Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/gEUoWtci9gDrlWD7_2HBRPHc3Kk.roa
File: gEUoWtci9gDrlWD7_2HBRPHc3Kk.roa (raw, json)
Hash identifier: m0n0mKFLG+q3BgRaxr/RvXon3zAIOWdnRruNeP120aw=
Subject key identifier: 80:45:28:5A:D7:22:F6:00:EB:95:60:FB:FF:61:C1:44:F1:DC:DC:A9
Certificate issuer: /CN=15b595260f72c222547ac3e367f2c887ae38a3fc
Certificate serial: 0194266AFFDF86E1F8ABCEC21AEB63FCCFDF
Authority key identifier: 15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/gEUoWtci9gDrlWD7_2HBRPHc3Kk.roa
Signing time: Thu 02 Jan 2025 09:48:54 +0000
ROA not before: Thu 02 Jan 2025 09:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205665
IP address blocks: 185.209.232.0/22 maxlen: 22
185.209.232.0/24 maxlen: 24
185.209.233.0/24 maxlen: 24
185.209.234.0/24 maxlen: 24
185.209.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:ff:df:86:e1:f8:ab:ce:c2:1a:eb:63:fc:cf:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15b595260f72c222547ac3e367f2c887ae38a3fc
Validity
Not Before: Jan 2 09:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8045285ad722f600eb9560fbff61c144f1dcdca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:27:24:eb:a9:b0:e7:b6:a8:18:32:d9:9d:
4e:eb:1e:6c:70:b1:96:17:b4:6b:df:33:bc:d1:7f:
36:b9:fb:09:64:ea:d6:3c:f2:0e:a8:f2:55:03:f0:
5d:c8:2e:8d:81:f9:f7:2d:e3:6b:b8:ac:d6:e5:f9:
cf:b1:01:d7:71:95:a1:7c:38:ab:a6:38:22:20:8b:
24:84:e3:81:f8:ef:33:67:3a:c1:dc:40:42:00:66:
86:90:e8:3e:36:6f:0f:dd:ba:d8:3f:de:2c:1a:ab:
bf:ea:41:63:b3:18:dd:f0:87:89:b4:96:46:95:d0:
58:74:05:29:a0:5d:cc:4f:69:c6:38:31:6e:be:32:
71:41:7a:79:b2:0d:19:17:fa:46:af:0d:5b:6d:e2:
c3:71:d8:d6:8d:90:bb:b9:5d:08:42:a3:7b:2b:03:
11:5b:0b:d5:7a:86:10:3f:a9:da:0f:49:64:38:93:
20:73:7b:10:6c:47:5d:67:3d:c7:c7:6d:fd:fe:2d:
28:df:3d:1b:ab:a9:36:c6:ec:93:5b:e0:af:7a:85:
17:27:a9:b8:2b:35:f1:f3:95:7a:08:fa:71:79:ee:
0f:55:d5:e2:af:5a:b2:8b:57:55:53:65:f3:bf:de:
13:f1:94:e2:cd:1a:52:3c:85:91:91:93:5c:df:0d:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:45:28:5A:D7:22:F6:00:EB:95:60:FB:FF:61:C1:44:F1:DC:DC:A9
X509v3 Authority Key Identifier:
keyid:15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/gEUoWtci9gDrlWD7_2HBRPHc3Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
ce:a7:60:12:92:ea:39:58:58:61:d0:b1:4f:66:13:3d:bc:59:
6c:8d:a7:15:f4:44:7d:bb:d8:55:73:72:ba:7e:c0:00:0f:6f:
34:78:be:f1:e2:52:26:71:ea:22:bf:41:f6:4d:28:cf:81:f1:
d9:51:41:f9:91:a6:d0:e3:77:9c:23:22:d0:e4:af:f2:70:dc:
de:c4:b3:08:40:d2:dd:27:40:b6:2c:95:de:7a:31:92:5f:6c:
c2:6b:40:29:20:c2:ab:a2:ca:bc:a6:83:d3:e4:bd:57:25:95:
82:29:46:6a:16:fe:8a:3a:7d:90:5d:ce:67:ca:c3:69:2c:35:
5a:94:07:59:78:96:e7:99:7c:71:74:6b:e9:2a:0d:f0:82:89:
6b:35:86:df:87:af:25:ad:30:e7:24:e4:a7:27:37:90:b0:33:
b5:4d:69:c4:4e:c6:b0:4c:47:ad:20:a3:30:3d:6d:27:3a:95:
a5:88:23:5b:f8:5e:26:05:6d:e0:c6:f4:82:01:17:73:98:34:
fa:17:39:26:2d:ec:b5:c8:47:2a:a8:65:e8:1f:a5:e4:45:39:
ff:7a:9c:16:5c:9b:46:5b:25:c7:64:b1:83:a8:18:9c:ea:3a:
d6:3e:6a:94:e9:1f:b9:12:fc:37:27:00:8f:83:4c:44:92:77:
43:08:34:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:04:59 2025 by rpki-client