Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/CxBTWe0phnLQfEvy14KZrA9LaZk.roa
File: CxBTWe0phnLQfEvy14KZrA9LaZk.roa (raw, json)
Hash identifier: dM9wG7UCGb2jgf3z7+woCnj6ywdvLeoZBvHOHvMXmvE=
Subject key identifier: 0B:10:53:59:ED:29:86:72:D0:7C:4B:F2:D7:82:99:AC:0F:4B:69:99
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 019425FC2DB9F74B83BA228FA12B128F4DB3
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/CxBTWe0phnLQfEvy14KZrA9LaZk.roa
Signing time: Thu 02 Jan 2025 07:47:51 +0000
ROA not before: Thu 02 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60847
IP address blocks: 185.218.216.0/24 maxlen: 24
185.218.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:2d:b9:f7:4b:83:ba:22:8f:a1:2b:12:8f:4d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Jan 2 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b105359ed298672d07c4bf2d78299ac0f4b6999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e0:4f:ab:1b:bd:fc:5a:06:ea:f4:20:da:80:
7e:4e:cb:9f:4f:70:cd:07:04:00:74:e6:c9:a6:28:
7c:5d:37:70:92:bf:c5:fb:27:0e:b3:36:95:f5:ac:
f8:b1:fd:0d:fe:a2:0f:ef:73:ba:43:a8:ec:d4:0c:
cd:33:82:0b:a7:48:27:f1:af:9e:27:ac:97:fc:19:
be:6b:4c:ad:1d:d0:01:dc:2a:5a:ff:f5:34:2f:2f:
8d:fe:f2:f2:3d:60:cd:54:3d:db:c0:bc:fc:5c:67:
3a:70:c3:df:9f:e3:ac:2c:93:e9:c6:36:f0:1e:64:
cf:00:6d:4d:8e:dd:dc:4f:a9:2d:1a:9e:64:d7:9f:
c8:cd:12:1f:83:7a:3b:af:ec:4d:96:d7:59:49:bc:
77:3d:01:89:4d:f0:61:62:c0:22:7f:29:ca:17:c5:
26:3d:fc:19:f5:dd:39:1c:c6:2d:c2:b0:c5:e0:96:
80:b2:89:4f:86:5f:20:51:1b:68:71:07:0a:59:24:
d5:09:10:7e:61:6e:de:a2:3a:6a:65:41:66:c9:0c:
14:62:0a:a3:7b:d2:83:22:d0:c6:3f:2a:91:b3:ab:
ef:a6:2b:11:cc:76:a6:8f:bc:e3:58:ca:11:94:fa:
9d:fd:64:f3:e6:ed:07:86:0b:5b:45:f4:dd:48:37:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:10:53:59:ED:29:86:72:D0:7C:4B:F2:D7:82:99:AC:0F:4B:69:99
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/CxBTWe0phnLQfEvy14KZrA9LaZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.216.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:eb:5d:5a:c1:2b:2c:44:d5:b2:96:3b:7c:78:cf:5a:72:06:
ab:77:1f:eb:0c:14:97:bd:35:0b:ca:19:df:db:dd:6a:dd:c6:
d2:bc:38:b9:46:9f:d7:ef:06:62:70:57:cf:5b:70:b9:83:30:
e1:a5:d0:1b:39:52:77:8d:9f:c3:3f:3a:52:50:3f:ae:55:18:
a6:40:cd:a5:10:2e:d1:52:36:0e:a1:78:54:ac:e2:62:1e:69:
67:ef:d8:a5:75:3c:8f:4f:3b:d4:84:a3:46:d2:19:df:21:fb:
03:7a:59:f3:4b:62:10:4f:24:ab:8b:cd:41:4b:98:1a:98:c7:
44:7f:5c:98:aa:cc:d2:ff:5a:d9:e2:c6:3c:1b:61:c4:3a:bd:
19:65:4d:60:32:7c:ff:08:af:00:3a:69:c7:96:77:96:0a:4d:
6b:51:71:47:8a:27:2d:2e:0d:a3:a4:74:b4:81:78:f9:01:60:
be:af:2d:9e:dc:b6:ee:6d:03:67:49:78:b0:e7:22:3e:60:42:
87:93:ef:51:5a:c1:37:88:0b:04:9f:28:5f:34:8b:35:9d:4e:
f5:2f:65:c9:c9:fb:f5:4f:07:3b:aa:06:1d:b0:f4:a9:4e:c4:
2d:09:a8:4a:66:3a:78:58:55:14:a1:18:44:29:d1:77:4a:28:
fe:3f:0b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:05:48 2025 by rpki-client