Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/C4fkDspID27_2W7uJ0bDWTiMbsI.roa
File: C4fkDspID27_2W7uJ0bDWTiMbsI.roa (raw, json)
Hash identifier: IPmvbCiP1dYquC+xxAe/aHEwDNf0L9S57sM644oyMl8=
Subject key identifier: 0B:87:E4:0E:CA:48:0F:6E:FF:D9:6E:EE:27:46:C3:59:38:8C:6E:C2
Certificate issuer: /CN=acebf396c9adf94f84dc901656e255ce6d50660c
Certificate serial: 019421444AABE88317F473E3D7C6C297A552
Authority key identifier: AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/C4fkDspID27_2W7uJ0bDWTiMbsI.roa
Signing time: Wed 01 Jan 2025 09:48:31 +0000
ROA not before: Wed 01 Jan 2025 09:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15779
IP address blocks: 194.153.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4a:ab:e8:83:17:f4:73:e3:d7:c6:c2:97:a5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acebf396c9adf94f84dc901656e255ce6d50660c
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b87e40eca480f6effd96eee2746c359388c6ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:06:f6:03:f6:ff:92:65:18:96:d0:d7:b2:
c7:69:17:98:cb:3d:be:63:45:75:be:56:0a:19:7f:
74:79:7e:45:de:07:5d:00:bf:e9:b2:0f:b6:d9:60:
9e:9a:b5:23:53:7d:9d:3b:2e:e4:68:44:04:35:66:
e4:14:21:11:8c:35:cc:4d:bb:bf:96:3a:50:26:27:
bd:55:18:4b:ca:93:b6:0f:17:4f:76:4f:64:28:7d:
ae:3c:7d:aa:00:3a:66:1b:15:67:32:f0:43:18:d4:
82:59:22:07:88:99:27:ee:e4:d4:40:39:b4:3e:a6:
4a:7d:65:28:a6:7f:70:ba:d3:0e:c8:b4:a4:73:d8:
ff:90:a6:64:26:27:db:76:75:fe:bb:c8:ac:a1:89:
a7:d3:ea:07:45:e5:de:be:53:ef:37:ea:87:99:eb:
11:27:99:39:78:85:3c:0d:7f:88:b8:28:a8:70:de:
eb:14:98:a7:d7:f9:4e:a2:60:a3:ec:99:3b:4d:1f:
d0:a7:d4:7c:b6:0f:b7:51:2c:74:22:e7:d0:02:8a:
34:0a:3b:c1:f4:39:48:14:43:12:a8:e9:fc:5f:5d:
ca:99:fc:3a:b4:d6:7b:68:9f:7d:df:33:f9:97:d7:
db:90:ac:52:92:b3:32:72:01:56:60:5d:58:7a:b4:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:87:E4:0E:CA:48:0F:6E:FF:D9:6E:EE:27:46:C3:59:38:8C:6E:C2
X509v3 Authority Key Identifier:
keyid:AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/C4fkDspID27_2W7uJ0bDWTiMbsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.100.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:34:cd:8b:d6:32:aa:f2:db:27:39:5e:6d:e0:2f:18:8a:78:
61:b3:30:77:3b:fb:e9:35:30:e7:06:42:19:f2:2a:d6:fc:b0:
a3:83:21:a4:ef:62:9f:34:20:a3:9f:81:5f:5e:15:0d:98:de:
c4:e7:42:19:c2:c8:1c:a1:a0:ce:57:cb:3b:80:37:f7:00:c9:
9c:08:a9:4a:f1:7e:e7:3b:a8:66:29:6e:cf:80:36:ce:9a:60:
4c:1d:06:73:73:38:3a:5c:94:ad:f7:06:55:21:2c:fc:97:fe:
95:04:71:5e:c0:cf:ae:8e:d9:b5:cf:b3:28:b5:77:e4:bf:02:
58:5c:14:38:18:99:bd:03:2b:a5:ea:c7:be:8f:d4:b4:61:82:
3b:20:85:e6:0a:54:9c:4b:8a:c5:1b:84:63:d0:fc:f3:36:04:
f2:39:4c:32:66:92:01:b8:f9:2a:c5:86:c2:ef:c8:c8:15:a6:
a6:de:ad:ae:f3:a8:ad:b9:e5:ed:df:b2:42:b1:2c:76:61:ec:
bc:ef:bc:43:7e:1f:e6:36:7d:0a:01:3a:2f:91:3b:2d:a9:df:
1e:11:6b:e7:c0:31:ec:7e:0c:72:d2:74:a7:c8:e7:4c:b3:0f:
b8:35:b0:8c:b9:30:24:16:a6:5d:9c:2d:b8:0e:cf:27:31:19:
fe:1f:ed:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:02:44 2025 by rpki-client