Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/Abi5pH7cUtL8rs9zrgavPjQRxnI.roa
File: Abi5pH7cUtL8rs9zrgavPjQRxnI.roa (raw, json)
Hash identifier: 7ApJuHPbwwQ8ZW2QLt3m10DbTaxlvMl9pvX3Esbaw0s=
Subject key identifier: 01:B8:B9:A4:7E:DC:52:D2:FC:AE:CF:73:AE:06:AF:3E:34:11:C6:72
Certificate issuer: /CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Certificate serial: 0194214435C0FC0C3859468C2DFB9B8688A8
Authority key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/Abi5pH7cUtL8rs9zrgavPjQRxnI.roa
Signing time: Wed 01 Jan 2025 09:48:25 +0000
ROA not before: Wed 01 Jan 2025 09:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.235.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:35:c0:fc:0c:38:59:46:8c:2d:fb:9b:86:88:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Validity
Not Before: Jan 1 09:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01b8b9a47edc52d2fcaecf73ae06af3e3411c672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:49:f5:5e:e7:f5:c1:95:6d:8d:8f:a1:c8:e6:
99:89:df:1d:85:14:3f:d6:a1:3f:25:a6:b8:fb:99:
ff:d3:f2:f6:62:c1:ff:89:8d:35:5c:b6:c0:38:97:
cb:c8:f8:f8:af:a3:84:47:91:5a:e2:bb:e2:c6:4e:
df:50:3e:5b:28:53:e7:1a:89:25:56:1c:b0:12:1c:
e1:c0:a0:82:05:db:0f:dd:dd:ed:02:1c:54:23:0d:
be:7f:67:e2:0a:f0:a1:79:21:eb:96:26:70:fd:93:
34:e2:f1:24:6e:64:ce:61:bf:6e:06:df:60:62:44:
93:93:41:2f:22:83:da:c1:13:2b:cb:e8:56:0f:cd:
52:fe:03:e7:13:dd:59:8f:d5:ff:ff:96:f8:b1:bc:
c3:ff:79:58:dc:1f:c4:b5:e8:77:60:4a:87:a8:01:
80:a5:45:7f:9b:f6:74:f8:d0:ad:8c:b3:72:04:de:
0f:e6:0f:7b:87:c9:ca:f1:3b:4d:52:ba:c4:da:c1:
82:65:34:48:72:ca:2f:b7:2d:16:c5:c5:25:fe:41:
b0:85:f2:f3:d6:1a:c5:bf:06:d2:41:3e:83:94:f6:
38:34:0f:81:c7:4e:63:af:3d:93:10:25:47:e9:7d:
31:a0:29:a3:94:93:bc:ce:11:a9:fb:f5:c1:a6:8a:
35:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B8:B9:A4:7E:DC:52:D2:FC:AE:CF:73:AE:06:AF:3E:34:11:C6:72
X509v3 Authority Key Identifier:
keyid:0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/Abi5pH7cUtL8rs9zrgavPjQRxnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.199.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:dc:d5:70:a5:96:f1:19:6b:09:0e:b1:af:d6:4a:0b:6d:97:
0f:b6:d5:39:56:8b:f4:d2:91:40:a7:ff:92:18:74:99:03:7e:
69:66:db:d4:4c:b8:a1:48:f1:dc:9c:c5:d4:a0:8b:92:90:9a:
1d:3f:0e:4c:56:84:07:66:77:53:4f:27:bb:4c:69:6d:61:72:
ea:fe:41:e7:20:a9:eb:5a:b3:c7:b4:7c:03:b2:0b:fc:4f:cf:
df:50:37:d4:22:1c:00:50:72:10:9f:d1:f5:f8:8b:f5:61:3a:
b8:cf:00:c8:b9:44:e5:22:9a:9e:34:b1:67:1d:37:61:69:cf:
a8:26:3d:34:74:c1:ab:fc:dc:23:ec:f4:62:07:e5:76:1b:d0:
b6:70:da:1c:81:81:9b:3a:e6:03:f6:04:66:4e:b8:7c:6e:3c:
59:35:74:fa:cf:a6:a0:1c:6d:6e:1d:61:1b:32:16:55:8a:6f:
29:d0:f7:be:aa:8b:31:3c:9d:c8:32:4c:59:0c:aa:9e:f5:54:
81:dd:e8:0a:d9:87:e2:aa:5a:c0:b0:f3:cf:d6:e7:9d:7c:1d:
fc:52:72:b6:dd:c7:87:8b:9c:42:6b:87:7a:34:77:27:a4:fd:
49:12:cf:2d:52:d6:4e:4f:9b:24:57:d0:c5:ed:c0:89:65:14:
7d:0c:d3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:34 2025 by rpki-client