Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/dME3uKuz9qhKb6fYAv1PRSHYQPc.roa
File: dME3uKuz9qhKb6fYAv1PRSHYQPc.roa (raw, json)
Hash identifier: uScRfDQwv2RoHdAU0NPUzUenqom6BB3gL/e217qP5bU=
Subject key identifier: 74:C1:37:B8:AB:B3:F6:A8:4A:6F:A7:D8:02:FD:4F:45:21:D8:40:F7
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0194221FCBE5BFCF41C6044DC34A7DE708D0
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/dME3uKuz9qhKb6fYAv1PRSHYQPc.roa
Signing time: Wed 01 Jan 2025 13:48:16 +0000
ROA not before: Wed 01 Jan 2025 13:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35608
IP address blocks: 193.19.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:cb:e5:bf:cf:41:c6:04:4d:c3:4a:7d:e7:08:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 13:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74c137b8abb3f6a84a6fa7d802fd4f4521d840f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:96:f4:52:cd:f1:93:42:b1:29:0c:0b:75:
62:d0:ad:88:3d:9d:73:fa:c0:50:39:28:5e:60:74:
31:38:92:3c:19:64:8d:10:e8:8c:a7:f9:04:92:12:
f2:ee:88:95:bf:93:51:78:81:bf:91:6d:36:00:44:
65:3a:1f:99:b3:0d:36:8b:c2:d2:e2:1a:ee:a7:6d:
5b:b8:a9:2c:e9:a9:fd:74:e7:9f:db:c6:21:f2:e0:
0b:fc:0f:4e:0a:c9:4b:03:cd:4a:7d:68:96:54:b6:
f8:1f:61:84:27:8a:18:2f:ae:0e:1f:f7:a3:71:14:
9e:7e:36:53:ce:ee:ed:e1:59:b2:30:ae:ec:1d:55:
77:c1:df:af:ac:8e:97:2c:79:bd:2f:4f:2f:d3:50:
25:d9:d6:1d:68:ba:b4:82:14:bf:b9:ee:99:9b:0d:
63:6c:a6:1e:b7:eb:18:e7:9f:9e:b0:da:6e:c4:a6:
66:1e:92:55:c6:f5:21:7d:71:9d:92:45:77:ba:e3:
37:c8:31:f3:8f:71:94:43:7d:b4:a4:78:91:85:a4:
55:12:7a:bf:9f:79:10:a0:b6:87:81:72:37:43:94:
82:63:f2:7f:d3:02:cb:ed:ca:f4:42:a7:c6:6e:e8:
18:4a:83:39:1e:5c:12:0f:67:fb:d7:00:f2:b8:3f:
9a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C1:37:B8:AB:B3:F6:A8:4A:6F:A7:D8:02:FD:4F:45:21:D8:40:F7
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/dME3uKuz9qhKb6fYAv1PRSHYQPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.111.0/24
Signature Algorithm: sha256WithRSAEncryption
32:7d:39:e5:d0:a4:fc:2b:a1:72:ed:10:8c:bf:6f:e0:9d:26:
f8:ec:69:8e:f4:f5:d4:9c:e7:fd:3e:e5:1c:54:c9:c9:3e:29:
4c:e3:17:c0:76:b4:0b:b3:3e:2d:98:59:87:c9:f3:38:4a:7f:
d6:e6:b3:d9:08:99:36:dc:39:91:b6:d1:dd:41:a5:c4:5a:1e:
0c:4b:f7:31:1e:d4:54:79:a8:47:0e:64:f5:bd:10:98:3c:f9:
f3:e6:2d:d0:17:96:7b:c2:75:05:67:40:31:0f:60:bf:ab:db:
66:ce:ff:5b:fe:49:ad:26:79:fa:6c:2c:5e:30:76:35:51:3a:
8a:aa:b6:47:f7:c5:33:28:ce:b2:b0:ef:45:42:c0:d1:5f:b2:
ec:54:95:5d:18:82:4e:e6:db:7e:cf:5d:9b:e2:3a:ab:47:dc:
67:91:f7:1b:89:69:71:f6:b2:01:f7:75:32:8b:8e:18:df:8e:
67:dc:81:f9:a5:11:6d:18:a3:f2:a9:cb:da:30:68:8a:1b:1d:
e1:43:23:61:4b:6e:53:82:f5:65:28:19:b9:10:7f:ca:31:43:
80:e1:5f:7d:19:59:1d:3f:8e:a5:ef:6d:7f:80:13:8d:59:1d:
19:91:7b:57:69:aa:5c:ad:f5:49:77:d3:23:04:9b:e6:7d:33:
72:9d:ff:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:21:27 2025 by rpki-client