Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/dguhelyeA7h-WKBbQzBkNq3_W40.roa
File: dguhelyeA7h-WKBbQzBkNq3_W40.roa (raw, json)
Hash identifier: xeizpLm1WM753pH0+O915Rj+oI7hkint9s/onXzL15U=
Subject key identifier: 76:0B:A1:7A:5C:9E:03:B8:7E:58:A0:5B:43:30:64:36:AD:FF:5B:8D
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 01942825537083BE9C6915131125A5963B63
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/dguhelyeA7h-WKBbQzBkNq3_W40.roa
Signing time: Thu 02 Jan 2025 17:52:02 +0000
ROA not before: Thu 02 Jan 2025 17:52:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214785
IP address blocks: 185.202.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:53:70:83:be:9c:69:15:13:11:25:a5:96:3b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Jan 2 17:52:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=760ba17a5c9e03b87e58a05b43306436adff5b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:99:c8:04:fc:5a:21:cd:b7:e1:c5:81:94:6d:
83:5d:37:79:ee:d0:94:21:6e:cb:31:ba:d4:77:c0:
e3:d9:4e:53:a4:da:fa:ba:ea:04:b0:dd:19:51:09:
5c:1c:eb:22:90:bd:4c:4d:d9:1f:ea:d2:d3:38:74:
35:40:7a:34:a8:f3:46:5f:2b:bd:6f:49:18:d0:97:
b1:2e:37:8f:a6:5e:fb:10:bf:4e:74:ad:e2:e8:33:
a6:54:86:3d:56:1c:24:e3:c7:fa:4a:a7:97:e8:d1:
74:25:ec:56:c7:bd:8f:69:14:ea:57:d3:89:15:09:
a0:ef:99:bc:2c:0b:15:95:ae:87:89:64:22:2e:0b:
b6:32:a7:1e:cf:2c:e5:2c:80:c0:49:26:4d:5d:2d:
5c:a0:39:4c:ef:57:14:55:e1:8c:86:50:8f:47:87:
3a:c8:0c:2f:3d:38:6d:ef:03:6a:a0:38:c5:15:62:
65:0c:3d:71:59:bc:8a:18:92:58:36:b2:62:d2:6e:
a6:b7:ee:f0:0b:dc:77:d1:0a:15:80:64:18:13:90:
8c:4e:93:2f:f2:38:7f:b0:d5:f2:ad:f6:85:be:fb:
4b:6a:30:d1:c2:02:85:bd:51:96:50:23:f4:62:6c:
ea:bf:04:34:81:d4:6b:87:52:9c:09:f0:0b:99:8b:
1f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0B:A1:7A:5C:9E:03:B8:7E:58:A0:5B:43:30:64:36:AD:FF:5B:8D
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/dguhelyeA7h-WKBbQzBkNq3_W40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.100.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:31:5b:07:08:d1:ac:8f:b3:8b:1d:1f:6c:59:17:02:98:81:
e7:aa:af:3b:13:15:3d:3a:60:2c:40:32:35:dc:3c:45:c3:c1:
15:36:ed:f8:b8:e0:18:02:24:1b:7d:f9:7c:45:e6:63:d3:9c:
a2:d8:e5:52:d7:3a:77:82:76:ba:71:f7:cb:65:0e:3f:1c:c5:
31:12:c8:5f:0d:d3:da:31:54:7c:71:89:06:01:d4:53:93:55:
1c:99:59:c2:31:d6:b0:b0:ec:7a:34:5a:7f:40:5f:5c:82:83:
74:15:d4:9e:c2:dd:40:33:6b:3e:3f:c8:b8:37:e8:f4:95:d6:
82:ed:66:39:ff:aa:dd:a7:11:2b:e7:b5:16:be:58:c3:ba:57:
2e:ce:0d:f1:73:a4:9a:90:1c:c0:80:dd:80:91:90:dd:42:fc:
ed:22:77:3e:fb:00:be:75:b0:f1:b9:dc:fb:2e:ba:39:08:07:
64:e7:9b:92:d8:7a:f2:43:ef:97:14:77:f8:0a:ca:6b:80:bb:
a5:f9:83:42:2b:75:58:79:8e:6e:36:65:bd:e9:73:76:e8:78:
94:f0:83:ac:23:94:65:9f:c0:3f:fd:31:82:88:7a:f1:d8:78:
e4:a2:d8:bf:53:63:6c:aa:bf:80:5e:48:87:93:a5:98:cb:51:
11:61:aa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:13:48 2025 by rpki-client