Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/sNlz3ltNKwFJp9lFAJRiixdiytE.roa
File: sNlz3ltNKwFJp9lFAJRiixdiytE.roa (raw, json)
Hash identifier: fcd5iGxutFpHfnpxl9mUlT8Mi1NSPiKw7EA6qelRziw=
Subject key identifier: B0:D9:73:DE:5B:4D:2B:01:49:A7:D9:45:00:94:62:8B:17:62:CA:D1
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019447D8D1A22212BC2DE2373A4B5CE80A2B
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/sNlz3ltNKwFJp9lFAJRiixdiytE.roa
Signing time: Wed 08 Jan 2025 21:36:19 +0000
ROA not before: Wed 08 Jan 2025 21:36:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 193.43.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:47:d8:d1:a2:22:12:bc:2d:e2:37:3a:4b:5c:e8:0a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Jan 8 21:36:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0d973de5b4d2b0149a7d9450094628b1762cad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:75:3b:2e:37:75:f3:75:e3:46:57:c0:9f:
ba:12:cf:9f:d2:f7:57:de:fb:08:84:bf:e7:ab:9a:
32:cc:a7:75:31:37:17:d7:a8:f0:74:c2:23:b1:59:
ac:1c:4c:7e:fa:f5:f5:70:21:af:7a:f7:7c:2b:b3:
80:42:72:19:f2:a6:c2:4b:55:00:2b:ff:51:7d:33:
0f:11:63:80:7c:9a:ea:8a:91:12:a5:1c:da:2c:12:
52:9c:95:e5:fc:74:16:c0:2e:ed:5f:f3:43:dc:f3:
c4:c5:23:46:4b:16:38:75:7f:49:09:1b:48:1e:05:
03:78:5c:78:4a:6d:25:b3:26:97:75:41:b4:c4:db:
17:8d:a8:bd:8d:11:c3:5e:e4:9d:13:c3:28:c8:21:
c1:66:29:2c:f0:91:22:e7:c8:89:81:11:05:31:fa:
cb:8e:91:cd:bd:05:78:2c:b9:7b:5a:55:77:3c:12:
a9:d6:3b:6f:10:3d:ad:80:f9:da:46:9d:97:48:9d:
48:c7:d5:a2:25:02:ee:08:0f:fd:d4:1c:e4:bb:ae:
ce:62:93:b9:13:f7:4a:30:cd:10:15:74:d4:57:88:
e1:c0:5a:a1:58:2f:6c:bd:0d:4a:fa:89:27:16:72:
57:21:be:67:58:a0:19:a2:52:82:8a:c3:67:07:40:
fe:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D9:73:DE:5B:4D:2B:01:49:A7:D9:45:00:94:62:8B:17:62:CA:D1
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/sNlz3ltNKwFJp9lFAJRiixdiytE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.138.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d5:89:cb:82:18:a9:80:ce:4a:17:e8:13:63:5a:4f:67:76:
0f:2c:d4:64:00:71:a3:0b:34:fc:ce:fc:af:a4:0f:13:bb:20:
d8:9e:06:49:55:bb:1e:cb:42:25:fe:93:65:a7:c5:da:3c:bc:
d4:12:dd:56:22:eb:61:84:a5:6f:0c:54:cd:c7:e9:fe:3d:73:
53:16:d3:45:dd:b5:4d:38:87:59:11:43:2e:c5:27:10:6a:a1:
78:0f:7c:b6:3d:c7:cd:af:4f:fc:fc:b8:b8:e9:c3:a7:88:1e:
c6:89:1d:7c:97:72:4d:b3:00:e3:f6:bb:74:d5:98:6d:07:40:
8a:73:f9:f6:6c:bc:16:85:f3:2d:8a:bc:c4:38:b7:32:f8:b8:
5e:45:cc:24:30:28:f8:d0:51:6a:44:d1:04:7d:ca:73:8b:1b:
da:47:09:ae:ad:17:15:a5:1b:b2:a2:d1:13:54:69:d5:0b:30:
07:cc:4c:01:ec:5d:41:6c:12:30:c9:69:c1:f8:61:78:ef:a3:
79:3b:d8:9c:fc:c4:53:b4:33:ee:a0:32:ec:88:16:7d:63:b9:
57:3b:3e:56:34:72:d9:44:49:bb:e1:7d:aa:91:f3:40:0c:f4:
3e:ba:ce:92:12:e3:ee:37:54:3b:11:3c:72:14:bd:de:14:e7:
ae:82:3a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:37 2025 by rpki-client