Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/zO8Iwb0BsWTcNVLMLIiP_wo8DJM.roa
File: zO8Iwb0BsWTcNVLMLIiP_wo8DJM.roa (raw, json)
Hash identifier: OPJwqPTjOpu2TkWSPAK04GvaPgxXe8e980q4NWTbl0o=
Subject key identifier: CC:EF:08:C1:BD:01:B1:64:DC:35:52:CC:2C:88:8F:FF:0A:3C:0C:93
Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial: 0194F99E83D20C2F5B843C78DD0F1726440E
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/zO8Iwb0BsWTcNVLMLIiP_wo8DJM.roa
Signing time: Wed 12 Feb 2025 10:05:02 +0000
ROA not before: Wed 12 Feb 2025 10:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51088
IP address blocks: 193.39.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:9e:83:d2:0c:2f:5b:84:3c:78:dd:0f:17:26:44:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Validity
Not Before: Feb 12 10:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccef08c1bd01b164dc3552cc2c888fff0a3c0c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:19:b5:78:31:f7:ef:94:35:32:bf:3b:18:47:
bb:89:fd:29:fb:8a:fb:cb:35:86:82:b2:19:0c:38:
0b:e8:8e:d2:bd:cd:79:f0:d8:3c:6b:f6:15:45:53:
6f:43:51:81:fd:ec:e1:6e:5a:b2:c1:a5:9b:95:0f:
9a:6a:f0:84:4e:4b:7b:94:62:d6:53:fc:4d:74:87:
f8:53:d0:c4:20:6c:80:bf:59:29:80:60:17:22:71:
aa:69:61:66:ef:50:bf:2b:72:34:50:e1:de:66:32:
50:52:cc:3e:53:34:52:06:e2:cd:2e:6b:cf:62:e1:
a7:ec:22:9f:b3:bf:b0:b1:59:3c:06:5d:f0:97:ec:
4d:60:65:e8:2d:ad:c4:7d:32:b7:72:b5:19:f5:bd:
17:29:3f:43:04:c0:6d:91:e8:87:48:78:93:70:fd:
6a:8e:01:98:7b:5e:4c:58:03:18:bf:e5:a5:71:ba:
dc:90:33:f4:7c:0b:f6:ff:d8:ad:41:b3:27:32:58:
fc:cd:1b:be:65:3f:f6:72:d5:2d:07:60:95:fb:1f:
1f:88:a1:48:78:3c:d4:b6:2c:fd:2c:c4:52:81:8f:
4f:2e:af:28:58:c8:5f:88:f8:d2:8c:aa:49:c6:0f:
55:62:43:c8:fc:f4:36:59:04:58:7e:cb:b1:1a:3e:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EF:08:C1:BD:01:B1:64:DC:35:52:CC:2C:88:8F:FF:0A:3C:0C:93
X509v3 Authority Key Identifier:
keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/zO8Iwb0BsWTcNVLMLIiP_wo8DJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.250.0/24
Signature Algorithm: sha256WithRSAEncryption
48:41:69:4a:3b:e2:6f:7d:93:8b:62:a6:cb:22:20:f0:5c:d6:
58:8d:b3:c9:6c:1c:ef:0b:47:4b:18:47:bc:4c:aa:4e:07:6e:
7d:35:65:7f:a3:25:85:e2:a8:7b:e6:9e:3f:3c:68:d1:a3:f3:
8d:44:34:7d:64:3a:1d:cd:b1:50:5e:6e:8a:ff:4e:b3:0f:19:
1f:6e:b7:9d:ff:dc:39:30:87:33:5a:c2:c2:2f:72:0b:35:05:
4f:30:ae:7d:d2:a8:24:72:31:32:9e:01:31:28:56:91:a2:24:
6a:6b:7d:3a:14:96:f9:f7:64:f1:77:b5:70:34:aa:d2:1a:a8:
81:47:74:df:f1:ae:53:83:35:1e:8b:2a:d7:c8:ec:0d:97:71:
2a:c3:99:24:38:43:7c:3a:61:fe:eb:ca:88:60:01:48:b4:db:
bf:b7:05:56:99:f2:a3:d5:cf:e7:b3:8f:4d:c0:29:61:ba:a2:
6a:56:60:c8:8b:3e:31:1e:6e:68:f3:58:ca:fa:df:05:f2:15:
72:21:7a:3d:0a:5d:36:2b:c3:4d:13:65:31:14:11:61:5f:3c:
a5:a9:bc:df:0f:69:9e:44:1f:75:30:34:2f:7a:25:db:e4:37:
bd:7d:0c:4c:58:db:04:5d:9f:ae:16:82:91:fb:28:65:37:54:
5c:1e:af:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:33:59 2025 by rpki-client