Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-mESKrqdfLYnTSY3D3A4doQ1k0E.roa
File: 1-mESKrqdfLYnTSY3D3A4doQ1k0E.roa (raw, json)
Hash identifier: uvhkukQLpxpqIbHRO+O/ZUbX0qfFp0bD/lBNZ+UBFiA=
Subject key identifier: FA:61:12:2A:BA:9D:7C:B6:27:4D:26:37:0F:70:38:76:84:35:93:41
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019619EE817F4FCA61C6D4BCF32FB67A4C8E
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-mESKrqdfLYnTSY3D3A4doQ1k0E.roa
Signing time: Wed 09 Apr 2025 09:43:03 +0000
ROA not before: Wed 09 Apr 2025 09:43:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42694
IP address blocks: 193.163.101.0/24 maxlen: 24
193.221.211.0/24 maxlen: 24
2a13:5800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:ee:81:7f:4f:ca:61:c6:d4:bc:f3:2f:b6:7a:4c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 9 09:43:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa61122aba9d7cb6274d26370f70387684359341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:86:b8:34:5e:cd:01:ff:dd:0a:3c:36:ae:
bc:2e:b8:35:b7:2a:71:39:fd:91:c6:4c:c0:0e:db:
82:f1:0d:89:6e:8b:a7:d2:fe:7f:af:91:2f:26:4b:
07:89:11:f4:1b:19:42:c0:ad:21:dc:fa:2f:ad:10:
7f:00:1a:6a:4d:48:db:91:f2:f7:44:06:58:17:b1:
6a:dd:cb:ad:83:ca:5c:4c:07:22:20:c1:31:8b:47:
46:8d:07:66:5e:a2:de:cd:13:fa:ae:76:27:ca:3e:
98:b9:47:7c:e2:a3:57:72:df:10:3d:b2:be:9e:40:
1e:b7:8f:a3:c1:33:84:e9:3b:2c:6d:54:b8:7b:45:
c3:2c:ea:ee:cd:01:dc:d7:20:fd:30:74:2e:08:d4:
7f:f1:64:e7:76:a9:81:40:e4:71:59:8b:36:f0:8f:
77:29:c9:d3:b2:36:ad:11:c3:f0:6e:84:17:a1:a9:
38:9d:93:82:69:c1:15:24:f6:e7:b3:0c:a5:01:95:
bf:bb:b8:bf:dc:99:47:c0:99:53:a6:22:df:70:64:
c6:bd:be:43:da:b2:82:3a:26:17:18:d8:91:d0:26:
e3:90:1a:2c:58:f4:51:b0:d0:de:1e:6a:83:ae:48:
38:6e:5d:67:19:ed:6b:79:49:0b:83:1a:86:64:7b:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:61:12:2A:BA:9D:7C:B6:27:4D:26:37:0F:70:38:76:84:35:93:41
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-mESKrqdfLYnTSY3D3A4doQ1k0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.101.0/24
193.221.211.0/24
IPv6:
2a13:5800::/29
Signature Algorithm: sha256WithRSAEncryption
69:b2:2e:f3:94:4d:61:55:cc:22:5e:31:c4:86:b8:a6:ff:f0:
ae:d4:5c:38:dd:6a:9d:1c:e6:83:b3:6e:9f:e3:b4:de:fd:07:
35:91:9a:6b:f4:ce:65:58:d7:25:c7:d7:eb:aa:8a:64:84:ed:
a9:57:93:49:cc:86:42:84:d1:24:81:36:ee:e3:a6:af:9d:30:
42:ca:a3:b5:b2:67:e0:a7:a4:00:2e:7c:18:99:52:9d:7f:65:
26:8d:b4:34:ae:61:b9:cf:01:00:d2:20:be:fc:05:6d:67:0c:
79:58:bb:5b:a2:e2:94:27:85:47:e6:8a:44:7f:19:a0:bc:0b:
bc:d9:b7:0f:3b:bd:f4:b1:39:d6:0b:08:48:81:c0:56:d4:57:
ac:6a:b5:ea:ad:6f:59:da:15:42:4f:49:b3:9d:31:50:0b:c3:
67:f4:d8:ba:fb:58:7e:7b:0d:26:2c:6e:25:e7:bf:a2:33:59:
96:44:c6:3f:e2:26:4a:e2:79:04:fc:f0:a2:63:8a:03:63:9f:
7d:3d:ea:3f:c5:a9:f3:9f:13:4f:63:13:33:07:59:55:6f:82:
60:28:4a:e6:c4:d3:ec:00:b1:d6:ba:f4:d9:4b:22:95:0d:83:
fe:e4:15:56:19:38:77:49:fe:b2:6b:62:eb:92:34:4f:3f:ab:
83:37:8f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:35:54 2025 by rpki-client