Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/RIbTLj7txNwoYxh7oe27Ga8iD9g.roa
File: RIbTLj7txNwoYxh7oe27Ga8iD9g.roa (raw, json)
Hash identifier: b58BSl0OG9Cy3uXrPooEMPlzPzUnf3IVg7gnhdmepqE=
Subject key identifier: 44:86:D3:2E:3E:ED:C4:DC:28:63:18:7B:A1:ED:BB:19:AF:22:0F:D8
Certificate issuer: /CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
Certificate serial: 01966C616B3D518D912CE6481577DC3D68B2
Authority key identifier: F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/RIbTLj7txNwoYxh7oe27Ga8iD9g.roa
Signing time: Fri 25 Apr 2025 09:57:25 +0000
ROA not before: Fri 25 Apr 2025 09:57:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 193.17.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:61:6b:3d:51:8d:91:2c:e6:48:15:77:dc:3d:68:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
Validity
Not Before: Apr 25 09:57:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4486d32e3eedc4dc2863187ba1edbb19af220fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:c5:01:68:7e:70:b5:7d:d6:6c:cd:d7:b4:
ad:6a:0e:2f:d5:7f:5e:89:94:03:a8:ba:90:e4:4f:
90:98:22:e5:bf:30:d7:33:95:c8:64:2c:49:4b:94:
ba:d4:68:0f:20:6e:00:14:1a:c8:e8:a2:25:35:77:
ca:f0:44:64:20:f0:a5:aa:94:a4:7d:a7:0c:38:b5:
6b:e5:31:a2:b7:72:05:85:99:2d:0d:3a:dc:b6:4a:
05:c1:af:c5:c9:49:72:47:84:a1:e4:33:c7:d0:41:
09:61:cc:18:d3:49:d3:68:3b:9d:38:4d:3b:9f:8b:
b6:2e:69:c3:0e:15:e7:0b:0f:7c:15:d5:3c:d0:80:
e3:e0:3a:79:e3:82:51:4b:23:89:69:35:b7:fa:d0:
bc:8e:98:f8:27:f8:b7:b8:27:e1:c3:02:20:e3:eb:
bf:ac:4f:ef:a6:99:49:47:1b:27:aa:d6:83:04:dd:
56:dd:52:39:90:f0:a4:de:5a:20:34:ca:ae:c8:03:
c9:c1:56:12:f1:b8:02:a0:58:85:fd:f7:7c:2f:c3:
af:a0:0e:16:97:3e:5c:50:16:33:73:e6:a5:ff:46:
44:ea:a5:81:bb:27:6e:3f:4f:4a:e6:dc:71:7b:69:
df:dc:2a:c4:43:20:d3:21:9a:ae:6b:b6:8a:be:05:
1e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:86:D3:2E:3E:ED:C4:DC:28:63:18:7B:A1:ED:BB:19:AF:22:0F:D8
X509v3 Authority Key Identifier:
keyid:F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/RIbTLj7txNwoYxh7oe27Ga8iD9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.201.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c8:09:46:00:db:72:f3:49:9e:70:e3:46:98:5a:96:3a:9a:
97:4e:4f:35:a8:d3:25:12:b1:08:8a:59:3a:19:7c:fc:62:a1:
82:e9:58:f0:59:9b:da:da:39:8a:94:ab:e2:8b:92:0e:ba:dc:
94:ee:a7:41:b9:8d:93:f3:f6:fc:11:f0:29:7e:62:63:ea:23:
77:14:51:3c:51:ec:14:89:d0:46:8c:45:11:eb:a1:fd:86:f3:
ea:e1:10:44:53:a6:f9:02:94:5c:b0:29:8b:ee:d8:83:5a:42:
eb:89:23:5e:d1:72:c3:9e:ad:01:c8:4b:0e:20:e1:e6:52:2f:
7a:86:64:50:e6:f5:7d:17:d9:b6:2e:e4:c2:30:60:52:97:e4:
e7:86:67:36:17:a4:af:13:77:4a:72:35:57:d4:44:86:43:c2:
20:ee:9e:67:fd:e0:f8:aa:85:a4:7b:79:a8:2f:63:f4:5e:68:
82:80:5c:56:35:ed:7f:13:a0:4c:b5:7e:e3:4b:03:54:92:12:
e5:c1:30:03:18:1f:d6:c7:92:94:0d:71:0e:bd:db:44:ea:21:
c4:65:cc:e1:91:55:32:2f:44:81:58:57:c7:c1:da:8c:3d:48:
f4:dc:c9:eb:14:f0:c2:21:01:4b:32:d8:a9:16:88:ec:1b:d1:
cc:02:94:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:08:10 2025 by rpki-client