Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/flUmY1UuhQ4umekHZTdOQbHf_3c.roa
File: flUmY1UuhQ4umekHZTdOQbHf_3c.roa (raw, json)
Hash identifier: +LH2doQCe/pHrWkfv/54Ur54xmP0ZJEt0aBXtrY/eUQ=
Subject key identifier: 7E:55:26:63:55:2E:85:0E:2E:99:E9:07:65:37:4E:41:B1:DF:FF:77
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 019421B1ED13F847378096FA5AB663BC5184
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/flUmY1UuhQ4umekHZTdOQbHf_3c.roa
Signing time: Wed 01 Jan 2025 11:48:15 +0000
ROA not before: Wed 01 Jan 2025 11:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49685
IP address blocks: 193.30.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ed:13:f8:47:37:80:96:fa:5a:b6:63:bc:51:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e552663552e850e2e99e90765374e41b1dfff77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:5d:bd:c4:0f:8d:03:4b:e1:4f:7d:cd:e3:
65:e2:a9:d2:e7:63:cd:65:e5:38:bf:c1:d0:ad:b9:
90:51:53:93:bf:6e:08:10:30:19:6b:05:6b:7c:4f:
22:c9:a9:71:ec:54:8f:85:14:e4:23:9f:00:2f:ab:
99:cd:bf:f3:17:7e:e9:5d:ac:19:e5:a0:4e:48:d6:
ce:d7:38:cb:51:93:d7:54:bd:97:03:57:8d:3d:de:
ef:29:bf:96:5f:04:07:e7:6c:7e:c7:58:03:3c:c4:
7d:44:de:3a:fd:a6:e1:bd:f8:54:dc:6c:a4:6e:f3:
36:5b:48:ae:9a:af:e8:f7:2a:ca:a2:ac:69:60:75:
f2:67:be:56:d7:a6:cb:10:3e:ee:f9:4e:b4:bd:04:
9c:85:a9:04:47:93:1e:07:60:af:dc:66:7d:ed:87:
a4:14:06:33:02:f3:cb:ec:83:a6:c3:a8:1e:41:2d:
63:d2:65:18:dc:25:9d:7f:3d:d4:d0:c5:8f:fa:e5:
90:b0:19:41:06:f8:64:6b:a7:c1:16:2e:49:4f:f6:
69:59:52:39:b4:9f:36:df:7e:f4:68:19:43:97:ce:
32:09:62:33:db:93:af:c0:2d:db:dd:8a:76:c4:6c:
5c:1b:70:ee:0a:be:5a:2a:e9:b6:fb:40:b7:43:a5:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:55:26:63:55:2E:85:0E:2E:99:E9:07:65:37:4E:41:B1:DF:FF:77
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/flUmY1UuhQ4umekHZTdOQbHf_3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:28:a1:1d:73:e0:bf:64:23:fc:4a:f9:77:c9:5e:16:4c:fb:
34:36:19:e0:91:68:05:5d:80:8d:00:d0:ae:74:be:33:21:08:
59:5c:b1:8f:8b:e5:90:3a:f7:ff:23:66:22:4b:b7:82:ee:a7:
4e:38:ed:67:8c:81:d7:0b:9b:e7:08:59:e5:81:32:dc:ac:05:
9b:25:fe:25:a0:87:9d:47:f8:bf:04:a1:11:1e:50:7a:16:64:
ad:b1:6c:4c:16:ff:f5:9d:b0:13:1b:ba:ff:87:03:c6:c5:ad:
2a:8a:fa:91:21:a2:4e:d6:6f:0f:69:98:4e:0a:8b:06:8a:a6:
f4:0e:7f:e6:0c:2f:22:f8:ec:af:6a:aa:68:cc:a6:83:77:7c:
cf:ba:d0:12:f2:41:2d:eb:b6:82:dd:69:fe:8c:58:20:46:c6:
b4:9f:36:53:de:ed:86:cc:29:e0:28:9c:b8:44:8d:99:e6:31:
10:f9:ad:65:a0:88:8f:89:d5:8f:e0:b9:cf:ea:ad:bb:37:e1:
8c:3b:0e:74:05:fb:d1:92:df:28:2e:52:32:54:b6:15:e0:f7:
f5:a1:90:1c:53:36:d8:46:8a:b9:8d:e6:df:3d:57:90:9a:04:
6f:2c:9e:d3:10:b8:40:ac:36:a1:5c:8b:dd:81:3a:8b:31:5f:
77:8c:93:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:19 2025 by rpki-client