Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/apB7016k1B8Xf8viYBYRSP8KhJw.roa
File: apB7016k1B8Xf8viYBYRSP8KhJw.roa (raw, json)
Hash identifier: xN1tgc1phNLRWfyHfJRqbKwJVFPPcIp9VBD24KOqkzQ=
Subject key identifier: 6A:90:7B:D3:5E:A4:D4:1F:17:7F:CB:E2:60:16:11:48:FF:0A:84:9C
Certificate issuer: /CN=6376c252db09be817b872a717a959edcac44266b
Certificate serial: 019420680CD09387FD6C14150FC58CBF642A
Authority key identifier: 63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/apB7016k1B8Xf8viYBYRSP8KhJw.roa
Signing time: Wed 01 Jan 2025 05:47:57 +0000
ROA not before: Wed 01 Jan 2025 05:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200336
IP address blocks: 194.56.194.0/24 maxlen: 24
194.56.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0c:d0:93:87:fd:6c:14:15:0f:c5:8c:bf:64:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6376c252db09be817b872a717a959edcac44266b
Validity
Not Before: Jan 1 05:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a907bd35ea4d41f177fcbe260161148ff0a849c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:30:48:49:d7:ea:ce:de:db:7d:a8:e5:34:
89:66:e9:be:dc:bb:a9:85:14:1e:d3:08:60:4c:16:
b6:49:93:d8:76:0c:52:68:23:8a:69:4d:d3:a0:90:
a1:11:f1:06:86:cd:1a:47:6c:cc:3d:e0:19:a8:45:
c5:14:aa:ca:ae:95:53:4c:d7:02:d7:e1:79:0e:cc:
07:0b:4e:61:35:f5:09:c5:71:a7:e2:40:86:82:b2:
af:89:8e:cd:9d:93:ea:79:8b:15:d7:b5:a7:97:bf:
d6:4b:93:9e:a6:22:9b:5c:ab:15:70:45:a2:f0:01:
ce:a4:09:94:74:73:1e:04:dd:f1:70:bd:7e:de:57:
a6:57:e9:b1:79:79:e9:68:47:85:9a:b0:8c:ed:2d:
7f:11:82:46:dd:f7:b7:1f:69:3b:47:06:f1:11:5b:
92:e2:e5:78:b7:6f:fa:d3:25:6e:80:97:2c:10:38:
ec:d5:57:f6:06:b7:b3:c6:a2:50:50:5b:bc:db:cd:
b1:81:99:ad:55:14:e7:20:20:c5:56:09:8a:23:5c:
a0:6c:44:0a:91:5e:33:b6:d7:de:8d:e2:6c:1f:9a:
4f:2b:ea:da:a1:0a:4b:f7:f5:d0:c6:fc:08:0b:5b:
34:96:39:d3:7b:aa:01:27:b9:36:32:01:9c:90:44:
79:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:90:7B:D3:5E:A4:D4:1F:17:7F:CB:E2:60:16:11:48:FF:0A:84:9C
X509v3 Authority Key Identifier:
keyid:63:76:C2:52:DB:09:BE:81:7B:87:2A:71:7A:95:9E:DC:AC:44:26:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3bCUtsJvoF7hypxepWe3KxEJms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/apB7016k1B8Xf8viYBYRSP8KhJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b81c0b-af1c-4ee8-b4c0-dca0fd509fb6/1/Y3bCUtsJvoF7hypxepWe3KxEJms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.194.0/23
Signature Algorithm: sha256WithRSAEncryption
34:a7:01:9e:cc:86:79:c3:e4:b4:bc:d5:a7:2c:4a:b8:73:b7:
46:5e:15:84:54:2b:13:14:fc:89:da:a6:c9:a9:37:1f:b6:fd:
a5:e9:1c:71:e2:bd:33:ef:bf:4f:7e:e4:29:0a:bc:f3:7e:36:
5f:81:3e:37:2d:1a:35:3c:11:85:ec:20:d3:0d:04:57:4e:ba:
ad:8a:74:04:b7:c0:5d:71:fa:33:96:04:5b:88:2c:17:88:74:
ab:42:98:5b:f2:e7:e2:22:6a:38:0f:13:02:55:85:26:95:aa:
8c:58:d4:ea:27:53:f9:27:b1:0d:1b:10:4f:c7:ea:2b:88:cd:
cb:c7:48:bf:f5:a7:6c:a6:f5:43:69:80:11:68:64:04:db:8a:
f8:19:0d:2b:f7:9c:19:0a:d5:4b:67:99:8c:81:cb:f5:c4:07:
f7:fa:c4:4e:c0:68:ce:7f:a9:c4:45:90:2f:d2:30:8b:2f:30:
e5:1d:e6:77:bf:f7:ae:fe:95:75:dd:83:bd:78:90:4e:05:6a:
d8:5c:47:5f:44:38:54:2f:ad:f0:27:af:7e:66:1f:96:db:70:
d5:69:0c:d7:88:29:33:c8:ce:90:1f:eb:a5:64:03:b8:84:f1:
f7:05:c2:17:56:36:a2:1d:4e:5e:da:52:a0:db:6a:00:ba:b2:
50:e5:07:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:27:29 2025 by rpki-client