Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/W60j8mEMLIeD9TwZfWFfzy4srP4.roa
File: W60j8mEMLIeD9TwZfWFfzy4srP4.roa (raw, json)
Hash identifier: b2r6y0PVqGZ8ULIz8d6593eHeqN5q4bFF+B6KTPTbrw=
Subject key identifier: 5B:AD:23:F2:61:0C:2C:87:83:F5:3C:19:7D:61:5F:CF:2E:2C:AC:FE
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0194FAB3016759EE26B003E16340B894E8F7
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/W60j8mEMLIeD9TwZfWFfzy4srP4.roa
Signing time: Wed 12 Feb 2025 15:07:02 +0000
ROA not before: Wed 12 Feb 2025 15:07:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213548
IP address blocks: 193.17.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fa:b3:01:67:59:ee:26:b0:03:e1:63:40:b8:94:e8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Feb 12 15:07:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bad23f2610c2c8783f53c197d615fcf2e2cacfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:db:66:c2:5f:ff:db:8b:bc:50:c6:a5:b7:
ed:16:41:fd:48:6c:9d:99:ca:0b:1a:01:57:ab:95:
a0:04:40:ae:b1:b3:36:33:7a:cd:b0:27:d3:0a:6c:
86:86:76:cc:e0:24:02:65:16:bb:46:ae:86:68:cd:
e0:26:a3:e1:91:62:7b:81:cc:28:1f:11:cf:30:7e:
d7:e8:cd:58:1e:6c:84:87:d2:dc:e8:93:2b:f0:66:
b7:e3:ea:1f:0c:85:7b:e6:33:23:16:54:29:96:d9:
d6:4f:f7:da:2d:87:33:52:c0:ef:69:2d:a7:c3:50:
ac:4d:99:95:a9:1d:cd:e5:f5:a4:eb:63:ff:58:82:
7a:b2:1c:13:f8:50:1d:3e:d7:2d:9d:bb:0c:e7:da:
ae:80:eb:6b:78:0c:c1:32:06:7e:38:1f:82:2a:52:
77:db:6a:2b:d4:7f:45:0e:ed:ba:74:d4:ff:a4:a1:
12:cf:94:3a:cf:00:a0:cf:e6:f2:c9:5a:f4:f0:c5:
97:93:7b:92:0d:5c:b8:28:20:28:3f:dc:f2:ee:9a:
7b:f7:71:b1:13:e2:bf:2b:17:c4:bb:82:9b:08:b2:
2a:2b:e8:db:fd:8a:31:79:09:2a:72:27:fd:10:dd:
1a:37:52:6d:a0:27:02:61:b4:3a:a5:63:3c:0c:a6:
8e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AD:23:F2:61:0C:2C:87:83:F5:3C:19:7D:61:5F:CF:2E:2C:AC:FE
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/W60j8mEMLIeD9TwZfWFfzy4srP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.91.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b6:02:d6:0c:2f:98:51:ae:70:b5:91:26:39:ae:41:7a:cc:
51:d2:0a:e8:ed:c3:56:f4:47:c5:0e:a8:87:99:cf:46:26:20:
29:f8:88:53:61:b1:f4:5b:66:fc:86:c4:5b:2c:5c:6b:c8:62:
1f:5d:05:f0:b9:28:07:0b:4d:07:df:ce:75:e9:80:64:2b:3d:
92:ff:2f:f5:6f:a2:94:7e:6b:df:ff:99:8d:2b:9e:ab:a5:9b:
eb:19:82:8d:5a:31:b7:d3:79:b1:a8:94:01:8d:c0:58:f5:2d:
dd:a6:90:05:16:77:34:b8:5c:6c:80:b6:66:e8:e0:14:ce:2c:
fd:46:a5:be:1d:89:44:22:68:5f:01:94:4a:b9:74:7d:37:8a:
76:9a:74:2d:50:cd:5d:d1:6c:1a:c3:ab:72:76:0b:3f:a0:cd:
dc:35:29:f9:ce:39:c0:27:d0:26:0c:cf:77:4b:0d:04:80:0a:
27:30:f0:72:1f:e6:50:98:d3:4b:af:89:e8:c0:2c:67:b1:a2:
67:92:4a:45:6c:fd:18:5e:90:73:c3:ee:cf:b6:e8:dc:c4:7b:
27:30:5d:63:1e:51:17:8b:e0:fd:fe:d8:0b:6b:8e:f4:99:c9:
c8:c1:92:72:9d:6a:0b:dd:b1:43:17:5d:4f:5e:38:c0:04:af:
fb:d8:6e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:02:43 2025 by rpki-client