Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/a4XCmBSUFP_yl4L96gtg6U9Ozn0.roa
File: a4XCmBSUFP_yl4L96gtg6U9Ozn0.roa (raw, json)
Hash identifier: FJxd7UG3Dpf9Q0TJKoxdhkygKRFy48iyIOOg3rogNwA=
Subject key identifier: 6B:85:C2:98:14:94:14:FF:F2:97:82:FD:EA:0B:60:E9:4F:4E:CE:7D
Certificate issuer: /CN=815887f45abbc081aa469a65c1798de6110d9c89
Certificate serial: 019427484AB7B7E210F1F13D7A3B560AA20A
Authority key identifier: 81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/a4XCmBSUFP_yl4L96gtg6U9Ozn0.roa
Signing time: Thu 02 Jan 2025 13:50:36 +0000
ROA not before: Thu 02 Jan 2025 13:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 194.48.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4a:b7:b7:e2:10:f1:f1:3d:7a:3b:56:0a:a2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815887f45abbc081aa469a65c1798de6110d9c89
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b85c298149414fff29782fdea0b60e94f4ece7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:7d:41:25:27:32:c9:e0:3b:61:c1:42:f5:
76:70:4c:15:d4:64:45:e1:38:b6:3c:43:9e:b3:30:
32:2b:55:58:20:94:ca:c7:a6:c8:dd:22:8f:d4:65:
e3:52:0b:7d:6c:ee:d7:97:ef:25:e1:59:e1:7a:6f:
eb:79:eb:8c:00:9a:53:fc:b4:2e:74:65:62:77:5b:
1a:bb:2b:6c:f4:97:f1:f5:49:2f:e8:ab:2a:79:e0:
31:66:47:fc:e1:4a:9c:1d:94:b7:8a:ab:a8:5e:54:
4b:f7:c2:3b:f7:c4:49:fd:4e:0d:c7:bb:9b:7d:50:
6b:2b:d2:89:98:96:42:99:84:33:49:b7:81:50:0e:
1a:4a:e5:3a:e2:45:df:0e:e7:9d:5a:62:41:4b:fd:
ce:c1:20:74:e4:f3:cb:3d:f2:14:46:bc:3f:5e:88:
72:c5:4c:b4:72:41:81:eb:72:69:1e:3c:4f:fb:a9:
90:6e:3d:68:2d:cc:02:55:11:99:7f:b0:32:d7:a5:
0f:95:f8:d6:e8:e3:15:01:cd:a3:98:5d:39:ed:7b:
51:30:b8:99:e8:02:a5:c3:c7:cc:71:67:4b:4c:9b:
fd:26:7d:33:8a:06:81:fc:6c:e4:aa:ab:9d:e1:37:
0f:0b:32:a8:66:11:4f:78:50:a0:f7:1b:eb:8b:cf:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:85:C2:98:14:94:14:FF:F2:97:82:FD:EA:0B:60:E9:4F:4E:CE:7D
X509v3 Authority Key Identifier:
keyid:81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/a4XCmBSUFP_yl4L96gtg6U9Ozn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.215.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:e1:f5:55:b6:9b:61:76:da:96:fe:02:3f:8f:2a:b8:46:c9:
41:59:2f:b7:eb:a3:f2:5d:4c:5b:50:04:47:de:61:63:1a:28:
77:e9:74:37:29:c1:23:8e:a5:15:8e:b0:7f:5d:c2:e9:12:10:
56:21:60:ea:b3:e5:38:6f:cc:8b:36:2b:30:07:78:86:60:fa:
f3:b7:f7:f8:7c:5c:97:66:78:9a:36:be:d2:1f:04:6f:32:83:
11:80:de:06:c5:5d:b4:a3:ea:d9:3c:2c:16:e5:82:c3:69:59:
64:ce:ee:40:c5:28:c5:8a:ff:bc:f1:e6:29:f9:13:57:84:10:
54:a3:fa:e8:53:82:fe:f9:ef:4d:0b:83:27:9c:23:6c:7f:e3:
d9:5f:fd:39:2a:f1:cb:67:85:f1:b1:19:47:ae:37:c8:9e:98:
5b:09:8d:aa:7e:17:06:ee:2b:cb:c3:78:02:bf:aa:1d:84:4a:
74:56:fa:24:b6:72:11:30:5c:37:62:40:62:2f:7e:ee:92:dc:
34:d9:07:ed:c6:66:e9:32:99:4e:5f:1f:54:76:30:4a:3d:7b:
42:30:57:64:b6:75:5f:2c:92:6e:3d:95:72:ab:49:70:e0:e8:
40:25:27:40:ab:79:05:95:c2:76:63:5b:2a:16:79:56:fd:d5:
41:bf:37:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:48:39 2025 by rpki-client