Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/T3Ru90D-BjnOYASJ0pSS8ZwD4JU.roa
File: T3Ru90D-BjnOYASJ0pSS8ZwD4JU.roa (raw, json)
Hash identifier: kFL7hemcmIQ9FqEJFvwP/YJ8WsXzPFKUwSwoKc7Tbgc=
Subject key identifier: 4F:74:6E:F7:40:FE:06:39:CE:60:04:89:D2:94:92:F1:9C:03:E0:95
Certificate issuer: /CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Certificate serial: 019426D927941B540341C2B6B20941A421DF
Authority key identifier: DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/T3Ru90D-BjnOYASJ0pSS8ZwD4JU.roa
Signing time: Thu 02 Jan 2025 11:49:13 +0000
ROA not before: Thu 02 Jan 2025 11:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 193.43.183.0/24 maxlen: 24
2001:67c:66c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:27:94:1b:54:03:41:c2:b6:b2:09:41:a4:21:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc2ff6a461050d48f3fdb0b51387154b5d6cd0e
Validity
Not Before: Jan 2 11:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f746ef740fe0639ce600489d29492f19c03e095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:1c:cf:cc:86:a7:52:bb:49:53:1a:aa:64:
95:f4:24:73:c4:42:37:29:0f:a3:66:3a:94:5f:90:
b8:97:9f:c1:4d:66:8c:77:6d:06:fd:a7:54:22:1d:
76:cd:d9:99:f9:0a:83:f7:b6:c1:98:59:42:ec:ad:
91:7f:2f:f0:92:30:e4:c7:a4:57:12:8d:94:dd:0d:
a6:88:04:db:8f:46:a8:13:8e:0e:4b:33:4e:71:bf:
5e:5e:a7:42:cf:9f:70:88:d8:dd:76:72:2a:10:f1:
5b:30:5b:8e:bb:23:df:07:72:45:3e:e0:48:32:29:
ce:a0:37:59:2d:63:5e:8c:b6:e2:2a:5f:6f:69:d6:
18:74:df:07:02:1f:ef:82:4a:32:53:77:0a:4f:49:
88:88:46:db:3c:27:51:78:37:39:cd:cd:cf:99:0d:
a1:a0:01:c3:f3:2c:66:8b:01:2f:ff:04:da:7c:f6:
42:82:ed:7d:67:bf:05:d7:0a:21:27:ea:25:61:1c:
51:96:e0:8f:f1:49:49:8a:c0:d5:f4:2e:1e:a6:c3:
1b:f0:35:38:a3:b7:8b:f9:bf:ee:96:78:ab:2e:d3:
20:6f:be:47:9c:e6:da:40:6c:82:5c:a8:c8:03:97:
6b:b3:73:47:a2:c3:8b:36:b2:13:f1:42:92:b8:d9:
6c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:74:6E:F7:40:FE:06:39:CE:60:04:89:D2:94:92:F1:9C:03:E0:95
X509v3 Authority Key Identifier:
keyid:DB:C2:FF:6A:46:10:50:D4:8F:3F:DB:0B:51:38:71:54:B5:D6:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28L_akYQUNSPP9sLUThxVLXWzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/T3Ru90D-BjnOYASJ0pSS8ZwD4JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/28L_akYQUNSPP9sLUThxVLXWzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.183.0/24
IPv6:
2001:67c:66c::/48
Signature Algorithm: sha256WithRSAEncryption
4d:6f:8a:b6:88:45:ac:cf:60:ca:88:6e:ef:47:43:11:4f:8c:
50:56:c2:d9:48:fd:f6:82:c8:93:d1:f6:77:b1:b5:3d:c2:7c:
86:c2:32:3f:15:94:92:4e:35:b3:a5:b5:40:0d:32:2a:af:8a:
e0:50:fb:2c:cc:55:76:f7:62:01:30:a6:51:f6:6a:01:7f:a3:
15:29:f1:c5:5e:3b:3b:16:b4:25:ce:f9:74:3e:aa:18:38:49:
2d:ff:09:0e:c1:e8:8c:15:3b:9e:78:57:68:50:6e:14:01:bc:
67:c9:3e:67:c6:e4:36:d4:ae:6a:84:4a:01:7e:d7:9b:ed:81:
8e:9c:fa:4d:ad:e1:cc:93:c6:f8:5d:5d:be:8b:cf:47:b4:9c:
1c:3e:b3:c5:0c:87:84:f1:80:b3:bc:7a:5c:00:64:79:a2:ec:
ad:f5:28:c4:e4:87:a1:e6:71:e1:86:96:4c:59:bf:fd:93:7b:
ff:51:e2:a2:9c:c0:2d:cc:4d:39:c6:85:7b:7f:60:6c:06:54:
8c:8c:44:54:c5:0a:38:7a:c8:bd:6c:58:18:b7:86:75:07:2f:
31:51:1a:f8:98:dd:1d:96:b2:c0:5d:56:5b:51:eb:1e:3f:d1:
1d:1e:b7:53:2a:bc:a0:67:a8:f7:13:db:72:23:98:f6:07:8b:
2c:e1:c5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:54:55 2025 by rpki-client