Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/1-yS3aYPqpaClbUu2NxEJjasn11w.roa
File: 1-yS3aYPqpaClbUu2NxEJjasn11w.roa (raw, json)
Hash identifier: 5XgaEX1gVaWrfAm4eZoLyJtYysjnny395i7jpZsSAQY=
Subject key identifier: FB:24:B7:69:83:EA:A5:A0:A5:6D:4B:B6:37:11:09:8D:AB:27:D7:5C
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 019422FAECB0D396BE5FE7EB5CE1AA711027
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/1-yS3aYPqpaClbUu2NxEJjasn11w.roa
Signing time: Wed 01 Jan 2025 17:47:37 +0000
ROA not before: Wed 01 Jan 2025 17:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13165
IP address blocks: 193.43.182.0/24 maxlen: 24
213.128.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:ec:b0:d3:96:be:5f:e7:eb:5c:e1:aa:71:10:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 17:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb24b76983eaa5a0a56d4bb63711098dab27d75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:6e:3f:37:a4:fe:fe:a4:67:2c:d1:d4:9a:
80:ea:40:81:6d:4f:65:b3:af:f2:00:c0:44:f1:6d:
0a:c5:c0:6b:cf:6d:fa:6a:e6:d7:52:37:06:47:3a:
eb:e0:71:7a:9d:4c:ad:87:18:f2:d8:ff:ee:86:15:
58:d9:90:79:9d:4c:ef:a3:9c:6b:3d:fa:40:3a:c3:
e0:d1:89:72:de:ce:26:78:62:c6:b8:ab:08:2c:d4:
2b:fd:95:f6:2b:ec:f0:a1:06:31:4a:f3:08:a8:22:
58:56:dc:e3:df:3f:2a:81:44:31:79:34:1b:5e:5e:
a1:fb:44:34:12:1d:f7:a2:88:fa:2d:d4:46:0d:0a:
c0:cc:74:45:f1:8a:a4:14:e9:37:e2:a2:97:14:af:
2f:d7:da:3b:d7:a5:82:40:d2:a8:fe:16:e4:c9:d8:
7f:9f:6b:5f:8f:1e:0f:8a:2b:0f:88:40:d0:20:c6:
71:8b:bc:e5:bb:18:0a:46:df:2e:43:d4:8b:7d:fa:
a4:01:d5:45:31:28:3d:9f:1d:41:28:04:a6:75:9c:
81:d0:fb:cf:31:4b:8e:4c:32:61:c0:9e:10:5b:3f:
22:e7:4e:20:ea:cf:1e:83:ad:95:60:c6:14:3a:48:
ad:96:ab:4d:27:c9:cf:3f:59:ab:3c:b2:b2:5e:ce:
43:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:24:B7:69:83:EA:A5:A0:A5:6D:4B:B6:37:11:09:8D:AB:27:D7:5C
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/1-yS3aYPqpaClbUu2NxEJjasn11w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.182.0/24
213.128.192.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:ed:65:c3:0b:70:b9:bc:2d:f9:89:c6:f4:a6:c8:b9:54:15:
99:e2:ec:13:33:d8:12:5d:61:d8:3b:a8:5e:6e:4d:17:03:29:
c7:e7:2b:a0:fe:e3:eb:eb:2e:fd:a6:97:b6:26:57:c6:f0:8c:
3b:d0:36:6b:de:83:71:4f:23:b7:f0:a8:16:69:00:e7:68:05:
a2:43:7c:43:63:64:f9:90:78:36:9f:c9:01:a5:1f:ae:ce:a7:
db:08:e1:95:94:e4:c5:8d:49:c1:5b:27:54:96:8a:0c:5c:a7:
c2:4c:18:92:06:ff:d5:35:ed:bc:a3:96:d4:e9:fe:97:a6:98:
09:4b:63:76:c5:31:9a:a0:d0:40:2a:0c:52:f6:84:49:44:eb:
49:c3:51:9d:a6:c6:86:35:a1:0a:46:3a:1d:66:76:ab:c0:88:
46:87:e5:38:54:49:0d:64:03:0c:62:98:77:b1:da:43:7d:98:
b4:19:b6:34:fb:de:4f:c7:4a:f9:06:25:8c:e5:42:79:75:c4:
24:6b:e0:97:ba:d7:2c:ac:bb:cf:77:43:c9:1d:b3:ef:ef:e2:
18:2f:4c:91:ac:ad:ae:6e:ba:9b:8a:48:ca:a9:fc:b3:ab:03:
4b:a9:98:fe:e7:8e:91:95:71:e9:8b:cd:ed:0d:bf:24:4c:e9:
53:7d:ea:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:36:57 2025 by rpki-client