Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/0xAthu916pMLSA6LAzNdYgS-VXE.roa
File: 0xAthu916pMLSA6LAzNdYgS-VXE.roa (raw, json)
Hash identifier: AkpmQS7tFUygGvZU+BjPsGOPcILRyQ+KZnPhCEBla9M=
Subject key identifier: D3:10:2D:86:EF:75:EA:93:0B:48:0E:8B:03:33:5D:62:04:BE:55:71
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 019421B1BBDEFC832B5D44DB8103BB548067
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/0xAthu916pMLSA6LAzNdYgS-VXE.roa
Signing time: Wed 01 Jan 2025 11:48:03 +0000
ROA not before: Wed 01 Jan 2025 11:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56552
IP address blocks: 193.84.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:bb:de:fc:83:2b:5d:44:db:81:03:bb:54:80:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3102d86ef75ea930b480e8b03335d6204be5571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:3c:88:da:03:1a:b4:ae:10:f9:40:e8:5d:
66:b8:4b:2e:b2:3e:c9:7e:e7:cd:75:a0:73:7d:36:
aa:51:92:13:1e:19:94:e5:1b:97:f0:6a:91:cc:b4:
8b:44:14:97:d0:3c:77:f5:98:3f:98:90:6a:5a:74:
49:8a:9c:0c:44:fe:dc:7c:c8:25:56:61:1f:db:ad:
a7:a2:ee:a0:4a:61:1d:09:84:0c:37:18:74:d9:c0:
74:51:cc:41:42:d9:50:89:0d:52:44:23:6e:d9:1c:
8a:11:1c:e7:33:da:d9:01:48:5c:d1:69:fc:69:1d:
56:8f:6b:ec:d8:ba:69:c9:03:c7:9b:74:19:8e:a7:
a3:ee:bc:6f:f0:cd:3a:7f:cf:a4:f3:2b:d7:25:8e:
f1:a5:17:85:44:1f:dd:72:23:63:83:9a:ed:f6:be:
92:ed:10:12:e2:ce:f0:e9:f0:08:8b:26:d4:96:87:
58:ac:66:8c:7c:8c:9a:fa:c5:25:0d:8f:96:7b:51:
bd:45:1d:f6:54:62:90:44:2e:86:6a:f5:d2:5e:7d:
ea:91:fc:bb:03:5b:14:25:46:f3:3a:b5:0d:f6:d4:
6c:7e:e1:d2:5b:32:9d:1f:a2:a9:c5:d7:b8:d7:28:
0a:97:91:af:04:12:70:64:9a:16:1c:ab:46:6d:07:
b8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:10:2D:86:EF:75:EA:93:0B:48:0E:8B:03:33:5D:62:04:BE:55:71
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/0xAthu916pMLSA6LAzNdYgS-VXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.78.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:62:f1:b0:0c:67:21:b6:55:fc:ea:fe:a8:db:00:64:0a:78:
d6:e4:ce:b7:dd:12:7e:28:4d:ca:51:7c:de:a2:b2:42:a2:cb:
f9:1f:b4:80:08:28:b6:dc:d4:c1:86:65:d4:af:eb:6f:db:67:
8d:52:fe:6d:63:56:4a:c0:a9:35:19:ac:37:44:be:9d:fd:0a:
5f:f2:f6:ed:fe:5b:cb:ca:25:69:15:59:97:24:0a:d9:f5:a8:
91:d9:42:91:43:69:bf:50:e9:e8:a4:61:d5:ce:d7:75:d0:54:
35:b1:81:87:ec:55:c7:cf:1a:fd:66:89:76:4f:41:07:87:21:
b3:c2:f0:43:29:68:02:14:c9:c3:d7:3d:11:57:c9:8c:c8:ab:
82:af:3f:0f:e8:c6:4c:7c:fa:a3:52:48:90:87:1e:0c:82:d3:
8c:21:ea:4b:03:42:d3:36:6e:c5:ed:b1:48:34:21:24:e2:9a:
df:ee:27:4c:ab:6b:63:5b:b0:8e:a5:ee:02:6a:79:e5:cd:15:
39:eb:9f:db:ad:40:93:e4:2a:2c:98:33:62:1f:26:33:68:48:
cf:53:63:6c:87:e6:85:6a:73:a2:72:a1:81:0b:c8:2d:25:f2:
7c:09:e3:2a:cb:3b:c2:c9:7b:5d:82:85:6e:3c:16:1b:d8:0a:
13:b1:91:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:47 2025 by rpki-client