Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0hPrpeYeU44Nrvb978W_ItgKBhE.roa
File: 0hPrpeYeU44Nrvb978W_ItgKBhE.roa (raw, json)
Hash identifier: jMt4sCi8hulSH/5X8OLlS2nvMhxSQuKojFBOQFQWH/c=
Subject key identifier: D2:13:EB:A5:E6:1E:53:8E:0D:AE:F6:FD:EF:C5:BF:22:D8:0A:06:11
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01955CDD941DC7F469B7785F58F75D7AECE3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0hPrpeYeU44Nrvb978W_ItgKBhE.roa
Signing time: Mon 03 Mar 2025 16:36:20 +0000
ROA not before: Mon 03 Mar 2025 16:36:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 185.226.104.0/24 maxlen: 24
194.147.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:dd:94:1d:c7:f4:69:b7:78:5f:58:f7:5d:7a:ec:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 3 16:36:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d213eba5e61e538e0daef6fdefc5bf22d80a0611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:16:b5:9d:cb:b9:53:54:0c:5d:d7:12:3c:c8:
5b:92:cd:75:81:6f:ca:bd:37:7e:3c:97:b7:06:c4:
d2:f7:da:81:61:01:4a:23:19:90:18:75:86:0d:3a:
0b:44:46:79:3d:b2:0b:03:56:f4:d0:12:db:b1:38:
da:b4:5e:f4:5a:c5:6f:5b:28:ed:dc:7c:51:89:2a:
5d:31:e1:7f:50:25:ce:f8:2b:83:62:25:94:d5:14:
97:0c:a5:d8:4e:72:4f:05:f0:4e:7f:24:6a:95:72:
bc:6b:ab:f6:00:65:10:12:db:ba:11:70:fe:d2:6a:
02:59:2d:fe:b5:68:1a:59:ab:c3:52:c4:20:6d:94:
28:8d:a8:98:23:5f:00:4f:58:74:57:57:81:d2:13:
a3:a2:63:c6:61:ca:93:a3:2d:ca:03:fb:d0:59:d4:
b3:56:72:2f:59:b4:ec:71:46:4b:37:26:89:71:83:
f3:51:fe:8c:f7:5e:49:13:98:af:07:9e:46:ad:55:
90:7c:bb:ee:22:d2:16:e3:fb:ad:cb:b7:cd:e8:ce:
1b:be:78:3e:7e:a0:62:91:a4:49:25:1b:39:4e:ae:
35:ee:42:1e:2f:bf:96:d6:74:fa:d5:0e:e1:76:20:
28:9c:65:97:e4:1a:21:c3:4a:ae:b6:49:c6:30:88:
5e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:13:EB:A5:E6:1E:53:8E:0D:AE:F6:FD:EF:C5:BF:22:D8:0A:06:11
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0hPrpeYeU44Nrvb978W_ItgKBhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.104.0/24
194.147.16.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:6e:2a:f4:24:01:7e:b3:a3:53:1f:60:ef:02:05:b3:00:57:
44:d2:f7:08:0f:74:9f:2d:b8:69:d5:4b:e7:c5:bf:3c:b1:c8:
9a:d2:06:f0:5f:b4:f2:a5:32:28:58:ca:ab:96:d1:7d:7a:e3:
52:5b:20:b1:d7:ae:66:ca:b7:3c:61:c5:e1:cf:ec:bd:94:f5:
7c:fd:f1:aa:e4:e6:42:66:98:a2:91:c1:e5:f4:87:20:84:bc:
1d:c7:11:af:39:86:a4:df:61:f7:36:1a:64:5a:1c:ab:d2:14:
ef:d7:31:ce:b7:3a:1a:e2:37:65:98:53:55:3e:af:4f:67:f8:
e0:90:14:f9:2e:5c:c8:05:04:f3:88:eb:68:8e:b5:83:71:9a:
aa:dd:2d:f7:72:a0:9b:56:b9:d2:96:fc:d9:13:c8:d9:4f:7d:
56:07:a7:6b:56:35:b9:6b:c5:4f:22:71:e8:97:c4:22:be:58:
83:7c:c0:2f:58:c3:e2:0d:db:a7:27:7c:34:0e:51:3e:71:91:
f0:43:cf:92:58:85:9c:33:ae:ac:48:3d:a0:43:72:1c:23:80:
b9:07:5d:3a:fd:8d:e3:b7:5b:98:67:18:2b:ff:ae:39:06:c4:
73:3d:9b:7a:72:de:92:ae:e1:3f:0b:23:7c:b4:c2:ab:12:7c:
60:e8:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:14 2025 by rpki-client