Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/0_1h7wiM0sCkz01y6bDZ2Uk-dbc.roa
File: 0_1h7wiM0sCkz01y6bDZ2Uk-dbc.roa (raw, json)
Hash identifier: Ffwz5CuVaWNGX3f2MIwGg4hQj6U4+om5+V9sWUjyVOQ=
Subject key identifier: D3:FD:61:EF:08:8C:D2:C0:A4:CF:4D:72:E9:B0:D9:D9:49:3E:75:B7
Certificate issuer: /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Certificate serial: 0194228E3B4AF8173CC63743BEE78EE1BE99
Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/0_1h7wiM0sCkz01y6bDZ2Uk-dbc.roa
Signing time: Wed 01 Jan 2025 15:48:54 +0000
ROA not before: Wed 01 Jan 2025 15:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15363
IP address blocks: 193.101.11.0/24 maxlen: 24
193.101.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3b:4a:f8:17:3c:c6:37:43:be:e7:8e:e1:be:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Validity
Not Before: Jan 1 15:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3fd61ef088cd2c0a4cf4d72e9b0d9d9493e75b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ae:58:9f:73:6c:2b:90:88:5b:bf:73:46:c9:
ed:d6:c4:60:1d:95:09:ff:ad:92:a3:e0:e0:f5:fa:
a7:4a:23:a6:66:4f:b8:7e:92:b9:b8:ba:64:49:ef:
6b:a0:44:37:71:5a:cf:e0:53:5a:31:49:3d:5c:9d:
55:1e:72:31:3b:72:51:c4:5d:7a:e1:45:44:fa:4b:
6a:cb:f1:0b:f8:9d:16:5c:2f:b9:c4:9c:50:a2:00:
51:62:2f:22:e4:19:8c:79:1f:94:54:58:2f:65:c0:
2c:c1:0a:e8:1d:ca:94:08:c9:82:ea:8c:c9:45:12:
bb:b1:ce:fb:5e:d1:06:f9:4b:23:8d:53:1b:bf:c4:
82:75:78:10:49:f2:e0:6e:6e:32:ea:6e:50:61:38:
c7:60:35:65:71:01:4c:d2:5c:b9:a2:8e:63:ff:11:
9f:6c:f6:05:b9:ad:7c:da:35:ef:2a:f6:28:8f:eb:
04:ce:d0:d2:71:8d:02:44:22:62:01:70:d2:fe:4a:
d2:39:84:de:15:14:c7:46:97:30:7e:f0:54:35:16:
7c:14:a9:1c:cd:21:8b:d5:2f:c8:23:9f:2d:80:d8:
1c:a8:2b:2a:4f:3e:6d:62:73:15:d9:9b:49:7d:41:
e5:74:82:8f:03:ce:d8:68:60:4c:0f:a6:7b:57:da:
19:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FD:61:EF:08:8C:D2:C0:A4:CF:4D:72:E9:B0:D9:D9:49:3E:75:B7
X509v3 Authority Key Identifier:
keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/0_1h7wiM0sCkz01y6bDZ2Uk-dbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.11.0/24
193.101.24.0/21
Signature Algorithm: sha256WithRSAEncryption
15:64:80:25:a4:22:d4:9d:bc:c2:71:9a:ba:69:f0:80:2e:8c:
65:a7:b8:6f:8c:11:2e:ea:71:7b:e7:34:ff:e3:41:cc:45:c0:
49:f5:47:70:5f:21:5a:1d:ae:ba:cb:4c:b4:b4:6c:97:cc:2d:
ac:14:7b:6a:72:32:3d:78:af:c0:7e:c1:00:10:e2:47:96:6c:
6c:2a:ad:2b:e1:e6:d8:e4:d3:fc:7e:75:1b:ee:91:8d:30:b5:
91:06:f3:5f:7d:c3:84:09:fc:83:20:53:93:4d:41:ab:f1:62:
98:35:04:2b:68:d5:e1:75:45:96:f8:49:ec:78:76:72:dd:29:
14:95:67:2f:7a:fa:1b:83:a8:10:82:ff:a0:4c:ba:69:47:d6:
3e:69:ff:83:d7:54:37:f1:d9:70:76:6d:75:2d:a3:d3:d9:2b:
03:f3:ab:04:4b:a0:0d:a7:6a:37:5c:1e:ac:e3:28:14:bc:b4:
db:71:b6:fa:5d:f9:e7:4e:cc:53:21:48:96:50:49:84:77:8a:
7e:e7:df:94:f2:ca:de:e1:da:74:c0:6a:b9:03:24:72:42:62:
50:69:b8:9d:c2:ea:72:e6:7b:3a:90:c0:a9:89:5f:9a:70:cb:
df:bd:1f:24:96:74:cd:a6:69:1a:01:85:16:d3:8a:65:f9:07:
4f:01:29:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:03:40 2025 by rpki-client