Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/0vKKa1d1-a3nsAZsZCo839Z0MBs.roa
File: 0vKKa1d1-a3nsAZsZCo839Z0MBs.roa (raw, json)
Hash identifier: nF1172I6GzWR4fsS//xQZxKSKhBW9Jwp0lhMkf3VEHw=
Subject key identifier: D2:F2:8A:6B:57:75:F9:AD:E7:B0:06:6C:64:2A:3C:DF:D6:74:30:1B
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B56B755DCD10BD2A81C7E4B146BE46
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/0vKKa1d1-a3nsAZsZCo839Z0MBs.roa
Signing time: Thu 02 Jan 2025 15:49:48 +0000
ROA not before: Thu 02 Jan 2025 15:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201671
IP address blocks: 194.28.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6b:75:5d:cd:10:bd:2a:81:c7:e4:b1:46:be:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2f28a6b5775f9ade7b0066c642a3cdfd674301b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:a7:7f:aa:ba:bb:98:0a:e8:ca:95:43:32:
cc:30:f3:1b:6a:64:a6:f6:d4:24:2f:46:c3:bd:f7:
fc:be:4b:90:5b:c2:93:e8:9f:9a:ab:2e:90:5b:88:
bd:02:98:a4:9b:cd:5d:1f:77:9b:21:1c:b9:6d:c2:
0e:4d:c3:7e:4c:c0:b6:41:88:9b:dd:ff:f3:56:57:
92:80:c8:29:94:76:88:74:3e:dd:77:50:22:41:cc:
08:bc:7a:75:ce:91:74:f8:ba:09:32:89:81:d9:a4:
cb:b2:47:5f:b8:fa:15:5d:5b:c6:e7:d6:6f:65:3f:
dd:5d:93:54:d4:4a:de:48:a1:83:96:7d:3e:b6:99:
c6:82:e5:77:0e:de:53:78:78:45:52:34:a7:7c:87:
10:a5:07:68:40:c2:f8:2a:47:94:49:1e:63:29:0a:
31:55:aa:3e:6c:bf:30:cf:d5:2e:0f:00:65:82:9a:
0f:44:e6:cf:09:e2:22:f8:b6:55:0a:81:9e:06:fb:
5a:ed:d9:cd:47:0b:81:23:fa:65:b0:60:59:98:db:
da:fc:85:18:74:64:30:80:8c:5e:70:e1:1b:55:7b:
ae:e9:c8:52:38:6c:4b:9a:af:1d:92:9e:59:83:fe:
a1:2c:77:d7:4e:81:28:af:0d:6d:89:fa:0b:73:2b:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F2:8A:6B:57:75:F9:AD:E7:B0:06:6C:64:2A:3C:DF:D6:74:30:1B
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/0vKKa1d1-a3nsAZsZCo839Z0MBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.226.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:09:79:b5:12:d7:7d:28:ed:d3:79:d5:92:f2:11:af:be:4a:
30:12:98:9e:73:70:17:77:35:a4:53:13:37:40:93:64:be:07:
8a:51:66:99:2f:7e:2d:d5:2e:28:60:e6:47:3c:cd:b2:db:0e:
e9:ad:7d:5d:e0:97:c7:c1:a7:84:f5:bf:5c:7e:b1:77:8d:45:
30:d7:50:26:78:f1:91:34:53:b6:5e:ed:15:33:db:e8:83:22:
62:58:a2:c2:d3:f2:79:66:45:77:58:7d:a0:96:ec:55:69:09:
fc:61:d8:0b:dd:7d:2f:2a:d1:a8:ec:15:fc:4f:a5:d1:f8:77:
b5:3e:05:fc:e9:d9:3d:f0:93:68:54:98:c6:de:25:43:08:7f:
51:77:68:86:bf:0b:b2:00:d4:1c:c6:48:c2:8b:5c:4a:5f:ce:
1e:a3:37:41:0b:f5:99:87:bc:13:7d:5a:b8:18:d8:44:ba:5b:
81:6f:86:9c:39:76:83:e7:e7:da:ed:c2:94:cf:f2:dc:04:99:
1f:8f:90:11:05:e9:94:6a:41:0a:60:53:e0:e8:ff:74:f6:21:
55:71:a7:ee:21:c7:99:36:3e:86:73:9a:6c:83:91:1d:50:bb:
45:ba:93:53:72:f6:61:b4:e0:d5:dc:bd:d3:a2:6a:95:19:ac:
42:ad:ba:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:18 2025 by rpki-client