Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/wO1GQo2rZB8lJtoeHMT1KMwKgpU.roa
File: wO1GQo2rZB8lJtoeHMT1KMwKgpU.roa (raw, json)
Hash identifier: Yu5YmfTpsDZhYHP86sXXckUGP6eYuQx5xxwIw0mjX4w=
Subject key identifier: C0:ED:46:42:8D:AB:64:1F:25:26:DA:1E:1C:C4:F5:28:CC:0A:82:95
Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial: 0194244598959357A62C507E39F5FEB39447
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/wO1GQo2rZB8lJtoeHMT1KMwKgpU.roa
Signing time: Wed 01 Jan 2025 23:48:48 +0000
ROA not before: Wed 01 Jan 2025 23:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8758
IP address blocks: 193.247.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:98:95:93:57:a6:2c:50:7e:39:f5:fe:b3:94:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Validity
Not Before: Jan 1 23:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0ed46428dab641f2526da1e1cc4f528cc0a8295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:39:a7:2b:7f:de:2b:87:b1:18:be:fa:79:
36:9d:5d:e9:51:02:2c:ae:24:f9:cb:c4:dd:2c:67:
09:f1:6c:e0:e5:29:78:42:ca:62:24:fc:f8:cb:67:
5f:85:10:91:b7:4d:3b:f5:3e:07:8f:c0:13:02:64:
d9:df:09:7d:c9:a3:4d:8b:18:73:fe:13:ad:c7:5c:
7b:5b:81:cd:e6:fe:a0:ae:28:c2:02:c1:c1:0f:55:
23:67:bc:89:33:47:3a:6b:81:78:88:ef:fa:72:93:
6f:de:cf:e2:46:e6:1a:35:32:49:14:b2:6b:a6:a9:
7b:40:e3:bf:2b:72:79:a3:3f:22:33:d8:3c:d7:ed:
aa:45:70:49:bd:87:df:2a:14:03:d5:85:d5:f5:50:
21:46:69:41:fc:61:11:8d:2c:a2:94:90:a1:2b:22:
b9:b9:a9:03:25:de:2d:eb:0a:5a:e8:52:b0:60:32:
94:01:d2:15:a4:44:e0:aa:3b:7e:d8:c7:39:7e:1a:
1f:76:6b:b9:7f:6d:2c:af:4c:31:e3:51:59:52:2f:
32:a4:0b:2d:38:80:c2:74:cb:08:a6:23:e2:d3:cc:
88:f6:d5:54:a8:37:09:7a:84:21:ee:0d:d0:0f:06:
d7:06:75:d1:20:c2:88:73:93:d3:e3:5b:ca:d4:e2:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:ED:46:42:8D:AB:64:1F:25:26:DA:1E:1C:C4:F5:28:CC:0A:82:95
X509v3 Authority Key Identifier:
keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/wO1GQo2rZB8lJtoeHMT1KMwKgpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.162.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5d:3a:9e:db:e8:5a:9b:4c:e3:97:71:2b:87:4f:f8:ab:13:
1d:31:a2:fd:a8:1a:d1:9f:d0:1a:c1:c5:a0:65:79:82:ec:34:
e2:45:3c:c0:50:8a:9f:42:47:67:8e:d0:98:00:67:d6:5d:d6:
2a:86:af:95:bb:1f:34:55:62:fa:89:89:31:a3:a6:ff:ad:b5:
20:cf:47:4c:c2:22:af:4d:26:91:f7:a2:1b:b3:7e:2e:fd:a2:
24:be:f1:c8:bf:43:14:ce:aa:aa:dc:54:45:9b:f4:01:bd:55:
36:6b:d2:c9:35:f9:b9:f3:70:f4:df:3e:3a:ae:4a:60:6c:79:
b2:65:6e:02:60:5c:54:7c:74:6e:b0:01:08:ef:be:54:e5:ad:
02:59:78:76:9b:35:3d:fd:a8:47:88:37:a1:99:71:20:fa:12:
26:ad:f7:85:3d:a3:80:86:68:67:14:7c:15:bd:45:5b:6b:46:
99:ad:08:bf:bb:cc:94:12:58:5c:f4:30:83:bd:e3:6d:35:3a:
61:93:63:bc:17:75:d2:e4:5e:7b:b8:06:49:7c:fc:e4:95:c5:
64:bd:f9:e4:84:e1:49:72:68:82:db:e1:13:18:2b:ce:be:8c:
c7:dc:fe:9f:43:10:7c:ce:03:c9:71:f0:90:eb:9e:a9:a7:cd:
e2:8f:20:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:00:31 2025 by rpki-client