Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/g_mDeeMiBsxAO1aMYobd6COqAyg.roa
File: g_mDeeMiBsxAO1aMYobd6COqAyg.roa (raw, json)
Hash identifier: C6OmPgZYFNJO1UnyGDjiycVke0+x3UvPSJ7l7B/PjDY=
Subject key identifier: 83:F9:83:79:E3:22:06:CC:40:3B:56:8C:62:86:DD:E8:23:AA:03:28
Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial: 01942445419714D277A722B24DB983C8DA3E
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/g_mDeeMiBsxAO1aMYobd6COqAyg.roa
Signing time: Wed 01 Jan 2025 23:48:26 +0000
ROA not before: Wed 01 Jan 2025 23:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 185.161.151.0/24 maxlen: 24
185.238.177.0/24 maxlen: 24
185.238.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:41:97:14:d2:77:a7:22:b2:4d:b9:83:c8:da:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Validity
Not Before: Jan 1 23:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83f98379e32206cc403b568c6286dde823aa0328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:68:cb:2f:92:51:15:10:d7:43:7d:ac:03:
e5:bd:14:e0:06:22:04:3d:fe:d5:40:db:4c:0a:f0:
35:1b:5a:84:f1:41:d8:dc:6b:c9:84:73:b1:c7:f7:
09:85:a6:cb:80:7f:c8:0c:93:85:5a:29:20:c8:59:
be:a0:29:7b:fd:90:58:26:c7:93:64:de:fb:79:48:
3b:09:f7:3f:1b:6f:70:44:a1:6e:02:89:35:e2:d4:
c6:7f:c1:dc:45:57:97:93:e9:91:9d:a7:74:fc:c3:
89:48:a7:71:20:a1:28:5d:0d:0c:fd:9e:b3:e8:5e:
3e:f2:cb:ea:f2:d8:17:43:f8:c4:a3:ad:ca:51:6b:
7a:25:a3:c7:e4:86:45:da:28:31:73:bb:e6:b5:75:
24:c2:a3:b7:a0:1a:75:82:4d:f0:ac:42:b9:f6:d8:
5c:c2:a1:03:7d:e1:b3:74:00:f7:ec:2a:4b:29:0a:
12:0e:5f:4d:f9:9f:ea:d6:38:d3:cf:95:6b:80:48:
6f:b3:dd:ec:5a:fc:78:99:8d:c7:bf:80:db:8a:e4:
0e:8f:27:95:f1:24:03:a7:01:7e:57:91:d8:fa:f0:
2c:92:a7:8e:c9:3b:fe:6c:21:ad:90:36:74:9c:7f:
4e:d1:19:53:16:32:ca:05:9f:25:80:67:3f:8f:1a:
05:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F9:83:79:E3:22:06:CC:40:3B:56:8C:62:86:DD:E8:23:AA:03:28
X509v3 Authority Key Identifier:
keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/g_mDeeMiBsxAO1aMYobd6COqAyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.151.0/24
185.238.177.0/24
185.238.179.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:18:23:55:ca:7f:d5:82:fb:7d:c3:dd:f9:f1:69:17:93:2c:
3a:4f:0f:ed:9b:b9:9b:dc:f9:9c:c7:03:2a:23:c5:61:6d:7d:
b7:43:d4:6e:e6:d2:77:69:8d:40:2f:c7:87:68:43:e6:01:7a:
73:08:55:05:20:b9:3a:40:04:57:10:df:56:6b:22:26:d9:57:
eb:14:c6:4b:2a:9b:f7:c4:8f:2a:94:11:db:e4:08:9d:81:84:
70:0e:3a:95:8e:bd:e9:8b:a0:6e:5d:4d:23:3d:9c:ea:1e:4a:
8e:ba:da:a8:55:1d:7b:0e:f7:39:db:68:ae:6d:3f:93:5d:56:
06:84:7e:24:65:75:15:eb:9f:8e:a7:72:84:2a:5f:68:f7:bf:
8f:53:fe:7e:3c:70:bc:1a:6f:05:67:2d:4f:3b:7d:e5:cf:53:
7c:e5:38:d8:25:f5:18:d5:51:71:af:64:d5:7b:31:89:53:6e:
72:5c:ce:fc:65:54:b6:c6:93:05:ec:6c:ae:b8:5a:57:53:fd:
30:44:d8:c2:28:08:ed:dd:97:1c:a5:d7:b1:fe:4c:12:63:38:
ab:67:62:8e:67:05:e2:92:5d:ce:0a:62:be:4b:03:b3:8c:e9:
f4:f4:b5:e9:82:ab:cf:f1:11:b9:94:fd:d4:43:05:59:a7:80:
f7:44:4d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:34:55 2025 by rpki-client