Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/tPeq-jjd1LfJCGPS7kRFioCnf1s.roa
File: tPeq-jjd1LfJCGPS7kRFioCnf1s.roa (raw, json)
Hash identifier: IHjSVV+vrTNKBQIJ5PbeYeBS76QGn2Ghw7Cv5izSDhQ=
Subject key identifier: B4:F7:AA:FA:38:DD:D4:B7:C9:08:63:D2:EE:44:45:8A:80:A7:7F:5B
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 0194266C0425EB8A0AA91FDCCCCF402601E9
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/tPeq-jjd1LfJCGPS7kRFioCnf1s.roa
Signing time: Thu 02 Jan 2025 09:50:00 +0000
ROA not before: Thu 02 Jan 2025 09:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.150.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:04:25:eb:8a:0a:a9:1f:dc:cc:cf:40:26:01:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Jan 2 09:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4f7aafa38ddd4b7c90863d2ee44458a80a77f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:b1:02:e1:fb:a1:a1:2b:8f:fa:b6:79:40:
05:33:d1:b5:5c:ce:f3:69:64:a0:d7:ef:28:6e:2a:
a8:9e:fe:48:e6:9e:10:da:ea:75:4f:20:d2:54:68:
9f:4f:f1:68:f6:00:25:3d:99:ca:4f:0a:cb:9d:bb:
c1:8d:55:19:19:33:e8:05:c3:93:b4:1a:9d:29:5a:
8a:74:1f:15:8b:f7:9b:6c:8f:a7:a5:86:79:58:61:
01:14:dc:73:e0:ae:dc:bf:69:94:3e:2e:91:24:a0:
7a:c4:d1:5c:a9:38:bf:8a:1b:bd:f5:ae:90:66:7a:
24:02:1d:d5:83:25:bc:ea:0f:b8:ef:0e:aa:13:e2:
bc:dc:d8:16:cd:db:e5:f6:67:5c:dd:55:c1:d4:56:
d2:ac:99:b6:d0:c0:22:c1:b9:9b:3e:ea:3a:5f:26:
5f:8b:e5:18:7c:94:f8:37:86:14:42:ca:20:1c:0c:
72:b2:47:77:44:6d:70:5c:fd:1f:e0:8e:44:54:2a:
af:3e:ed:1e:29:fa:e0:c2:cf:a0:70:fa:7d:42:c8:
b7:bb:51:8a:e2:ca:fe:91:9b:00:7a:95:b6:70:a8:
e9:4c:f6:c7:73:71:01:49:8d:70:b7:e9:9f:7f:33:
57:95:e4:4c:df:c2:eb:a0:a0:12:e7:55:4e:a8:42:
f5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F7:AA:FA:38:DD:D4:B7:C9:08:63:D2:EE:44:45:8A:80:A7:7F:5B
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/tPeq-jjd1LfJCGPS7kRFioCnf1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.179.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b1:a0:91:ce:8b:ac:4a:c2:f5:38:a6:92:5a:72:61:e0:2d:
2c:15:e1:3f:1d:7e:0c:cb:f9:4d:f7:09:dd:6b:e5:59:17:d1:
6b:8d:41:a0:d4:df:e0:16:52:2a:03:af:10:d6:ef:21:a9:22:
c0:25:4b:ef:2b:5a:a1:b1:9d:bd:75:09:b3:2f:72:7c:ec:7b:
95:15:ff:82:db:18:04:a8:75:6b:14:4c:23:d4:8c:14:b9:a8:
ed:b0:b3:04:d2:70:de:ad:db:62:45:01:78:81:fe:81:af:ba:
35:f7:9a:b3:52:0c:ec:bb:c2:69:f2:3e:73:d0:0d:20:68:93:
5a:9c:24:29:5a:1d:e3:eb:d8:6c:78:48:64:9f:bc:4b:71:fe:
3d:64:b4:95:f3:1c:26:58:cc:82:3e:84:b4:fb:2a:f9:92:e7:
ab:e4:88:8c:ec:d1:c6:9c:17:f1:ca:e3:ec:f6:35:f2:88:a2:
aa:8b:9a:48:4e:59:f8:31:43:1e:be:88:45:c2:a5:73:94:6b:
ed:72:a8:0b:40:49:a2:0e:32:6f:e3:77:63:e0:34:32:04:e7:
87:93:d5:8e:e1:9c:14:28:59:2c:08:7b:c2:08:9d:03:81:35:
d3:da:46:60:a9:b9:20:d2:5c:34:4e:58:7f:a9:59:40:6f:12:
1f:d6:a5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:32 2025 by rpki-client