:7f:a9:b2:0b:7b:60:e9:
25:10:29:85:47:4d:a0:20:36:be:93:48:5b:1d:e1:04:65:c1:
de:5b:dd:c6:e9:25:6b:b2:0e:fc:61:94:af:22:1f:6a:f6:d8:
95:8c:c6:73:f3:80:6f:ca:e6:73:ed:95:78:20:05:18:42:57:
5c:56:3f:93:52:74:8b:db:05:ba:b7:99:4a:e6:a9:54:25:9b:
20:3d:39:77:e4:6d:2c:2f:6c:2c:b7:81:e0:2a:78:81:52:95:
36:7a:f7:4d:a5:00:1b:ab:5c:f4:87:e4:54:68:86:ac:78:d4:
2f:19:ff:70:79:bb:de:81:1a:6c:24:d4:fc:9c:1b:9b:5c:d2:
69:ec:4e:bc:05:30:9f:8e:00:bd:a9:5c:70:dd:25:98:2c:90:
bd:2f:cf:47:62:1c:79:8b:8a:08:4b:30:e7:01:20:b6:c3:2d:
5f:a2:a5:d6:d8:19:1d:e8:35:1c:1f:e8:3d:6a:29:19:bf:a5:
df:bc:32:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:49:53 2025 by rpki-client