Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/1-29V0La4_P0UpNW2hXVyslRw2K4.roa
File: 1-29V0La4_P0UpNW2hXVyslRw2K4.roa (raw, json)
Hash identifier: PRcWahKcQ2LuKI711vQsn8rwzS7rSwXmqcqEY1pScJk=
Subject key identifier: FB:6F:55:D0:B6:B8:FC:FD:14:A4:D5:B6:85:75:72:B2:54:70:D8:AE
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 01942445108F9034EBB7320219A704FA3F4F
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/1-29V0La4_P0UpNW2hXVyslRw2K4.roa
Signing time: Wed 01 Jan 2025 23:48:13 +0000
ROA not before: Wed 01 Jan 2025 23:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.19.12.0/24 maxlen: 24
185.19.13.0/24 maxlen: 24
185.19.14.0/24 maxlen: 24
185.19.15.0/24 maxlen: 24
185.192.156.0/24 maxlen: 24
185.192.157.0/24 maxlen: 24
185.192.158.0/24 maxlen: 24
185.192.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:10:8f:90:34:eb:b7:32:02:19:a7:04:fa:3f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Jan 1 23:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb6f55d0b6b8fcfd14a4d5b6857572b25470d8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:9a:f9:16:40:9a:15:cd:1b:57:3b:4e:3f:
39:80:b2:2c:d4:40:0f:78:18:cb:9a:e2:ea:65:4a:
05:c9:63:83:a2:60:c0:59:00:3b:46:0a:4f:f6:29:
74:7b:25:57:4d:07:c0:c2:eb:2b:86:7e:ce:f2:a4:
e4:17:50:39:d3:6c:dd:b3:49:a6:33:49:a3:e7:13:
65:ce:2a:a5:12:e6:29:fb:3f:83:c2:10:fb:72:10:
35:c8:af:b5:c0:70:9b:13:e0:e4:12:54:2a:2d:ee:
16:f8:95:14:ac:04:54:bb:93:a6:26:b2:65:04:cd:
d6:42:e1:1f:5f:d1:f3:80:85:a5:09:ec:47:38:b0:
26:55:69:c1:78:66:41:92:fd:66:d3:ac:e2:e7:4d:
ba:e7:b4:44:62:04:9b:48:7c:8a:7d:a9:55:1a:ad:
c6:47:10:ab:13:6a:0a:11:ca:32:c6:71:65:14:e4:
fa:1e:92:72:85:90:45:91:1f:34:e9:8c:ee:33:45:
e1:45:19:8a:78:be:52:1a:35:7e:2f:05:8f:d2:84:
10:8b:8d:a9:14:ed:4c:cc:5f:a2:3d:ad:ba:ad:2e:
9b:e0:eb:4b:eb:0c:1b:be:6c:8c:8f:31:80:c9:e7:
7c:94:3e:de:9b:9d:65:07:06:77:96:ec:aa:c8:9b:
a7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6F:55:D0:B6:B8:FC:FD:14:A4:D5:B6:85:75:72:B2:54:70:D8:AE
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/1-29V0La4_P0UpNW2hXVyslRw2K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.12.0/22
185.192.156.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:09:4d:3e:cf:a5:06:74:a2:57:9f:9e:81:88:a8:80:6d:a7:
cf:87:22:94:24:59:e0:02:3a:78:a3:db:a4:a0:48:46:d3:ad:
fc:70:92:26:38:1e:f2:30:96:d5:7c:9a:77:67:f5:b1:d1:87:
73:35:0b:72:e9:15:61:e9:9b:42:ef:f0:4b:55:33:02:23:d5:
78:0c:48:d2:57:4b:34:e0:ea:60:b7:d5:e1:ec:c0:ad:ac:1b:
02:52:47:b4:91:76:08:2f:60:2a:6b:ca:fa:a1:33:65:73:7b:
4a:9a:54:41:a3:d7:b7:c6:db:6d:9a:3d:73:29:21:6b:26:61:
1e:25:04:87:72:1f:8f:29:d1:2a:8e:0d:0d:0d:01:e1:1d:19:
2a:83:cb:79:87:02:05:d9:8f:1c:bd:3b:8a:dd:09:8b:9a:c5:
f5:d7:4d:40:1b:a3:36:c2:95:55:48:a0:7c:ed:3b:ee:ed:52:
35:a7:82:a8:3e:4b:7c:2a:9f:60:fc:48:f6:17:ba:c2:2b:db:
2a:fe:db:4e:96:8c:3b:75:f8:60:50:9f:c9:13:b8:02:3a:b5:
a1:c8:84:be:76:a5:4d:07:16:54:dd:0b:f5:3b:62:68:11:83:
70:05:99:71:64:e4:98:84:e6:18:0e:88:24:7f:37:fd:e6:ca:
c6:f7:87:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:52:07 2025 by rpki-client