Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/sFVwAvso2RiBjXQQC5X8xPsYJBs.roa
File: sFVwAvso2RiBjXQQC5X8xPsYJBs.roa (raw, json)
Hash identifier: +5oPRTUTMFR48JZpxxq3OBMXLIXgfURgzHz46nSWc5o=
Subject key identifier: B0:55:70:02:FB:28:D9:18:81:8D:74:10:0B:95:FC:C4:FB:18:24:1B
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019421B257491E76D1267085709DB1327A65
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/sFVwAvso2RiBjXQQC5X8xPsYJBs.roa
Signing time: Wed 01 Jan 2025 11:48:43 +0000
ROA not before: Wed 01 Jan 2025 11:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.126.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:57:49:1e:76:d1:26:70:85:70:9d:b1:32:7a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 1 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0557002fb28d918818d74100b95fcc4fb18241b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:2f:0b:0b:af:31:4b:71:c5:1f:c6:14:66:
b0:bf:08:0e:43:96:03:c7:96:76:7d:67:ba:d2:c9:
65:3e:73:5c:de:85:2c:b6:9d:f9:ce:5e:ac:3a:5c:
7e:9f:43:6b:fd:03:19:39:1d:2b:04:00:df:84:b8:
23:7f:41:84:87:a3:c6:4c:4e:24:32:e7:6a:ba:cc:
9b:05:e8:eb:de:87:c8:b5:53:f5:3a:23:e3:03:a1:
32:8f:b1:aa:92:ec:f6:bb:09:e7:ce:a9:d1:91:fc:
26:0a:46:29:20:97:b6:61:18:88:95:24:18:d7:db:
e1:21:ef:5d:40:99:1f:3f:e2:ac:64:34:34:04:4b:
5e:32:bd:23:6e:8c:72:20:64:f3:53:1e:65:f9:10:
e2:38:73:c8:6b:55:68:07:28:9e:dc:6c:fd:e0:bd:
7d:32:6e:1d:70:b7:b7:da:29:9c:bf:c0:99:bd:cb:
97:e6:4f:fa:8d:3b:ab:51:60:db:7b:b2:d3:c6:36:
fa:23:5d:8e:d0:3e:41:49:ce:67:ae:71:c5:e4:12:
73:d3:bf:57:2d:91:41:aa:9a:4d:bd:41:a7:1f:da:
89:2d:55:01:88:06:5c:5f:ed:a2:88:56:7a:97:f8:
96:9e:1b:ab:c8:6d:be:f2:04:3b:41:69:4d:82:42:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:55:70:02:FB:28:D9:18:81:8D:74:10:0B:95:FC:C4:FB:18:24:1B
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/sFVwAvso2RiBjXQQC5X8xPsYJBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.156.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:08:43:8d:b1:3d:ca:73:e5:18:6c:7d:66:eb:2a:18:2a:ac:
58:77:0c:d6:4a:37:7e:d2:71:dd:bb:c6:93:c8:2a:05:2c:f7:
d8:91:ad:fd:57:f8:70:ee:ea:27:cf:77:b2:39:f3:78:10:f1:
98:4a:50:96:03:ba:63:ea:cb:4f:25:a4:56:c1:9f:0e:d8:99:
e2:78:0e:77:eb:19:5f:54:07:3b:ba:67:98:f2:32:a1:97:e8:
e5:4d:8b:d9:ab:e0:a7:5e:24:86:dc:0b:84:5a:63:e1:aa:90:
6c:85:1a:c1:3e:5e:50:fc:c1:a0:a5:4a:03:2e:6c:ff:ed:51:
e7:8e:a8:2c:b1:97:e5:9b:76:1b:17:0d:d2:20:d6:f1:38:f7:
0a:16:9c:60:bd:3d:cc:2b:f9:eb:ab:11:14:67:e2:e0:14:23:
db:40:c6:96:ee:ba:ad:cc:f0:cf:6c:74:6f:0c:28:a5:5e:93:
7a:7b:38:aa:7d:3b:c2:a5:18:5a:3c:18:b5:c5:03:27:13:54:
75:8f:6f:03:79:40:94:bd:1b:61:fa:f4:ab:c1:5b:66:6a:55:
01:8a:63:89:c5:6d:c0:cd:66:97:a7:37:a0:a4:02:be:35:2a:
04:e7:2d:1c:1c:09:6b:7f:8b:e0:c3:cd:c6:e5:35:80:ae:cf:
83:b5:80:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:33 2025 by rpki-client