Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/sbSQyxPLmKWv0FC39S3HHM2xa6w.roa
File: sbSQyxPLmKWv0FC39S3HHM2xa6w.roa (raw, json)
Hash identifier: u170yX0a6Jii29O1wm6n/a3vhANGyQ5cbWVo8PIFFwk=
Subject key identifier: B1:B4:90:CB:13:CB:98:A5:AF:D0:50:B7:F5:2D:C7:1C:CD:B1:6B:AC
Certificate issuer: /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Certificate serial: 01941FFA26458E99BAF1EB5D1325B172F191
Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/sbSQyxPLmKWv0FC39S3HHM2xa6w.roa
Signing time: Wed 01 Jan 2025 03:47:54 +0000
ROA not before: Wed 01 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 193.16.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:26:45:8e:99:ba:f1:eb:5d:13:25:b1:72:f1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1b490cb13cb98a5afd050b7f52dc71ccdb16bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:ae:32:5d:c4:69:f3:4c:e8:ac:fe:54:d8:
da:23:62:73:b7:1c:e6:de:78:3e:f1:fe:62:a6:8c:
fc:a9:9f:80:ff:30:e9:8d:58:07:26:73:7b:ea:05:
c9:77:3d:c4:56:56:75:7b:41:92:f6:6f:7e:d8:c0:
63:ac:d8:31:46:fd:38:cb:73:21:aa:f7:53:73:2c:
f8:b4:22:45:22:69:d7:e6:a8:63:1e:6c:34:53:92:
2a:fb:09:66:4f:62:1e:2a:78:9c:c8:3c:16:58:c0:
76:c6:ec:0d:76:d2:70:7b:da:56:64:5f:05:a2:d7:
cb:a8:d2:62:4c:8e:1f:94:61:ab:64:b6:57:f8:ac:
89:70:e1:a2:4b:6e:22:e6:0e:42:18:ca:02:22:86:
c9:85:3f:dd:f9:83:57:3b:e0:5e:a8:de:9a:9a:87:
5a:4a:77:fe:4c:73:71:0b:44:97:25:55:56:3e:e6:
de:6c:f5:5e:71:20:91:2f:1a:d6:08:f4:bb:2f:25:
94:13:90:e3:2f:17:34:79:66:14:0e:72:ba:04:74:
ad:32:24:5a:ab:07:5a:fa:c4:72:3e:1a:2d:75:7e:
5b:38:6b:f3:ad:1e:34:2a:1a:6e:29:99:75:9e:cc:
c5:3d:70:8a:c9:18:29:aa:fb:fc:03:e9:84:5b:3e:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B4:90:CB:13:CB:98:A5:AF:D0:50:B7:F5:2D:C7:1C:CD:B1:6B:AC
X509v3 Authority Key Identifier:
keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/sbSQyxPLmKWv0FC39S3HHM2xa6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.155.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b2:01:b4:b5:c4:e6:e1:1b:d9:8a:e2:70:ec:20:e2:03:18:
a1:23:28:8b:bc:bd:cf:aa:5d:cb:2a:17:5f:3c:15:d6:f2:1d:
b8:c7:7e:bd:74:5a:72:c2:d0:a0:d2:f0:58:19:97:e4:10:93:
e1:fb:49:de:70:5d:b1:db:ad:c2:7d:87:55:22:fc:4b:15:d1:
19:5b:33:e8:8c:2e:ab:40:05:05:ed:89:cd:87:1e:7c:6c:fc:
b9:48:79:6d:ca:2a:70:80:25:f1:58:41:6c:a6:b5:3a:ef:e0:
89:d1:39:79:e7:9e:0b:05:73:97:eb:00:9a:78:ff:66:86:d7:
e8:dd:6a:aa:0e:5f:da:d7:33:47:df:73:78:2b:83:09:6f:30:
f9:d9:11:b8:63:59:85:b5:0e:f6:93:67:95:2f:45:c8:c9:4e:
48:4d:27:86:c8:5e:bf:e0:1e:96:f8:ca:26:bf:a9:69:98:e7:
4c:84:ff:cb:17:01:14:18:d5:ff:93:93:5e:37:70:e8:73:f1:
59:43:64:16:f5:db:6a:d3:fe:39:65:f2:9a:2a:40:3e:86:e2:
df:59:2d:a3:df:8a:87:11:31:b6:f2:6f:74:ae:08:23:ac:d2:
7b:6a:e9:0f:53:7a:c1:d2:7d:a8:23:4b:69:b4:79:ee:18:5c:
e0:97:e4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:52:53 2025 by rpki-client