Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RocZhE1Sgw4wWmm8LnKO4d7f68w.roa
File: RocZhE1Sgw4wWmm8LnKO4d7f68w.roa (raw, json)
Hash identifier: +rys+d7y9dD2VIYL252iXtWKGL/n4lME4L1WtriVBxI=
Subject key identifier: 46:87:19:84:4D:52:83:0E:30:5A:69:BC:2E:72:8E:E1:DE:DF:EB:CC
Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial: 0194228DD177215456CFD52475A234ED1D63
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RocZhE1Sgw4wWmm8LnKO4d7f68w.roa
Signing time: Wed 01 Jan 2025 15:48:26 +0000
ROA not before: Wed 01 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31313
IP address blocks: 188.213.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d1:77:21:54:56:cf:d5:24:75:a2:34:ed:1d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
Validity
Not Before: Jan 1 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=468719844d52830e305a69bc2e728ee1dedfebcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:e3:e6:f2:62:8f:a7:2b:dd:c0:4e:35:94:
21:8c:7d:51:b8:a9:b5:cc:46:35:c6:fd:6b:0b:8e:
39:c4:1f:3c:80:fe:57:8d:79:ae:22:14:fe:60:d5:
00:d2:02:26:9c:4c:d0:2f:c7:8b:bd:dd:39:e0:bc:
ff:37:66:70:35:52:9d:d2:62:1e:77:76:c5:4f:7c:
28:c4:69:a0:f6:c4:39:74:ce:ea:a1:85:75:5c:0f:
b9:78:c9:53:24:68:0d:5e:1c:38:9c:6a:b6:35:64:
13:a2:2e:8c:60:aa:9c:4c:3b:19:a8:02:bc:da:52:
0b:58:31:25:07:8a:84:ae:60:38:62:29:ef:e7:46:
05:e3:d8:39:cc:65:4c:db:91:14:86:cc:a1:08:9e:
f1:74:b6:cf:dd:4b:63:05:d1:17:df:33:71:30:e8:
38:21:a0:4c:25:d6:58:f6:cb:3f:cb:c2:27:c5:1b:
d7:fe:17:f1:b4:fb:a0:00:2c:8d:b7:11:67:5e:89:
19:30:c6:d6:92:76:52:b9:c5:a8:d5:eb:45:cc:a9:
4b:86:d8:97:18:50:f2:2e:a2:e6:ad:ca:aa:89:08:
d5:4e:28:69:0c:09:25:ee:0f:55:58:90:7b:c0:62:
e3:eb:ca:cf:81:01:4d:49:d6:85:85:ce:98:00:b9:
c1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:87:19:84:4D:52:83:0E:30:5A:69:BC:2E:72:8E:E1:DE:DF:EB:CC
X509v3 Authority Key Identifier:
keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RocZhE1Sgw4wWmm8LnKO4d7f68w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.35.0/24
Signature Algorithm: sha256WithRSAEncryption
41:16:5b:2e:17:a6:f6:bd:0e:58:e6:f0:39:62:7c:68:38:57:
9b:ee:08:eb:db:21:21:15:e0:63:f8:a4:5f:47:d1:47:89:13:
23:2c:29:18:18:ef:9a:bb:4a:ea:9d:a9:b8:69:9f:62:c3:0b:
3f:a0:37:f7:c5:79:4f:7b:43:d5:1d:5a:83:93:c5:ff:fa:76:
89:f2:ff:e0:ec:4d:f4:62:ac:3b:bf:bd:a4:07:85:8c:97:c6:
fa:af:36:5c:e0:c0:b7:66:de:47:3a:7d:ea:e5:e4:77:ef:50:
28:ed:d8:b0:b2:3f:86:7e:13:08:4c:c7:3e:2c:76:4b:06:e2:
72:a0:7e:7e:0b:55:64:bf:ed:23:23:f9:af:9d:a8:54:eb:85:
c2:d5:a8:6f:53:d2:20:4a:aa:93:ef:61:14:e5:ba:f5:c1:e0:
92:e4:26:10:57:a8:26:5f:1f:39:d2:fe:9c:bf:0c:64:6f:30:
4d:a3:d4:b0:47:7f:91:f0:1b:bb:3b:bf:a6:1f:a6:29:b4:ce:
0b:d5:c6:9a:e2:e5:75:d2:a5:21:76:51:5a:1d:30:a5:86:df:
49:5a:3d:97:8f:eb:7b:51:2e:4f:33:2a:f2:55:59:37:54:7c:
e2:ea:17:05:e6:8a:d8:37:6f:77:13:27:e9:16:6b:65:db:97:
65:56:cc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:06:30 2025 by rpki-client