Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/053VQxunxAeUFWyp53gx-beqwOw.roa
File: 053VQxunxAeUFWyp53gx-beqwOw.roa (raw, json)
Hash identifier: 7JicntomGJy1FdKv/+65cawmZt1C37Ox3QqgLF1dC6U=
Subject key identifier: D3:9D:D5:43:1B:A7:C4:07:94:15:6C:A9:E7:78:31:F9:B7:AA:C0:EC
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 01964E2BB8F1A4904C0F158D3806D789A8A0
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/053VQxunxAeUFWyp53gx-beqwOw.roa
Signing time: Sat 19 Apr 2025 13:10:10 +0000
ROA not before: Sat 19 Apr 2025 13:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 194.33.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:2b:b8:f1:a4:90:4c:0f:15:8d:38:06:d7:89:a8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Apr 19 13:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d39dd5431ba7c40794156ca9e77831f9b7aac0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:c8:1b:85:86:54:90:a5:2e:7e:78:10:35:
77:90:f3:3e:65:0f:3c:20:64:97:80:fa:b0:83:9c:
58:37:20:d2:71:21:fe:67:f4:90:69:83:f4:20:e2:
60:4c:8f:1b:d9:de:29:7f:7b:4f:fb:7a:52:cf:17:
c2:b0:d3:80:72:b6:32:0a:38:3a:48:bf:f1:16:76:
da:e3:76:5b:bf:2f:b1:28:f5:ab:f0:7e:57:a2:29:
60:99:76:b5:d3:5c:13:4d:4e:f5:87:0e:d3:2b:f0:
a4:86:d2:b9:fa:cb:78:3f:1b:dd:b2:56:40:33:98:
bf:94:6c:3a:69:52:1f:98:64:d6:b9:02:4f:cc:1e:
3a:cf:64:f1:7f:68:ef:b3:19:f3:ea:30:2a:35:8a:
ea:47:e3:f9:a6:da:16:31:84:43:04:78:36:f9:9d:
3c:59:c0:5b:07:8d:22:6c:c3:4f:7d:c2:9a:c0:61:
c3:97:2c:9f:e7:7c:8b:37:f0:35:19:a7:99:06:71:
57:16:f1:03:9c:ed:80:89:a1:f3:34:d2:3a:16:ae:
82:46:c7:38:fe:25:e2:18:3a:82:f1:b9:29:f3:1e:
52:33:89:5e:e3:bf:cc:36:98:6b:f3:69:65:c1:11:
4d:bc:55:f2:08:fb:19:53:4c:e2:ff:23:79:82:0e:
40:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9D:D5:43:1B:A7:C4:07:94:15:6C:A9:E7:78:31:F9:B7:AA:C0:EC
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/053VQxunxAeUFWyp53gx-beqwOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.109.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:20:0f:2c:38:24:62:8f:74:c4:db:a8:b0:4a:5e:53:34:c2:
26:b0:31:10:33:8d:b0:52:fa:56:4f:e7:d9:46:c9:0a:2b:7d:
a8:d4:d9:21:24:8b:0f:c2:61:8a:00:8c:c7:13:cb:72:ef:8e:
47:29:b4:9d:91:90:f7:6a:8a:89:79:ad:b1:2f:0c:0b:f1:17:
85:ca:96:74:b1:18:c1:9b:59:bd:93:da:53:f6:52:34:c7:45:
9c:76:a2:8b:75:f2:b3:55:0f:c0:d5:30:31:1c:de:6c:d6:19:
19:c2:97:63:23:23:39:75:bb:09:c4:cc:ae:58:c8:88:f3:a4:
a2:05:21:f2:51:bb:a8:e2:a9:57:6a:66:b6:d8:92:32:52:93:
a0:dd:79:cc:4c:6d:0a:be:bb:77:41:79:7b:47:f0:01:f6:2e:
b2:32:a7:ec:a0:d7:d4:ca:c6:d1:8b:0b:06:76:04:b9:4e:3f:
61:ae:2a:62:df:ef:23:99:eb:08:c0:71:06:93:9a:cb:9b:92:
ec:ff:48:6f:87:c7:a7:08:87:c5:e7:53:1f:39:f9:02:ae:06:
22:b0:df:8a:d2:24:2a:c3:b6:aa:dd:dc:cd:0b:ae:41:1b:8e:
51:05:c0:89:ed:2f:f5:e0:85:3d:0a:31:b8:24:bb:df:cd:ca:
a1:8d:10:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:05:01 2025 by rpki-client