Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a53873-9a9e-4bbf-aebc-547405b93023/1/RjkJkTocS7KNUiieLoTkt-dUkvA.roa
File: RjkJkTocS7KNUiieLoTkt-dUkvA.roa (raw, json)
Hash identifier: m6507xo02Cg2biiJp7M6viI1/VHCILd0W6wRAcqpd08=
Subject key identifier: 46:39:09:91:3A:1C:4B:B2:8D:52:28:9E:2E:84:E4:B7:E7:54:92:F0
Certificate issuer: /CN=b2c5a81d8fb6e633101c8e9fdef4c283c712061a
Certificate serial: 0195F679C500AC999D4FB4FE93FE9DBEC384
Authority key identifier: B2:C5:A8:1D:8F:B6:E6:33:10:1C:8E:9F:DE:F4:C2:83:C7:12:06:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssWoHY-25jMQHI6f3vTCg8cSBho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a53873-9a9e-4bbf-aebc-547405b93023/1/RjkJkTocS7KNUiieLoTkt-dUkvA.roa
Signing time: Wed 02 Apr 2025 12:28:50 +0000
ROA not before: Wed 02 Apr 2025 12:28:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51377
IP address blocks: 185.210.176.0/22 maxlen: 22
193.221.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a53873-9a9e-4bbf-aebc-547405b93023/1/ssWoHY-25jMQHI6f3vTCg8cSBho.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a53873-9a9e-4bbf-aebc-547405b93023/1/ssWoHY-25jMQHI6f3vTCg8cSBho.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssWoHY-25jMQHI6f3vTCg8cSBho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:79:c5:00:ac:99:9d:4f:b4:fe:93:fe:9d:be:c3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5a81d8fb6e633101c8e9fdef4c283c712061a
Validity
Not Before: Apr 2 12:28:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=463909913a1c4bb28d52289e2e84e4b7e75492f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:63:93:84:b1:14:d8:0c:32:5b:1e:bf:df:
05:8e:4c:a3:87:27:a7:b4:d7:b6:f5:56:e6:6d:22:
30:4b:92:97:17:fe:07:f7:75:0a:22:bf:ba:f2:9d:
cb:f0:a7:2b:e0:2f:3d:db:f5:2c:73:2d:d4:37:1d:
22:45:9a:40:44:e0:65:1a:18:60:7b:08:2e:08:1c:
0f:18:5f:3e:05:2f:a3:69:67:36:ac:ee:bb:65:e4:
a0:69:01:5f:83:63:93:59:4d:16:4c:0e:b0:18:8e:
f3:93:8f:84:13:9a:70:eb:5c:f3:e9:d4:61:bb:bb:
d5:15:8d:e7:52:86:b1:aa:b5:3e:70:62:19:0a:5a:
62:4e:1b:0a:9b:f8:38:68:7f:3c:10:ad:12:3b:d8:
9a:49:cc:ab:20:6d:33:6c:be:28:1d:c8:c2:7d:ab:
fe:f8:10:98:3d:29:68:ca:cd:ba:f1:c2:1b:3a:d9:
77:91:8e:93:34:fa:5a:52:61:28:b6:ad:57:57:1d:
f1:a5:d2:81:65:9c:da:3d:72:02:84:3f:97:ac:33:
c2:21:31:a0:4c:9f:0e:90:8b:0e:21:89:96:b9:04:
76:bc:bb:34:65:1d:8d:6a:88:1c:5e:9a:02:49:60:
0d:5c:cf:72:1e:92:3b:a4:f7:bd:a8:3d:44:5e:6d:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:39:09:91:3A:1C:4B:B2:8D:52:28:9E:2E:84:E4:B7:E7:54:92:F0
X509v3 Authority Key Identifier:
keyid:B2:C5:A8:1D:8F:B6:E6:33:10:1C:8E:9F:DE:F4:C2:83:C7:12:06:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssWoHY-25jMQHI6f3vTCg8cSBho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a53873-9a9e-4bbf-aebc-547405b93023/1/RjkJkTocS7KNUiieLoTkt-dUkvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a53873-9a9e-4bbf-aebc-547405b93023/1/ssWoHY-25jMQHI6f3vTCg8cSBho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.176.0/22
193.221.124.0/24
Signature Algorithm: sha256WithRSAEncryption
63:67:ea:59:14:e0:fc:38:e0:2c:51:ac:ef:82:0f:e9:19:2f:
59:1e:26:97:29:73:94:b8:19:c1:38:f5:cb:d3:e4:ed:58:0d:
15:2d:47:0f:71:b0:ab:11:1b:36:49:59:05:d0:e5:d7:fc:00:
82:06:66:64:25:3b:f6:cb:73:34:41:fc:a8:5e:08:cd:b4:b1:
65:93:7f:88:d0:b6:5e:cc:3e:f9:7c:2a:8a:0d:22:76:5d:2e:
ee:46:30:ae:ee:13:aa:27:47:11:cd:3e:e0:cd:ee:be:8a:1d:
96:5a:6b:49:7e:af:5f:2b:3d:cf:74:fa:9d:8e:e1:c0:19:7e:
3e:80:08:77:2a:b3:1e:64:b5:08:8a:fc:c3:e4:6b:bd:e9:62:
b3:18:9a:8d:a6:46:3f:df:8d:4e:0f:ae:24:a5:dc:eb:10:29:
47:da:f4:78:a9:ed:32:0a:ba:6d:e0:b2:2c:ba:a9:fd:80:60:
a9:1e:10:81:fd:5f:38:fd:ca:81:f3:83:30:82:57:bc:15:b4:
b7:e7:fe:ff:b2:e7:b2:41:07:b3:ce:46:82:3f:d2:4b:31:00:
f8:4d:21:81:0b:b9:8a:06:07:21:80:dc:90:0b:30:e4:d1:cc:
ec:0a:72:b5:8d:75:fc:28:7d:58:90:5b:09:6a:4f:9d:a6:c8:
4b:e2:7f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:11 2025 by rpki-client