Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/k0ebJfx4OX3BZ7FmMcHzT8cxLzs.roa
File: k0ebJfx4OX3BZ7FmMcHzT8cxLzs.roa (raw, json)
Hash identifier: P7VX1AhbYROtx+X+LjgL53+vnOlf5ehxXgKP01/WArk=
Subject key identifier: 93:47:9B:25:FC:78:39:7D:C1:67:B1:66:31:C1:F3:4F:C7:31:2F:3B
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 0194AC7F3A08057C9D4D259BD9FB500B4C13
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/k0ebJfx4OX3BZ7FmMcHzT8cxLzs.roa
Signing time: Tue 28 Jan 2025 10:40:06 +0000
ROA not before: Tue 28 Jan 2025 10:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 109.94.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:7f:3a:08:05:7c:9d:4d:25:9b:d9:fb:50:0b:4c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: Jan 28 10:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93479b25fc78397dc167b16631c1f34fc7312f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:af:1d:9a:71:9f:7a:d2:30:4c:a4:33:81:
0d:f2:68:f1:db:2e:10:1d:95:8a:79:38:74:0b:e6:
86:6b:92:2e:cb:8f:f4:eb:d9:2f:09:71:73:44:59:
04:3d:9d:c1:5b:aa:4d:56:c1:b9:e7:4d:4e:d8:c4:
ed:27:20:93:24:9c:7a:31:ab:ab:53:e9:90:c9:67:
77:38:e8:1b:1c:ca:58:17:bf:46:8c:ee:44:4e:1e:
d4:24:cf:82:82:3f:94:c3:27:df:aa:b9:f9:c9:ca:
9b:be:d2:12:58:09:0a:5b:c8:72:13:91:2f:94:f0:
c3:cd:31:78:05:af:8e:cd:2c:1f:29:c2:c5:c2:7e:
c7:8b:99:40:18:ec:95:e1:ba:00:42:9f:b4:c5:ac:
43:dc:be:a2:4b:9a:23:0b:82:18:e2:9c:25:02:00:
8e:98:c8:97:21:70:a8:d5:bd:b6:d6:16:f2:ed:99:
ed:9b:de:d7:22:b9:be:f3:1b:50:eb:40:87:21:70:
39:4b:30:4a:6e:95:13:2d:5c:b7:ed:ad:d9:b0:8d:
7b:cb:e1:cf:6f:aa:8b:86:0c:fe:2a:42:bf:60:9d:
60:e6:39:ec:03:4b:d3:4f:19:5e:ce:c2:19:fa:27:
e3:aa:44:1e:5b:77:a5:21:bf:ff:6c:30:46:1a:b9:
73:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:47:9B:25:FC:78:39:7D:C1:67:B1:66:31:C1:F3:4F:C7:31:2F:3B
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/k0ebJfx4OX3BZ7FmMcHzT8cxLzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.103.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:52:2e:51:f6:44:c8:59:23:ed:b4:d9:3d:32:7f:12:a9:a7:
47:d9:58:6b:a0:27:a8:dc:d6:21:45:e4:13:bc:b2:8a:f7:51:
91:57:73:ac:c8:f8:42:3b:11:ad:f8:4c:6c:5a:4f:40:b9:3a:
4a:1a:93:05:60:06:a8:a5:f0:dd:8b:59:74:d7:97:cf:c8:d4:
8f:be:2b:82:e0:7a:b3:3a:21:1c:19:6d:46:3a:27:6b:b1:b1:
4d:aa:38:b0:bc:6c:fe:24:8d:4f:e4:23:74:4f:55:68:30:f7:
36:48:48:82:d0:c6:0d:e4:86:35:c0:15:b8:55:a4:c2:d7:e3:
7c:50:f2:08:95:4b:44:e0:61:0e:bd:c6:3e:31:6d:a6:b8:d5:
b2:fb:0f:1d:a8:92:80:1e:c6:30:82:11:bc:b9:69:c5:ff:c4:
c7:90:94:91:a8:3d:72:4e:e9:8c:46:76:05:82:4a:59:f5:a0:
e0:74:0c:99:3c:ec:cb:c8:85:d5:8b:25:3d:c1:ce:b0:73:05:
a6:09:cb:6b:0e:95:4b:56:6c:89:e9:32:ee:bc:c4:db:60:4f:
07:ed:8b:b8:df:ae:73:c6:1f:6e:dc:2f:c4:8e:a2:3a:f9:10:
8f:7c:64:d5:eb:a9:7b:f5:83:44:d4:d0:da:be:19:23:fb:52:
ae:1b:72:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:50:44 2025 by rpki-client