Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/DBxzAZVNSJPu_D0QGXT-19vacIM.roa
File: DBxzAZVNSJPu_D0QGXT-19vacIM.roa (raw, json)
Hash identifier: bIWX7NiEWiqzGP0lZHaLTFhN+7dD70TkNkDzreVHTKQ=
Subject key identifier: 0C:1C:73:01:95:4D:48:93:EE:FC:3D:10:19:74:FE:D7:DB:DA:70:83
Certificate issuer: /CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7
Certificate serial: 019425FD98553F1DCCD29A258361BE40F84C
Authority key identifier: 96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/DBxzAZVNSJPu_D0QGXT-19vacIM.roa
Signing time: Thu 02 Jan 2025 07:49:24 +0000
ROA not before: Thu 02 Jan 2025 07:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25419
IP address blocks: 195.190.138.0/24 maxlen: 24
2001:678:22c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:98:55:3f:1d:cc:d2:9a:25:83:61:be:40:f8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7
Validity
Not Before: Jan 2 07:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c1c7301954d4893eefc3d101974fed7dbda7083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:6b:29:4a:3b:be:a7:5b:4a:3c:48:79:c1:
c5:f1:a5:cc:59:51:da:1c:b7:46:88:1c:41:b0:8c:
5e:8d:7f:6d:5c:c2:10:08:4a:94:c7:69:e7:22:3f:
f3:81:f8:d0:19:c5:34:97:c0:e9:88:58:e3:88:52:
82:1b:f5:5b:0f:2d:30:85:7e:38:10:2a:7b:39:a1:
fc:9a:59:68:ca:5f:fb:21:8c:24:81:af:51:17:12:
12:f8:12:f6:be:b7:7c:00:57:23:b2:30:4d:87:2b:
c6:e2:c8:72:eb:c5:77:22:8c:8f:dd:52:52:23:69:
36:21:fa:9e:af:af:23:f2:f5:23:ed:22:73:89:55:
bb:a8:d9:85:25:5d:e2:18:c1:f6:87:44:fc:76:38:
32:19:20:e0:e3:54:30:13:bb:df:e4:e3:cd:d9:4b:
07:7e:31:97:91:6c:49:3a:d4:6a:0a:5c:67:18:5d:
de:be:c8:ff:53:28:11:d0:2a:5a:e1:60:da:48:d3:
b2:35:74:f1:93:26:a3:a7:00:00:a0:70:38:8a:7e:
49:2b:15:91:27:4c:f0:52:eb:e0:80:5e:67:b3:56:
89:3a:0b:76:bf:e2:e5:ac:87:12:d3:51:ac:57:bc:
47:f3:4a:81:b9:b7:45:8c:fa:dd:e8:74:c4:ac:64:
3c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1C:73:01:95:4D:48:93:EE:FC:3D:10:19:74:FE:D7:DB:DA:70:83
X509v3 Authority Key Identifier:
keyid:96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/DBxzAZVNSJPu_D0QGXT-19vacIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.138.0/24
IPv6:
2001:678:22c::/48
Signature Algorithm: sha256WithRSAEncryption
36:3e:b8:05:57:d6:5b:25:bc:d5:7d:58:5c:86:13:70:de:26:
07:92:b0:ad:03:e8:41:27:75:c7:40:3a:d5:16:d1:18:ba:5e:
7c:93:1b:4d:3d:02:2f:08:c9:d8:5b:0d:3c:38:c1:f5:67:84:
de:18:27:72:81:27:24:60:4f:3c:20:63:b8:94:be:4b:51:4b:
35:5f:b3:6e:e9:c4:4e:4b:b9:96:17:06:ea:2e:a2:3d:45:b1:
ee:67:3c:a0:61:f0:32:9b:b2:ba:82:86:69:a0:19:c6:cc:6c:
63:69:53:65:0f:e0:90:99:30:03:6d:f5:2c:46:c1:33:c6:c0:
7a:6b:f3:7f:50:64:40:63:d6:a6:58:bc:17:7a:41:07:d4:f5:
0e:6f:84:c4:bf:a4:cd:06:d4:60:da:40:5f:cc:27:a5:79:1f:
cd:1e:ff:eb:36:d8:51:6b:22:c3:62:b2:9d:b9:1d:67:55:07:
8c:ca:76:1e:65:64:40:bc:84:a3:fa:15:97:76:fe:3b:63:b5:
c1:6c:42:a8:24:f0:0b:9e:ea:0f:12:d5:e4:d4:c8:33:34:1c:
67:8a:28:4f:cb:62:fb:a6:3b:9b:67:69:b8:dc:3c:64:73:31:
b3:51:e9:1a:1e:ab:6a:68:8a:f0:2a:38:4a:ac:4d:f4:1d:40:
f4:0b:ba:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:39:17 2025 by rpki-client