Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/DBzbCVVWKBBC28Y3-45UdBhQsro.roa
File: DBzbCVVWKBBC28Y3-45UdBhQsro.roa (raw, json)
Hash identifier: vieVkdTJtG2uejbz3Rj9wI1wTAldkSJkHwon8UEhcVM=
Subject key identifier: 0C:1C:DB:09:55:56:28:10:42:DB:C6:37:FB:8E:54:74:18:50:B2:BA
Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial: 019420685E73131EC4C1C3340279FC404F9D
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/DBzbCVVWKBBC28Y3-45UdBhQsro.roa
Signing time: Wed 01 Jan 2025 05:48:18 +0000
ROA not before: Wed 01 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15987
IP address blocks: 193.29.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5e:73:13:1e:c4:c1:c3:34:02:79:fc:40:4f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c1cdb095556281042dbc637fb8e54741850b2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:a4:3b:fa:38:c2:39:2e:9d:68:fb:ed:76:
e9:a5:d5:ed:f3:f7:50:5b:dd:99:74:43:f6:ec:0f:
09:39:96:76:1c:d5:8c:2f:20:18:c3:ce:89:24:8c:
54:15:59:01:1c:0e:be:54:c1:fc:48:c0:eb:d3:75:
6f:c2:ac:fe:5e:46:92:f9:87:a6:dc:cf:4e:a6:bc:
55:f1:6a:1d:5a:37:71:36:12:a9:a6:1a:b6:62:a2:
6f:38:80:dc:79:39:4d:37:ba:34:85:7f:2e:59:c5:
9b:e5:c8:52:38:93:0f:e2:c4:7f:05:9d:3e:da:30:
b7:f7:0e:1e:1e:25:e9:f1:36:cc:2f:08:d1:ff:58:
63:a9:83:ba:5e:5b:52:95:14:40:f0:a0:44:53:c5:
14:6e:ad:60:6f:75:0f:57:b7:25:df:5e:fd:f2:59:
42:61:99:b1:63:19:e4:9e:69:84:d3:3c:51:bc:b2:
db:aa:f9:45:64:3b:7b:ce:f7:48:bd:88:a5:fe:6b:
76:f7:61:0a:ff:31:d1:ff:4c:7b:63:2f:f9:12:84:
64:cc:47:d4:96:16:a6:08:44:fe:a1:5f:88:b2:dd:
bb:ae:f9:fb:e3:ad:83:f2:a0:d3:b4:d6:a2:3d:59:
e3:d2:06:a0:e6:41:99:fb:87:75:60:2a:12:f9:d4:
3f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1C:DB:09:55:56:28:10:42:DB:C6:37:FB:8E:54:74:18:50:B2:BA
X509v3 Authority Key Identifier:
keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/DBzbCVVWKBBC28Y3-45UdBhQsro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.25.0/24
Signature Algorithm: sha256WithRSAEncryption
92:23:db:85:a3:04:b7:fe:28:b7:50:fa:01:9d:fa:aa:ba:97:
97:39:70:7b:8a:15:22:c7:25:8b:61:ba:e2:2e:45:04:6e:c3:
a2:a1:a5:e7:86:22:7a:79:b2:98:c6:20:c2:13:29:c6:38:fa:
b9:83:09:ba:14:70:86:ad:de:62:b6:b2:c0:e3:1a:e2:35:52:
b2:05:b9:83:26:21:6e:7b:eb:1f:6f:5f:8e:99:90:05:da:6f:
11:e3:42:d0:45:02:38:b5:27:03:52:19:10:90:a6:92:9d:e5:
a4:5c:2b:d3:be:48:b3:6a:a0:16:96:67:22:b7:88:cb:4b:ef:
52:26:9e:77:c9:71:72:7b:5f:34:19:ca:10:4a:15:79:ac:8a:
f7:3f:68:68:bc:f5:03:29:d3:82:de:2d:eb:c7:a8:09:7d:9e:
71:16:02:a7:36:ad:89:f2:51:7f:9d:04:92:82:44:4d:fe:17:
72:6e:8b:c4:51:76:0b:74:f6:13:88:d6:53:f9:11:19:1c:19:
04:b6:cf:9d:bf:02:1b:38:89:3a:5d:7a:a1:aa:1a:9b:82:32:
ec:be:2d:67:58:ec:bb:c7:21:ba:db:99:a3:ea:23:ea:65:48:
4a:35:9d:e9:b2:93:ba:c9:7d:1b:23:09:b3:50:62:88:bd:58:
99:de:e9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:45 2025 by rpki-client