Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/xG2m4O3Ec8nKtJOjwCFJQqNJGtM.roa
File: xG2m4O3Ec8nKtJOjwCFJQqNJGtM.roa (raw, json)
Hash identifier: craC+wIX6RgDFVXZJLTuVHpltgHDojNuxm0azD0e50I=
Subject key identifier: C4:6D:A6:E0:ED:C4:73:C9:CA:B4:93:A3:C0:21:49:42:A3:49:1A:D3
Certificate issuer: /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial: 0194228DF86044BD65C5540624140F43FD40
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/xG2m4O3Ec8nKtJOjwCFJQqNJGtM.roa
Signing time: Wed 01 Jan 2025 15:48:36 +0000
ROA not before: Wed 01 Jan 2025 15:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.187.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f8:60:44:bd:65:c5:54:06:24:14:0f:43:fd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Validity
Not Before: Jan 1 15:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c46da6e0edc473c9cab493a3c0214942a3491ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:12:74:81:6c:08:1c:14:84:93:00:90:b5:
8c:35:7a:6a:c6:6c:70:ea:02:2f:ef:08:3e:cd:51:
4a:55:81:06:6c:54:77:25:d5:a0:33:9f:a0:8b:37:
16:fa:56:aa:d4:b2:39:02:43:0b:49:d1:98:99:6b:
5a:e9:ff:2f:3f:21:4b:d7:03:45:0c:ed:a7:4b:66:
33:4f:08:87:f7:90:57:ab:11:e0:d0:93:2a:bf:39:
d4:0c:b5:2b:76:80:10:b9:ec:02:23:26:81:78:ba:
82:90:6f:eb:e8:71:4e:23:ea:9b:85:a8:fb:c8:b1:
a9:6c:fd:c2:a1:31:8d:ae:16:67:c5:48:fe:82:9a:
c3:4b:38:03:05:47:91:36:e0:b7:83:cc:10:f1:f3:
00:e2:ae:3b:7b:84:bf:1c:03:41:35:78:f5:d3:9f:
02:9e:82:44:19:e6:60:a9:25:a6:7f:68:19:f0:83:
2c:0a:e1:9e:cd:cd:b9:38:0c:81:d6:4c:bf:8a:ed:
ef:8b:4c:4a:91:36:27:69:24:6d:16:d2:d2:c4:52:
50:29:04:3b:b1:6d:0f:2a:ca:34:6e:af:c1:58:88:
12:06:de:58:9a:42:1c:a0:d0:64:a3:36:d8:a8:12:
f4:03:ff:a7:cd:03:e4:79:e0:66:c2:df:db:c5:c6:
68:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6D:A6:E0:ED:C4:73:C9:CA:B4:93:A3:C0:21:49:42:A3:49:1A:D3
X509v3 Authority Key Identifier:
keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/xG2m4O3Ec8nKtJOjwCFJQqNJGtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:d5:98:4a:71:f6:df:b2:52:a6:83:ae:c6:fc:cc:9c:39:e2:
3d:6c:11:50:35:95:78:50:7b:bf:58:0c:52:c2:0c:a1:a7:c7:
70:0a:b6:d1:95:4a:57:13:71:bd:c2:f2:6d:7d:28:1e:69:87:
69:bd:e7:29:22:04:01:4c:aa:86:95:1d:e6:07:39:8f:fc:35:
bd:10:26:91:0e:0d:20:06:ba:3c:a1:38:f3:15:1e:aa:7f:79:
33:1d:1d:77:3f:68:68:38:0e:a2:c1:21:3f:77:d9:fc:b6:3c:
3c:b4:eb:f6:b5:5c:da:0a:66:4d:03:64:a3:03:3e:6f:c6:b1:
d0:77:02:ce:9f:df:35:00:53:b1:c2:83:1c:25:8f:0a:0e:89:
c7:ea:33:1a:7e:67:fe:18:c2:a1:3b:51:33:6d:5b:eb:2c:a8:
c9:40:0c:c7:e3:e2:da:20:2f:71:2b:a5:f2:37:d3:22:d4:7b:
58:14:e7:8c:43:fa:55:82:73:dc:d4:da:f8:08:da:a7:a9:4b:
8f:72:f7:2c:44:37:e3:7f:45:32:de:96:f8:b5:68:26:2c:95:
8a:87:80:e7:38:4e:ec:ea:ce:8e:20:b7:d4:c9:a4:69:01:50:
ed:ae:c4:2a:bd:1e:32:e1:9c:51:ce:4a:07:aa:b1:8b:e1:da:
9f:0c:43:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:24 2025 by rpki-client